Privacy Policy
Last updated 6 November 2026
The short version
Your business data stays in your own instance. We use it only to do the work you ask for. We don’t sell it, share it for advertising or use it to train any model. Leave, and we export it to you and delete it within 30 days.
Who we are
Bluezen, Ahmedabad, India, builds and runs Daemon. Under India’s Digital Personal Data Protection Act, 2023, you are the data fiduciary for your customers’ data and we are your data processor: we handle it only on your instructions and to provide the service.
What we hold
- Your contact and billing details: name, business name, phone, email, GSTIN if you have one. Payment details are held by Razorpay, not by us.
- Your conversations with Daemon: messages, voice notes, photos and files you send it, and its replies.
- What it remembers: facts, preferences and procedures it saves to do your work better.
- Data from your connected tools: orders, customers, shipments, ad results and the like, read when a task needs it.
- Logins you connect: stored in your instance only and used only for your work.
- Logs: what it did and when, so actions can be traced and undone.
Where it lives and who sees it
- Your instance runs on our server in Mumbai, India, in its own account. No other business can reach it.
- To run the model, the content of each task is sent to Anthropic, which provides Claude. Anthropic processes it to produce the answer.
- Messages pass through the channel you use: Meta for WhatsApp, Telegram, or our own app.
- We look inside your instance only to set it up, fix a problem or answer a question you raised.
- Nothing is sold, rented or shared for advertising.
How we keep it safe
Each business runs under its own Linux account with no admin rights, its own credentials and outbound traffic through a filtered proxy. Backups run every night and are kept only for as long as they are needed to restore service.
If something goes wrong
If we learn of a breach that affects your data, we tell you within 72 hours, with what happened, what was affected and what we are doing about it, so you can meet your own obligations under the DPDP Act.
How long we keep it
For as long as you use the service. When it ends we export your data to you on request and delete it, backups included, within 30 days, unless the law requires us to keep something (such as invoices) for longer.
Your rights
You can ask us at any time to show you, correct, export or delete your data. If your customers make such a request to you, we help you carry it out.
This website
This site sets no tracking or advertising cookies and runs no analytics scripts. Our server keeps standard access logs for security.
Contact
Questions or requests: [email protected]