Privacy Policy

Burbuxa, operated by Alacua LLC (a Delaware limited liability company, "Company", "we", "us", or "our"), is committed to ensuring the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect the information you provide to us when using our platform and services, including AI-powered WhatsApp and e-commerce tools.

By using our website, platform, or services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Should you have any questions or concerns, please contact us at:
Help Center: help.burbuxa.com

1. Scope of This Privacy Policy

This Privacy Policy applies to all users of our services, including our business-to-business (B2B) customers and the end customers whose data you process through our platform. It covers data collected through our website, applications, and related services.

2. Information We Collect

A. Information Collected from You (Our Business Customers)

Personal Information: Your name, company name, business address, email address, phone number, and payment information.

Technical Information: Browser type, IP address, operating system, device information, and metadata related to your interactions with our platform.

Account Activity: Records of your usage of our platform, including login information, transaction history, and service preferences.

B. Information Collected from Your End Customers (Data You Provide to Us)

E-commerce Data: Product listings, order history, subscription details, and pricing.

Customer Information: Your end customers' contact information, purchase history and details, communications, and activities within your platform, including emails, phone numbers, order statuses, and engagement metrics.

We collect this information through automated means (e.g., cookies, tracking technologies) or directly from you when you provide it through the use of our platform.

3. Purpose of Data Collection and Processing

We collect and process your data to ensure the proper functioning of our services and to enhance your experience. Specifically, we use your information for the following purposes:

• Service Delivery: To manage your account, process payments, provide CRM, sales, and marketing automation services, and support e-commerce integrations.
• Platform Analytics: To assess performance, identify usage patterns, and optimize the platform's functionality for user needs.
• Marketing Communications: To send you relevant information about our services, including promotional offers, service updates, and industry-related insights (with your consent where required by law).
• Security and Compliance: To verify your identity, prevent fraud, ensure compliance with legal obligations, and safeguard the integrity of our platform.
• AI-Powered Tools: To enhance automated features such as customer management, sales, and marketing optimization. While we use your data for these purposes, it is not used for external AI model training unless otherwise explicitly stated and consented to.

4. Data Sharing and Disclosure

We do not sell or rent your personal data. However, we share information with trusted third-party service providers to deliver, maintain, and improve our services. These third parties include:

• Google (cloud services and analytics)
• Digital Ocean (infrastructure hosting)
• Meta (for WhatsApp integration and advertising)
• Gupshup (for WhatsApp messaging services)
• Stripe (for payment processing)
• Intercom (for customer support and communication)

These providers process your data only to the extent necessary to provide their services and are contractually bound to protect your information under strict data protection obligations, including compliance with GDPR, CCPA, and other applicable regulations.

5. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention policies include:

• Customer Data: We retain personal data associated with your account for the duration of your contract and for two years thereafter, unless otherwise required for legal or regulatory purposes.
• End Customer Data: Data you process through our platform on behalf of your end customers will be retained in accordance with your instructions and subject to any applicable legal requirements.

Upon expiration of the retention period, or upon your verified request, we will securely delete or anonymize your personal data.

6. Your Data Protection Rights

As a customer, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to correct any inaccurate or incomplete data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to legal requirements that may mandate continued retention.
• Right to Restrict Processing: You may request that we limit how your data is processed under certain conditions.
• Right to Data Portability: You may request that we transfer your data to another data controller in a commonly used format.
• Right to Object: You may object to the processing of your data under certain circumstances, including direct marketing.

To exercise your rights, please contact us via help.burbuxa.com. We will respond to your request in accordance with applicable data protection laws.

7. Cookies and Tracking Technologies

Our website and services use cookies and other tracking technologies to collect information about your online activity. We use the following types of cookies:

• Strictly Necessary Cookies: These are required for the proper functioning of our platform.
• Performance Cookies: These help us understand how users interact with our platform, enabling us to improve performance.
• Advertising Cookies: These allow us and our third-party partners to deliver relevant advertisements to you based on your online behavior.

You can control your cookie preferences through your browser settings. Please note that disabling cookies may limit certain features of our platform.

8. Data Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Data Encryption: All sensitive data is encrypted both in transit and at rest.
• Multi-Factor Authentication (MFA): We require MFA for account access to add an extra layer of protection.
• Secure Infrastructure: Our data is hosted on secure, ISO-certified cloud servers with stringent security protocols.
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments to maintain the highest level of protection.

While we take every reasonable precaution to protect your data, no system is completely secure. By using our platform, you acknowledge that any transmission of personal data carries inherent risks.

9. International Data Transfers

We may transfer your personal data to, and process it in, countries outside your home jurisdiction, including the United States and other locations where our third-party service providers operate. When transferring data internationally, we ensure that safeguards such as HTTPS are in place.

10. Children's Privacy

Our platform is designed for business use and is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take immediate steps to delete it.

11. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our services, legal obligations, or privacy practices. We will post any updates on our website and update the "Last Updated" date accordingly. Continued use of our services following any updates constitutes your acceptance of the revised policy.

12. Governing Law and Dispute Resolution

A. Arbitration

In the event of a dispute arising out of or relating to this Privacy Policy, the parties agree to resolve the dispute through binding arbitration in accordance with the rules of the American Arbitration Association. The arbitration shall be conducted in Delaware, and the decision of the arbitrator shall be final and binding.

B. Governing Law

This Privacy Policy and any disputes related thereto shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of law principles.

C. Jurisdiction

In the event that arbitration is deemed unenforceable, you agree that any claims arising from this Privacy Policy shall be brought exclusively in the state or federal courts located in Delaware.

13. Severability

If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be deemed modified to the minimum extent necessary to make it enforceable. If such modification is not possible, the offending provision shall be deemed severed, and the remaining provisions of this Privacy Policy shall remain in full force and effect.

14. Contact Information

If you have any questions or concerns regarding this Privacy Policy, or if you wish to exercise any of your rights, please contact us:

• Help Center: help.burbuxa.com
• Email: [email protected]