Privacy Policy

Babliy ("we," "us") provides tools for WhatsApp commerce. For privacy questions contact hello@babliy.ai.

When you use Babliy for your shop, you are the data controller for your end-customers' personal data (names, phone numbers, messages, orders). You decide what data is collected and how it is used in your business.

Babliy is a data processor.We handle data only to provide, secure, and improve the service you configure. We do not decide why your customers' data is collected or how you use it in your business.

• Account and billing data: name, email, store name, password (stored hashed), team membership, and subscription details.
• Content you connect: WhatsApp phone number IDs, message content, delivery status, product catalog, orders, and settings you configure in Babliy.
• Technical data: logs, device and browser type, IP address, and how you use the dashboard.
• Payment data: processed by Stripe; we do not store full card numbers.

We use data to:

• Run the service: inbox, AI replies, catalog, orders, and team handoff as you configure.
• Bill your subscription and prevent fraud.
• Secure Babliy, fix bugs, and improve reliability.
• Send service emails (password reset, security alerts, billing notices).
• Comply with law and respond to valid legal requests.

We do not sell your personal information. We do not use your customer chats for advertising. We do not share your data with third parties for their own marketing.

Babliy staff do not routinely read your message content or customer conversations. Data is processed automatically by our systems to deliver the service.

We may access specific data only when:

• You contact us for support and ask us to investigate a specific issue.
• We need to respond to a security incident or abuse report.
• We are required to do so by law or a valid legal process.
• We use aggregated or anonymized data to understand product usage (no individual customer identity).

When you enable AI features, message content is sent to third-party AI providers solely to generate replies on your behalf. We do not use your data to train unrelated models for other customers. AI provider policies may apply; contact us if you need details on current providers.

Where GDPR applies, we process data based on contract (providing the service), legitimate interests (security, product improvement), consent (where we ask explicitly), and legal obligation.

We share data only as needed to run Babliy, including with:

• Meta / WhatsApp for messaging and Business Platform APIs.
• Infrastructure providers such as Supabase for hosting and database.
• Stripe for payment processing.
• Google if you choose social login.
• AI providers when AI features are enabled.

These providers process data under contracts that limit their use to providing services to Babliy. Email hello@babliy.ai for the current sub-processor list.

You must have a lawful basis to message and store data about your customers, including compliance with WhatsApp and Meta policies. Babliy processes customer data only on your instructions through the service you configure.

We keep account and message data while your account is active and for a reasonable period afterward for backups, disputes, and legal requirements. You may request deletion subject to limits (e.g. messages already delivered to customers or records we must keep by law).

We use encryption in transit, access controls, and industry-standard practices. No system is 100% secure; notify us promptly at hello@babliy.ai if you suspect unauthorized access.

Depending on your location, you may have the right to access, correct, delete, or export your data, and to object or restrict certain processing.

To exercise these rights, email hello@babliy.ai. You may also lodge a complaint with your local data protection authority.

We use essential cookies and local storage for login sessions and preferences (e.g. language). Optional analytics cookies, if used, will be disclosed in-product when enabled.

Babliy is for businesses, not children under 16. We do not knowingly collect data from minors.

Data may be processed in Morocco and other countries where our providers operate. We use appropriate safeguards where required by law.

We may update this policy. We will post the new date at the top and, for material changes, provide notice in the app or by email. Continued use after changes means you accept the updated policy.

See also our Terms of Service.