Privacy Policy

1. Who this policy covers

It covers visitors to beecasts.com, people who contact us, and customers and their team members who use the Beecasts console and API.

When a customer uses Beecasts to message its own customers, the customer decides why and how that data is used. For that data Beecasts acts as a service provider (processor) on the customer’s instructions, and the customer’s own privacy notice applies to its contacts.

2. Data we collect

• Account data: your name, email address, hashed password, language preference, team membership and role.
• Workspace data you put into the platform: connected WhatsApp numbers (sessions), contacts, conversations, message content and attachments, templates, automations, broadcasts, webhooks and API keys (stored in hashed form where possible).
• Billing data: your plan, invoices and payment status. Card and wallet details are handled by our payment provider and are not stored by Beecasts.
• Messages you send us: what you write in the contact form or in support requests, including your name and email address.
• Technical data: IP address (kept in hashed form for abuse protection where possible), browser type, device information, request logs and security events.
• Website usage data: pages visited and general visit statistics, collected with a web analytics service on our public pages.

3. How we use data

• To provide, secure and maintain the platform, including delivering messages through your connected WhatsApp numbers.
• To create and manage your account, process payments and send service emails such as verification, password reset, billing and security notices.
• To answer your questions and give support.
• To detect abuse, fraud and misuse, enforce our Terms & Conditions and protect the number reputation of our customers.
• To understand how the public website is used and to improve it.
• To meet legal obligations.

We do not sell personal data and we do not use the content of your messages for advertising.

4. Legal bases

Where data protection law requires a legal basis, we rely on: performing our contract with you, our legitimate interests in running and securing the service, your consent where we ask for it, and compliance with legal obligations.

5. Who we share data with

We share data only as needed to run the service, with:

• Infrastructure and hosting providers that store and process data for us.
• Our payment provider, which processes payments.
• Email delivery providers that send our service emails.
• Meta/WhatsApp systems, as required for messages sent or received through your connected WhatsApp numbers.
• A web analytics provider, for statistics on our public pages.
• Authorities or advisers when the law requires it or to protect rights, safety and security.

These providers may only use the data to provide their service to us. If Beecasts is involved in a merger or sale, data may transfer to the successor under the same protections.

6. International transfers

Our providers may process data in countries other than your own. Where this happens we take steps to keep the data protected as required by applicable law.

7. Cookies and similar technologies

We use a small number of cookies and local storage entries:

• Essential: keeping you signed in, protecting forms and remembering your language choice.
• Analytics: our web analytics service sets its own cookie on the public pages (landing page and blog) to count visits. It is not used in the signed-in console.

You can block or delete cookies in your browser settings. Essential features such as sign-in may stop working if you do.

8. How long we keep data

We keep account and workspace data while your account is active and as long as needed to provide the service. After an account is closed we delete or anonymise data within a reasonable period, except where we must keep it for legal, tax, security or dispute purposes. Contact-form messages are kept for as long as needed to handle your request and our records.

9. Security

We use technical and organisational measures such as encrypted connections, hashed passwords, access controls for staff and audit logging. No system is completely secure, so please use a strong, unique password and keep your API keys private. If a security incident affects your personal data, we will notify you and the authorities as the law requires.

10. Your rights

Depending on where you live, including under Indonesia’s Personal Data Protection Law, you may have the right to access, correct, delete or export your personal data, to restrict or object to certain processing (including decisions made only by automated means that significantly affect you), and to withdraw consent. To use these rights, email us at [email protected]. We may ask you to verify your identity first.

If you are a contact of one of our customers, please contact that customer first, because it controls your data in the platform.

11. Children

Beecasts is for businesses and is not directed at children. We do not knowingly collect data from children. If you think a child has given us personal data, tell us and we will delete it.

12. Changes to this policy

We may update this policy. The date at the top shows the latest version, and for material changes we will give notice, for example by email or a notice in the console.

13. Contact

Questions about this policy or your data: [email protected].