Last Updated: August 7, 2026
Bujji Ai ("Bujji Ai", "the Service") is a Chrome browser extension and companion desktop application developed and operated by ZyloConnect Technologies Pvt Ltd ("we", "us", "our", "the Company"), a company incorporated in India, with its registered address at Moosapet, Balanagar, Hyderabad, Telangana 500018, India.
This Privacy Policy applies to the Bujji Ai Chrome Extension, the Bujji Ai Web Dashboard, the Bujji Desktop Engine (optional companion desktop application), and our website. It does not apply to WhatsApp, Meta Platforms, Google, or any other third-party service you connect to through Bujji Ai — please review their respective privacy policies.
Bujji Ai is offered to users worldwide. Where a specific law (such as the GDPR, CCPA, or India's DPDP Act) gives you rights beyond what's described generally in this policy, Section 8 explains how those apply to you.
Account & identity: Email address and, if you sign in with Google, your display name and profile picture. Firebase authentication session tokens and push-notification (FCM) device tokens, used to keep you signed in and deliver in-app alerts.
Subscription & billing: Your plan/tier, quota usage, and billing status. Payment card details are never collected or stored by us — they go directly to our payment processor (Razorpay); we only receive the plan you selected, the amount, and the transaction status.
Data that stays on your device: WhatsApp contacts and phone numbers, message drafts/templates, campaign logs, saved Smart Messages, and knowledge-base documents you upload for the on-device AI assistant are stored locally in your browser (chrome.storage.local / IndexedDB) and are not transmitted to our servers, except where this policy specifically says otherwise (for example, when you use an AI feature that requires sending text for processing, or when you explicitly sync to Google Sheets/Drive).
Approximate location (IP-based): We look up your approximate country/region from your IP address, using third-party IP-geolocation services. This is used to show pricing in your local currency and for optional location-aware features (such as weather). It does not use your device's GPS or precise location, and the IP address itself is not linked to your account profile.
Google Workspace data (only if you connect it): If you authorize it, we access Google Contacts (read-only), Google Sheets (read/write, limited to spreadsheets you authorize), and Google Drive (limited to files created by Bujji Ai). This data is processed locally in your browser and is not stored on our servers.
Usage analytics: Anonymized, aggregated telemetry about which features you use and error/crash events, used to improve the product. Event data is filtered to exclude message content, contact names, and phone numbers. You can disable this in Settings → Privacy → Disable Telemetry.
Device/browser information: Browser type and version, operating system, and extension version.
AI message drafting (Bujji Pilot): When you use an AI drafting feature, your prompt text is sent through our relay to one or more third-party AI providers for processing. The relay does not store your prompt after the response is returned. As of this policy's last update, the providers we route through include Google Gemini, DeepSeek, NVIDIA, and OpenRouter (which may itself forward to other model providers) — this list changes periodically as we add, remove, or swap AI providers; see Section 5 for the current list.
AI Auto-Responder: Incoming WhatsApp messages are processed locally in your browser to generate replies. If you enable cloud AI enhancement, excerpts of the relevant conversation are sent through our AI relay for processing; we apply automated filtering to reduce the inclusion of identifiable metadata before this data is sent. This can be fully disabled in Settings.
On-device knowledge base (RAG): When you upload business documents to train the AI Auto-Responder's knowledge base, that content is converted to vector embeddings entirely on your device and stored in your browser's local storage — it is not transmitted to our servers.
General-assistant question cache: If you use Bujji Ai's general question-answering assistant (separate from the knowledge-base feature above), your question text is sent to a third-party AI provider to generate a vector embedding, and the question, the AI's answer, and that embedding are cached locally on your device for up to 7 days to speed up repeat lookups.
Automated messaging: The Auto-Responder and Campaign Engine send messages on your behalf, under rules and content you configure and control. You decide which contacts are messaged, what content is used, and can disable automation at any time. We do not use these features to make automated decisions about individuals (e.g., credit, employment, or legal-eligibility decisions) that produce legal or similarly significant effects on them.
If you install the optional Bujji Desktop Engine, the Chrome extension exchanges WhatsApp session and message events, and campaign commands, with it over a local connection on your own device (Chrome's native messaging API). This exchange happens between applications running on your device and lets automation continue running even when your browser is closed. The Desktop Engine is subject to this same Privacy Policy for any data it sends to our cloud services (for example, account/subscription verification).
We do not sell, rent, or trade your personal information. We share data only with the service providers necessary to operate Bujji Ai, and only for that purpose. The table below reflects our sub-processors as of the "Last Updated" date at the top of this page; if you need written confirmation of the current list at any time, contact us at support@bujjiai.com.
| Provider | Purpose | Data shared |
|---|---|---|
| Google Firebase / Google Cloud | Authentication, database, push notifications, hosting | Account email, auth/FCM tokens, subscription data |
| Cloudflare | AI relay, CDN, analytics ingestion, abuse/rate-limit protection | AI prompt text (in transit, not stored), anonymized usage events |
| Google Gemini, DeepSeek, NVIDIA, OpenRouter | AI message generation and embeddings (current list — may change) | Prompt/message text you submit to AI features |
| Razorpay | Payment processing | Payment details (handled directly by Razorpay, not us) |
| IP-geolocation providers | Regional pricing / optional weather features | Your IP address, approximate location |
We may also disclose information if required by law or court order, to protect the safety, rights, or property of Bujji Ai or our users, or as part of a merger, acquisition, or asset sale (with notice to you before your data becomes subject to a different privacy policy).
Account & support administration: Authorized Bujji Ai staff can, through an internal administrative system, adjust a subscription's status (for example, to activate, pause, or revoke access) for legitimate purposes such as resolving billing disputes, fraud prevention, or enforcing our Terms. This capability is logged and limited to account/subscription management — it does not give staff access to your locally-stored WhatsApp data.
Data that lives exclusively on your device (contacts, message templates, campaign logs, privacy settings, AI knowledge base) is deleted when you uninstall the extension or clear your browser data.
| Data type | Retention |
|---|---|
| Account credentials | Until you delete your account |
| Subscription & billing records | As long as necessary to comply with applicable tax, accounting, and financial recordkeeping laws (typically up to 7 years, which may vary by jurisdiction) |
| Usage telemetry (anonymized) | 24 months rolling |
| Support communications | 3 years from resolution |
| Error/crash logs | 90 days |
| General-assistant Q&A cache (local, on-device) | Up to 7 days |
You can request account deletion by emailing support@bujjiai.com. We aim to acknowledge privacy requests within 15 business days and complete deletion of your account and associated cloud data within 30 days of a verified request. Account deletion removes your profile, authentication, and locally-synced cloud data — it does not shorten the retention period for subscription and billing records described above, which we are required to keep for tax, accounting, and audit purposes regardless of account deletion. Data stored only on your device is removed immediately when you uninstall the extension.
We use TLS encryption for data in transit to our servers, Firebase security rules restricting database access to your own authenticated records, and isolate API keys so they're never exposed in client-side extension code. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
| Right | How to exercise it |
|---|---|
| Access a copy of your data | Email support@bujjiai.com |
| Correct inaccurate data | Update in Settings, or email us |
| Delete your account and data | Email support@bujjiai.com |
| Export your data | Use the Drive Backup feature |
| Opt out of marketing | Unsubscribe link in any marketing email |
| Opt out of usage telemetry | Settings → Privacy → Disable Telemetry |
EU/UK users (GDPR/UK GDPR): you have the right to access, correct, delete, restrict, and port your data, to object to certain processing, to withdraw consent, and to lodge a complaint with your local data protection authority.
California and other U.S. state users (CCPA/CPRA and similar laws): you have the right to know what personal information we collect, to delete it, and to opt out of its "sale" or "sharing" — we do not sell or share personal information as defined by these laws.
India users (DPDP Act 2023): you have the right to access, correct, and erase your personal data as described above, and to nominate another individual to exercise your rights in the event of death or incapacity.
Users in other jurisdictions: we will honor equivalent data-protection rights available to you under the laws of your country to the extent required.
Bujji Ai is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at support@bujjiai.com.
Bujji Ai operates by automating interactions with WhatsApp Web, a service operated by Meta Platforms. You are subject to WhatsApp's own Terms of Service and Privacy Policy, and are solely responsible for ensuring your use of Bujji Ai complies with WhatsApp's policies, including rules against spam and bulk unsolicited messaging. Bujji Ai does not access the WhatsApp Business API and is not affiliated with or endorsed by Meta Platforms.
Bujji Ai is available globally. Our infrastructure providers (including Google Firebase/Google Cloud and Cloudflare) operate data centers in multiple regions, including the United States. Depending on your location, your data may be processed in a country other than your own, under those providers' standard contractual clauses and data-processing addenda.
We may update this Privacy Policy from time to time. For material changes, we will notify you via an in-app alert or email at least 30 days before the change takes effect. Continued use of Bujji Ai after the effective date constitutes acceptance of the updated policy.
Email: support@bujjiai.com
Postal address: ZyloConnect Technologies Pvt Ltd, Moosapet, Balanagar, Hyderabad, Telangana 500018, India
