Login

Privacy Policy

Last updated: October 25, 2026

This Privacy Policy describes how 3beeez.com Private Limited ("Company", "we", "our", or "us") collects, uses, stores, and protects information when you use the 3Beeez AI Chat Service, including our website chat widget, client dashboard, and optional WhatsApp integration ("Service").

1. Information We Collect

Account information

When you register for the Service, we collect your email address, business name, and website domain. We store a securely hashed password — we never store your plaintext password.

Knowledge content you upload

You may upload documents, text, and website content to provide knowledge for your chatbot. This content is stored and indexed solely to power your own chatbot — it is never shared with other customers or used to train shared AI models.

Visitor conversation data

When visitors interact with your embedded chat widget, we collect and store the conversation messages. This data is strictly isolated to your account and is used only to generate responses and to help you review chat history in the portal.

Visitor lead information

If you enable lead capture on your widget, visitors may optionally submit their name and email address. This information is stored in your account and visible only to you.

WhatsApp and Meta connection data

When a business connects WhatsApp through Meta's Embedded Signup, we process the authorization code and access token, authorized WhatsApp Business Account and phone number identifiers, and the business phone number. We store the connection credential in encrypted form so we can operate the authorized integration. Facebook Login for Business is used for this authorization; signing in to the 3Beeez dashboard is separate.

For connected accounts, we process customer WhatsApp numbers, text messages, message identifiers and timestamps, replies, and conversation-handling status. Where WhatsApp Business App Coexistence is available, we also receive supported business-app message events to coordinate human replies with automation. We record connection and automation-control events to operate and troubleshoot the integration.

Usage and technical data

We collect standard server logs (IP addresses, request timestamps, browser type) for security monitoring, rate limiting, and abuse prevention. We do not use this data for advertising or sell it to third parties.

2. How We Use Your Information

  • To deliver and operate the Service, including generating AI responses for your visitors.
  • To connect authorized WhatsApp accounts, configure webhook subscriptions, and route messages to the correct business.
  • To generate WhatsApp support replies using that business's knowledge base when it enables AI replies.
  • To display WhatsApp conversations and apply human-takeover and resume controls.
  • To manage your account, subscription, and billing.
  • To send transactional emails (account verification, billing receipts, service notices).
  • To enforce our Terms and Conditions and prevent abuse.
  • To investigate security incidents you report to us.
  • To comply with applicable legal obligations.

We do not use your data or your visitors' data for advertising, behavioural profiling, or to train general-purpose AI models.

Businesses choose how to use the Service to support their customers. If you message a business using 3Beeez, that business's privacy notice also applies to its handling of your conversation. You can contact the business or use our data deletion instructions to request help with information held by 3Beeez.

3. Data Isolation and Security

Each customer's data — including uploaded knowledge, bot configuration, and visitor conversation history — is strictly isolated to that customer's account. No data from your account is accessible to or shared with other 3Beeez customers.

We implement commercially reasonable security measures including:

  • Encryption in transit (HTTPS/TLS) for all data exchanged with the Service.
  • Encryption at rest for stored data.
  • Scrypt-hashed passwords — your plaintext password is never stored.
  • Short-lived, single-device session tokens that expire on browser close.
  • Rate limiting and bot-detection on all public-facing endpoints.

3Beeez personnel do not access, read, or process your conversation data except where explicitly required to investigate a security incident you report, to comply with a lawful legal obligation, or with your express written consent.

4. Third-Party Services

To operate the Service, we share limited data with the following third-party providers to provide their services:

  • AI processing — Our internal AI service processes the current question, relevant conversation history, and selected business knowledge to retrieve information and generate replies. This includes WhatsApp messages when AI replies are enabled. The service may send this content to external AI inference and embedding providers. These providers can process personal information contained in message text; using an internal service does not mean the data stays only within 3Beeez. Provider retention and processing locations depend on the service and account configuration. Contact us for details of providers used for your account.
  • Meta / WhatsApp — We exchange authorization information, account and phone identifiers, and messages with Meta to connect and operate WhatsApp. Meta's own terms and privacy notices apply to its services.
  • Paddle — Our payment processor. Paddle handles all payment card data. We never store or see your full card details. Paddle's privacy policy applies to payment processing.
  • Email delivery (Brevo) — We use Brevo SMTP to send transactional emails. Your email address is shared with Brevo only for the purpose of delivering messages to you.
  • Infrastructure (Railway) — Railway hosts our application and database and processes the data stored or handled there, including WhatsApp connection records and conversations. Hosting, backups, logs, and authorized operational support may involve processing by Railway and its service providers.
  • Network and access protection (Cloudflare) — Cloudflare processes network requests and associated technical data to deliver and protect our services, including requests to our WhatsApp webhook endpoint.

Service providers may process information outside your country, including in the United States. A server's hosting region does not by itself describe every location used for backups, provider services, or remote support access.

5. Cookies and Tracking

We use a single session cookie (threebeeez_session) to authenticate your portal login. This is a strictly necessary cookie — no advertising cookies or third-party tracking pixels are used in the portal.

Our public marketing pages (3beeez.com) use Google Analytics to measure page traffic. Analytics data is anonymised and not linked to individual accounts. You can opt out via your browser's privacy settings or a browser extension.

The embedded chat widget on your customers' websites does not set cookies on visitors by default.

6. Data Retention

We retain account information while needed to provide the Service and administer the account. Website chat history and uploaded knowledge are scheduled for removal from active storage after a subscription has been cancelled for 30 days. Subscription cancellation does not itself delete every account or integration record. To request deletion of your account or specific data, follow our data deletion instructions.

WhatsApp message content and integration audit records are scheduled for deletion after 30 days. Minimal conversation-routing records, including the customer phone number and human-handling preference, can remain longer while human takeover is active so that a returning customer does not unexpectedly receive AI replies. Connection identifiers remain until the connection data or account is deleted.

Disconnecting WhatsApp in the dashboard disables automated replies and removes the stored connection credential. It does not immediately erase existing conversation history or delete messages held by Meta, the business, or other participants. Deletion from active systems may not immediately remove copies from backups. When handling a deletion request, we will explain any applicable retention exceptions or remaining backup-retention periods.

If you require earlier deletion of your data, contact us at support@3beeez.com.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or delete information we hold about you. To exercise any of these rights, contact us at support@3beeez.com. We will respond within a reasonable timeframe and in accordance with applicable law.

If you are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to lodge a complaint with a supervisory authority.

This Service is operated by 3beeez.com Private Limited, incorporated in India. Data processing is subject to the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India) to the extent applicable.

8. Children's Privacy

The Service is intended for businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above. Continued use of the Service after changes constitutes acceptance of the updated Policy. For material changes, we will notify active customers by email.

10. Contact Us

For privacy-related questions or requests:

3beeez.com Private Limited
India
Email: support@3beeez.com
Website: 3beeez.com