Privacy Policy

Who we are and when this policy applies

BIPR is a Customer Communications Platform. For questions about this Policy or the identity of the entity responsible for a particular processing activity, contact [email protected].

BIPR acts as a controller for information collected directly through this website, account administration, billing, and our own service operations. When a customer organization uses BIPR to manage its customer communications, that organization normally decides why and how the communication data is processed, and BIPR processes that data on its behalf.

Information we collect

We may collect contact and enquiry information, including your name, work email, company, phone number, selected topic, and the message you submit through our contact form.

When the service is used, we may process account and workspace information, authorized-user details, organization settings, subscription and billing records, support requests, and security or audit events.

When an organization connects a Meta or WhatsApp Business account, BIPR may process information made available through the authorized integration, including business account and phone-number identifiers, contacts, message content and attachments, message status, timestamps, conversation metadata, templates, and related operational records.

We also receive limited technical information needed to operate and secure the service, such as IP address, browser and device information, request logs, error data, and language preference.

How and why we use information

We use information to respond to enquiries, create and administer accounts, provide shared inbox and communication features, deliver and receive messages requested by an organization, provide support, secure and troubleshoot the service, comply with law, and improve BIPR.

Depending on the context, processing is based on performing a contract or taking requested pre-contract steps, complying with legal obligations, our legitimate interests in operating and securing BIPR, consent where required, or the instructions and lawful basis established by the customer organization that controls the communication data.

We do not sell personal information and we do not use customer message content for third-party advertising.

Meta and WhatsApp Business data

BIPR accesses Meta and WhatsApp Business data only after an authorized organization connects its account and grants the required permissions. We use this data to provide the connected communication features requested by that organization and in accordance with applicable Meta terms and policies.

The customer organization retains ownership and control of its Meta Business Account, WhatsApp Business Account, WhatsApp phone number, and Meta billing relationship. Meta processes information under its own terms and privacy policies. Disconnecting an integration stops new data from being received but does not automatically remove records already required for the BIPR workspace, legal compliance, or security.

Sharing and service providers

We may share information with providers that support hosting, infrastructure, email delivery, customer support, security, fraud prevention, payment processing, and other necessary operations. They may process information only to provide their services to BIPR and under appropriate contractual safeguards.

Information may also be shared with Meta when needed to operate a connected Meta or WhatsApp Business integration, with a customer organization and its authorized users, during a business reorganization, or where disclosure is required to protect rights, safety, security, or comply with law.

International transfers

Some providers or connected platforms may process information outside the country where it was collected. Where required, we use recognized transfer mechanisms and appropriate safeguards for international transfers of personal data.

Retention

We keep personal information only for as long as needed to provide the service, fulfil the purposes described here, meet contractual and legal obligations, resolve disputes, and maintain security. Retention periods depend on the type of information, the customer organization’s instructions, and applicable law.

Deleted information may remain temporarily in restricted backups until those backups are securely rotated. We may retain limited records where required by law or needed to establish, exercise, or defend legal claims.

How to request deletion

To request deletion of information associated with BIPR or a connected Meta account, email [email protected] with the subject “BIPR Data Deletion Request”. Include the email address used with BIPR and enough information to identify the relevant account or organization. Do not send passwords, access tokens, or unnecessary sensitive information.

We may need to verify your identity and authority before acting. If the information is controlled by a BIPR customer organization, we may direct the request to that organization or work with it to complete the request. We will delete or anonymize information that is no longer required and confirm the outcome, subject to lawful retention requirements.

Your privacy rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing, obtain a portable copy of information, and withdraw consent. You may exercise these rights by contacting [email protected].

You may also lodge a complaint with your local data protection authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

Cookies and local storage

BIPR uses a necessary language-preference cookie and mirrors that choice in browser local storage. The contact form may use Cloudflare Turnstile to detect abuse and protect the website. Any future non-essential analytics or advertising technologies will be disclosed and, where required, presented with appropriate choices.

Security and children

We use reasonable technical and organizational measures designed to protect information. No online service can guarantee absolute security, and users must protect their credentials and promptly report suspected unauthorized access.

BIPR is a business service and is not directed to children. We do not knowingly collect personal information directly from children through this website.

Changes and contact

We may update this Policy when our service, integrations, or legal obligations change. The date above identifies the latest version.

For privacy questions, rights requests, or data deletion requests, contact [email protected].