Privacy Policy
Last updated: 10 June 2026. This Privacy Policy explains how BavelgoAI collects, uses, stores and protects personal data when you use our website, request a demo, contact us or use our platform.
1. Who we are
BavelgoAI is an AI-powered CRM and business automation platform designed to help businesses manage leads, conversations, bookings, campaigns, staff activity and follow-up workflows.
For questions about this Privacy Policy, you can contact us through the Contact page or through the contact details shown on this website.
2. Personal data we may collect
Depending on how you use BavelgoAI, we may collect and process the following categories of personal data:
- Identity information such as name, company name and job role.
- Contact information such as email address, phone number and preferred contact method.
- Business information such as business type, interested plan, lead sources and campaign details.
- CRM information such as leads, lead status, pipeline stage, tasks, bookings and notes.
- Conversation information such as messages, summaries, WhatsApp-related records and AI-generated follow-up outputs.
- Account information such as user roles, staff users, permissions, login records and workspace activity.
- Technical information such as IP address, browser type, device information, cookies, log data and security events.
- Payment and subscription information, where applicable, such as selected plan, payment status and billing records.
3. How we collect data
- When you submit a contact form or request a demo.
- When you create or use a BavelgoAI account.
- When a business uses the platform to manage its own leads and customer conversations.
- When you communicate with us through WhatsApp, email or another channel.
- Automatically through cookies, logs and security systems.
- Through third-party integrations that the client chooses to connect, such as WhatsApp, Meta, TikTok, Google, Zoom, Stripe, Meta Cloud API or OpenAI-related services.
4. Why we use personal data
| Purpose | Examples |
|---|---|
| To provide the platform | CRM, pipeline, bookings, tasks, staff access, AI automation and workspace features. |
| To respond to enquiries | Contact requests, demo requests, WhatsApp enquiries and support messages. |
| To manage accounts and subscriptions | User accounts, workspace access, plans, billing and service administration. |
| To improve and secure the service | Monitoring errors, preventing abuse, protecting accounts and improving performance. |
| To support AI automation | Generating summaries, suggested replies, lead scores and next-step recommendations. |
5. Legal basis for processing
We may rely on one or more lawful bases depending on the context, including:
- Contract: to provide BavelgoAI services to customers.
- Legitimate interests: to improve, secure and operate the platform.
- Consent: where required, such as for certain cookies or marketing communications.
- Legal obligation: where we must keep records or comply with applicable law.
6. Client data and workspace separation
BavelgoAI is designed as a multi-tenant platform. Each client should operate inside its own private workspace. Leads, conversations, bookings, staff users and AI activity should remain separated by workspace.
Where a client uses BavelgoAI to process its own customer or lead data, that client is normally responsible for deciding what data is collected and why. BavelgoAI processes that data to provide the platform features.
7. AI-generated content
BavelgoAI may use AI to help with replies, lead qualification, summaries, suggested actions, scoring and reporting. AI outputs may be inaccurate or incomplete and should be reviewed by the customer where appropriate.
Customers are responsible for configuring their automation and ensuring their use of AI-generated content is suitable for their business, customers and legal obligations.
8. Third-party providers
We may use trusted third-party providers to operate the platform, including hosting providers, email providers, payment processors, analytics tools and integration providers. Depending on features enabled, this may include services related to WhatsApp, Meta, TikTok, Google, Meta Cloud API, OpenAI, Stripe, Zoom and similar providers.
Third-party providers may have their own privacy policies and terms.
9. Data retention
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including providing the service, complying with legal obligations, resolving disputes and maintaining security records.
Clients may request deletion or export of workspace data, subject to technical, legal and contractual limitations.
10. Your rights
Depending on your location and applicable law, you may have rights to:
- Access personal data we hold about you.
- Correct inaccurate personal data.
- Request deletion of personal data.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Request a copy of your data in a portable format.
11. Security
We use reasonable technical and organisational measures to protect personal data. However, no online platform can guarantee absolute security. Customers should keep their login details secure and manage staff permissions carefully.
12. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a new updated date.