← Big Buddy

Privacy Policy

Last updated: April 17, 2026 · Compliant with the Digital Personal Data Protection Act, 2023 (DPDP)

1. Who We Are (Data Fiduciary)

Big Buddy is a product of RaiseATab Private Limited, a company registered in India (GSTIN: 09AAMCR6826J1ZQ). Our registered address is 16, Tower 3, 1601, Lotus 300, Sector 107, Noida, Gautambuddha Nagar, Uttar Pradesh, 201301. Under the DPDP Act 2023, RaiseATab Private Limited is the Data Fiduciary responsible for your personal data.

2. Information We Collect

When you use Big Buddy, we collect:

  • Account information: Phone number, name, email address, and timezone.
  • Tasks and reminders: Content you create — titles, descriptions, due dates.
  • Memory facts: Short facts Big Buddy extracts from your conversations to personalize responses. You can view, edit, or delete these at any time.
  • Usage data: Actions performed, token consumption, timestamps, and briefing/recap content generated for you.
  • Payment information: Transaction records processed through Razorpay. We do not store card details.
  • Message metadata: Short previews of messages for usage logging. Full conversation history is not retained long-term.

What we actively redact before storage: OTPs, passwords, Aadhaar numbers, PAN, credit/debit card numbers, IFSC codes, and CVVs are automatically stripped from messages before any fact extraction or memory storage. This is a technical safeguard, not a policy — these values never enter our long-term stores.

3. Purposes of Processing

We process your data only for these specific, limited purposes:

  • To deliver the Big Buddy assistant service on WhatsApp
  • To send reminders, morning briefings, and evening recaps you have opted in to
  • To manage your token wallet, process payments, and issue receipts
  • To improve service quality through aggregated, anonymized analytics
  • To communicate with you about your account and service updates
  • To comply with applicable law and respond to lawful requests

We do not use your personal data to train AI models, sell to third parties, or target you with advertising from other companies.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted in Singapore (ap-southeast-1) with row-level security ensuring each user can only access their own data. All connections are encrypted via TLS 1.2+. Passwords are hashed using bcrypt with a cost factor of 12. Reset tokens are stored as SHA-256 hashes, never in plaintext.

5. Third-Party Data Processors

We share limited data with the following sub-processors, each under a data processing agreement:

  • Meta (WhatsApp Business API): Message delivery and receipt. Subject to Meta's privacy policy.
  • Celitix: WhatsApp Business Service Provider — routes messages between Big Buddy and WhatsApp.
  • OpenAI: AI processing of (PII-redacted) message content for responses and fact extraction. Data is not used to train models per OpenAI's API policy.
  • Razorpay: Payment processing for subscriptions and top-ups.
  • Resend: Transactional email delivery (password resets, account notices).
  • Neon: Managed PostgreSQL database hosting (Singapore region).
  • Vercel & Railway: Web dashboard and backend hosting.

6. Data Retention

  • Account data: Retained for the lifetime of your account.
  • Tasks, reminders, memories: Retained until you delete them or close your account.
  • Message previews and usage events: Retained for 90 days, then aggregated.
  • Password reset tokens: Valid for 60 minutes, purged after use.
  • Payment records: Retained for 7 years as required by Indian tax and finance regulations.
  • Upon account deletion: All personal data is permanently erased within 7 days, except payment records retained for legal compliance.

7. Your Rights Under DPDP Act 2023

You have the following rights. All can be exercised directly from WhatsApp — no forms, no support tickets.

  • Right to access: Text "what do you know about me?" on WhatsApp for a summary, or download the full JSON at app.bigbuddy.co.in/settings.
  • Right to data portability: Download all your data as a structured JSON file from the dashboard. No approval delay.
  • Right to correction: Update your name, timezone, and notification preferences anytime in the dashboard or via WhatsApp.
  • Right to erasure: Text "delete my account" on WhatsApp, confirm, and your data is permanently deleted. Same flow available in the dashboard under Settings.
  • Right to withdraw consent: Text "pause" on WhatsApp to stop proactive messages for up to 30 days. Delete your account to withdraw consent entirely.
  • Right to grievance: Contact our Grievance Officer (below) for any unresolved concerns.

8. Children's Data

Big Buddy is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact our Grievance Officer so we can remove it.

9. Changes to This Policy

We may update this policy as the service evolves or the law changes. Material changes will be communicated on WhatsApp and via email at least 30 days before they take effect. The "Last updated" date at the top of this page tracks revisions.

10. Grievance Officer

In line with DPDP Act 2023 §9, our appointed Grievance Officer is:

Amitabh Garg
RaiseATab Private Limited
Email: privacy@bigbuddy.co.in
Phone: +91 8448301970
Response window: 7 business days for acknowledgment, 30 days for resolution.