Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how DAMSHOOL LLP ("Damshool", "we", "us", "our"), the company that owns and operates Blinksby (https://blinksby.com, the "Service"), collects, uses, shares and protects information.

Company details

Legal name: DAMSHOOL LLP
Registered address: 445 A, FF, NK II, Indirapuram, Shipra Sun City, Ghaziabad, Uttar Pradesh 201014, India
Email: [email protected]
Phone: +91 92669 91719

1. Who this policy applies to

This policy covers two groups of people:

Clients: businesses and their staff who sign up for Blinksby.
End customers: people who interact with our clients, for example by scanning a client's Blinksby QR code or by messaging a client on WhatsApp through Blinksby.

For the personal data of end customers that we process on a client's behalf (for example, WhatsApp messages), the client is the data controller (Data Fiduciary) and Blinksby acts as the client's data processor. Clients are responsible for having a lawful basis and the consent required to contact their customers.

2. Information we collect

From clients

Account details: name, email address, phone number, business name, business address and login information.
Billing details: billing name, GST details and transaction records. Card and bank details are processed by our payment partner and are not stored by us.
Google Business Profile data: when a client connects a Google account, we access the business profile, location details, reviews and review replies that the client authorises.
WhatsApp Business Account data: when a client connects WhatsApp through Meta's Embedded Signup, we receive the WhatsApp Business Account ID, phone number ID, business display name, phone number, message templates and the access permissions the client grants.
Business information for AI replies: details the client gives us to guide AI replies, such as services, prices, timings, FAQs and location.

From end customers (on behalf of our clients)

WhatsApp messaging data: the customer's WhatsApp phone number, WhatsApp profile name, messages and media they send to the client, message timestamps and delivery/read status.
Lead details: information shared in the conversation, such as name, phone number, location, the service or product requested and preferred time.
QR code scan data: when someone scans a client's QR code, we collect technical information such as device type, browser, approximate location derived from IP address and time of scan, and any review text they choose to submit.

Collected automatically

Usage and device data: IP address, browser type, pages visited, time spent and actions taken in the dashboard.
Cookies and similar technologies (see section 9).

3. How we use information

To provide the Service: generate review QR codes, help create review drafts, reply to Google reviews on the client's instruction, and send and receive WhatsApp messages on the client's behalf.
To generate AI-assisted replies to end-customer WhatsApp messages using the information the client has provided.
To capture enquiries as leads and show leads, conversation history and reports in the client's Blinksby dashboard.
To manage accounts, subscriptions, billing and customer support.
To keep the Service secure, prevent fraud and misuse, and enforce our Terms.
To improve the Service using aggregated or de-identified data.
To send clients service updates and, where they have agreed, marketing messages. Clients can opt out of marketing at any time.
To comply with legal obligations.

We use WhatsApp and Meta Platform Data only to provide the Service to the client who connected that account. We do not sell Platform Data, we do not use it for advertising, and we do not use it to build profiles of end customers for any other purpose.

4. AI processing

Blinksby uses artificial intelligence to draft review text and to reply to end-customer messages. To do this, the relevant message content and the client's business information are sent to our AI provider, OpenAI, which processes it to generate a reply. Data sent through OpenAI's API is not used to train OpenAI's models by default. Clients can review AI replies in their dashboard and can turn off automatic replies. AI-generated replies may sometimes be inaccurate.

5. How we share information

We do not sell, rent or trade personal information. We share information only with:

Meta Platforms, Inc. / WhatsApp LLC: to send and receive WhatsApp messages through the WhatsApp Business Platform (Cloud API). Meta's own processing is governed by Meta's and WhatsApp's terms and privacy policies.
Google LLC: to access and manage the client's Google Business Profile, as authorised by the client.
OpenAI: to generate AI-assisted replies and review drafts.
Service providers: hosting and cloud infrastructure, payment processing, email and SMS delivery, and analytics. They act on our instructions and are bound by confidentiality obligations.
The client: end-customer messages and lead details are shared with the client whose WhatsApp number or QR code the end customer interacted with.
Legal and safety: where required by law, court order or government request, or to protect rights, safety and the integrity of the Service.
Business transfers: if DAMSHOOL LLP is involved in a merger, acquisition or sale of assets, subject to this policy.

6. International data transfers

Some of our service providers, including Meta, Google and OpenAI, may process data on servers outside India. We take reasonable steps to make sure such transfers are protected and comply with applicable law.

7. Data retention

Client account data is kept while the account is active and deleted within 30 days after the account is closed, except records we must keep for tax, accounting or legal reasons.
WhatsApp conversations and leads are kept for 12 months from the last message, or until the client deletes them or disconnects WhatsApp, whichever is earlier.
When a client disconnects their WhatsApp Business Account or Google account from Blinksby, we stop accessing it immediately and delete the associated stored data within 30 days.
Backups are overwritten within 30 days.

8. Your rights and choices

Depending on applicable law, including India's Digital Personal Data Protection Act, 2023, you may have the right to access, correct, update or delete your personal data, withdraw consent, and nominate another person to exercise your rights. Clients can update most information from their dashboard.

End customers whose data we process on a client's behalf should contact that business first. You can also write to us at [email protected] and we will forward your request to the right client and help them act on it.

To delete your data, follow the steps on our Data Deletion page: https://blinksby.com/policy/data-deletion. We respond to requests within 30 days.

End customers can stop receiving WhatsApp messages from a business at any time by replying "STOP" or by blocking the business number in WhatsApp.

9. Cookies

We use essential cookies to keep you signed in and to make the Service work, and analytics cookies to understand how the Service is used. You can control cookies through your browser settings. Blocking essential cookies may stop parts of the Service from working.

10. Security

We use reasonable technical and organisational measures to protect data, including encrypted connections (HTTPS), access controls and secure storage of access tokens. No method of transmission or storage is completely secure. If a data breach affects your personal data, we will notify you and the relevant authorities as required by law.

11. Children

Blinksby is meant for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Grievance Officer

In line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you can contact our Grievance Officer:

Grievance Officer, DAMSHOOL LLP
Email: [email protected]
Address: 445 A, FF, NK II, Indirapuram, Shipra Sun City, Ghaziabad, Uttar Pradesh 201014, India

We will acknowledge complaints promptly and try to resolve them within 30 days.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for significant changes, notify clients by email or in the dashboard.