Privacy Policy
1. Who we are
BizHost (bizhost.online) is a service of MediHost AI Technologies Private Limited ("we", "us"), a company incorporated in India (CIN: U62013TS2026PTC215115), Hyderabad, Telangana, India 500090. We also operate MediHost AI (medihostai.com). We are the data controller for the personal data described here. Our full company policy is at https://www.medihostai.com/privacy; this page explains how it applies to BizHost.
2. What we collect
- Account: your name, phone number, email, business name, business type, address and the team members you add.
- Your website and posts: the text, photos, services, prices and hours you add, and the posts you create.
- Payments: handled by Razorpay. We see the payment status and amount, never your card details.
- Usage and device: log-in times, pages used, IP address and browser, for security and to fix problems.
- Enquiries: messages your website visitors send you.
- Connected Meta accounts: see section 3.
3. Connecting your WhatsApp, Facebook or Instagram account
You can connect your own WhatsApp Business account, Facebook Page and Instagram account to BizHost. You do this yourself in a window run by Meta (Facebook Login and WhatsApp Embedded Signup), and you choose what to share. Your WhatsApp Business account and number stay yours; you can manage them in Meta's WhatsApp Manager at any time.
What we receive and keep: the IDs of your WhatsApp Business account and phone number, your number's display name and quality rating, the Page and Instagram account names and IDs you pick, an access key from Meta that lets our software act only on the accounts you connected, and the registration PIN we set when we register your WhatsApp number. Access keys and the PIN are stored encrypted, are never shown in our apps and are never written to our logs.
If your number stays on the WhatsApp Business app: when you connect it, we import once your WhatsApp contacts (names and numbers) and, if you choose to share it in Meta's window, up to the last 6 months of your one-to-one chats. After that we also receive the messages you send from the app. We keep them so they show in your dashboard, store them only on our servers in India (AWS Mumbai) and never write message text to our logs. Group chats are not imported. If you disconnect the number, these imported contacts and messages are deleted automatically 30 days later (unless you reconnect it before then), or sooner if you ask us.
What we do with it: send the WhatsApp messages you set up to your own customers, receive their replies and delivery status, and publish the posts you approve. We do not use this data for advertising and we do not sell it.
Your customers' consent: you must have your customers' agreement before messaging them, and stop messaging anyone who asks you to stop.
Disconnecting: disconnect in your BizHost dashboard, or remove our app in Facebook (Settings & privacy → Settings → Business integrations). When you disconnect in your BizHost dashboard, we stop using the account and delete the stored access key and PIN straight away. If you remove our app in Facebook instead, our access stops working at once; ask us to delete the stored key and the other data as explained on https://bizhost.online/data-deletion.
Meta processes this data under its own terms and policies, including the WhatsApp Business Terms of Service and Meta's Privacy Policy.
4. How we use your data
- To run your account, website, WhatsApp and social features (contract).
- To take payments and send receipts (contract).
- To send you log-in codes and service messages by WhatsApp or email (contract / legitimate interest).
- To keep the service secure and fix problems (legitimate interest).
- To send you offers, only if you agree (consent).
5. Who we share data with
- Amazon Web Services — hosting, database and storage, Mumbai, India.
- Meta Platforms — WhatsApp Business Platform, Facebook Login, Facebook and Instagram publishing (USA / Ireland).
- Razorpay — payments (India).
- Resend — email delivery (USA).
- AI providers (Amazon Bedrock, Anthropic) — to help write your website text and posts, and to answer WhatsApp messages.
- Sentry — error monitoring for BizHost (USA). Before an error report is sent, request contents and user details are removed and phone numbers and emails are masked.
We do not sell your data and do not share it for advertising.
6. Security and storage
Data is stored on AWS in Mumbai, India, encrypted in transit (TLS) and at rest. Access is limited to staff who need it. Access keys for connected accounts are additionally encrypted by us.
7. How long we keep data
While your account is active, and up to 3 years after for legal and tax reasons, unless you ask us to delete it earlier (where the law allows).
8. Your rights and deleting your data
Under India's Digital Personal Data Protection Act 2023 (and other laws where they apply), you can ask to see, correct or delete your data, and withdraw consent. To delete your data, follow https://bizhost.online/data-deletion, or write to us below.
9. Contact and grievance officer
Grievance Officer, MediHost AI Technologies Private Limited, Hyderabad, Telangana, India 500090.
Email: saicharanpakala@medihostai.com · We reply within 72 hours.
10. Changes
If we change this policy we will update the date above and, for important changes, tell you in the app.