Last updated: 2026-10-21
This policy covers the Blueticks website, the Blueticks Chrome extension, the Blueticks web app (app.blueticks.co), the Blueticks Gateway (our hosted WhatsApp connection) and the Blueticks API. Blueticks sends messages through your own WhatsApp account. Blueticks is an independent company and is not affiliated with, endorsed by or sponsored by WhatsApp or Meta.
Blueticks is operated by Serenix Ltd, 68 Spyrou Kyprianou, Germasogeia, Limassol, Cyprus (company no. HE 446587).
For your account, billing and website data, Blueticks is the controller. For the messages, recipients, contacts and other content you put into Blueticks, you are the controller and Blueticks acts as your processor, handling that content only on your instructions. Because you send messages to other people, this content includes personal data of third parties, such as recipient names, phone numbers and message text. You are responsible for having a lawful basis and any required consent for it. We do not ask for special categories of personal data (such as health data), but message text and imports are free-form and you control what they contain.
Blueticks's use and transfer to any other app of information received from Google Accounts will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Blueticks AI Agents can connect to Google Calendar, Google Sheets, Google Docs, Google Drive and Gmail when you choose to connect them. Depending on what you connect, the agent may read and change calendar events, read and edit spreadsheets and documents you give it, create and read Drive files it created, and send email from your Gmail account. It does not read your Gmail inbox. You choose which tools each agent may use; every tool is off until you turn it on.
How we use it. Google user data is used only to carry out the actions you or your agent request, inside the features you enabled. We do not use it for advertising, we do not sell it, and no person at Blueticks reads it unless you ask us to (for support), it is needed for security, or the law requires it.
With whom we share, transfer or disclose it. We share Google user data only with the service providers needed to run the feature, and only the part needed for the request:
We do not share Google user data with anyone else, except when the law requires it or with your explicit consent.
AI and machine learning. We do not use Google user data, raw or aggregated or derived, to develop, improve or train any AI or machine learning model.
How we protect it. Your Google sign-in credential is encrypted at rest with AES-256-GCM and is used only by your agent. All data is transmitted over TLS 1.2 or higher. Access to production systems is limited to authorized personnel. Content read from Google is not copied into a separate store; what the agent used appears in that agent's conversation history in your account.
Retention and deletion. Removing a Google integration from an agent, or deleting the agent, deletes the stored credential. You can also revoke Blueticks' access at any time in your Google Account under Security, Third-party apps with account access. To request deletion of any other data, email support@blueticks.co.
Yes. We use cookies and similar technologies for sign-in, for website and app analytics and advertising measurement, for the support chat, and for affiliate attribution (see below). You can block cookies in your browser, but sign-in and some features may stop working.
Data is encrypted in transit and at rest, using our storage providers' managed encryption.
Our application servers run on Google Cloud in the United States (us-central1, Iowa). Our primary database, MongoDB Atlas, is hosted in the United States. WhatsApp Gateway session data is stored on private drives inside our Google Cloud private network in the United States, with Gateway session backups also stored in Microsoft Azure Blob Storage in the United States, and uploaded media assets in Google Cloud Storage in the United States. Transactional e-mail is sent through Amazon Web Services in the United States (us-east-1). AI requests are served by Google Cloud Vertex AI, either in us-central1 or through its global endpoint, so they may be processed outside the United States. Whenever personal data from the EEA is transferred to the United States or other third countries, we rely on the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), Module Three (processor to sub-processor), for transfers to our sub-processors.
Do we disclose any information to outside parties?
We do not sell your personal information. We share it with the service providers below, which process it on our behalf to run the service, and we may release information when we believe it is required to comply with the law, enforce our terms or protect rights, property or safety.
Our sub-processors and the services they provide:
We update this list when it changes. To receive a data processing agreement or notice of changes to sub-processors, e-mail privacy@blueticks.co.
We use FirstPromoter to associate affiliate referrals with signups and eligible subscription payments. Referral tracking uses browser cookies with a 60-day attribution window. Our website signup integration sends the workspace billing customer identifier. Our Chargebee integration shares customer identity and subscription payment, refund and cancellation events for commission reconciliation; card information is excluded.
If you apply to our affiliate program, FirstPromoter also processes the application and payout details you provide. Browser restrictions, blocked cookies or changing devices may prevent referral attribution. For questions about this processing or to exercise your data rights, contact support@blueticks.co.
If you are an EU citizen and you wish to request that we a) identify the personal information we have about you; b) delete the personal information we have about you; or c) exercise any other data subject right you may have under applicable law, please email us at support@blueticks.co and we will work with you to comply with your request as legally required.
Blueticks processes personal data only on documented instructions from the controller, including with regard to transfers of personal data to a third country or an international organization, unless required to do so by Union or Member State law to which the processor is subject; in such a case, the processor shall inform the controller of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest;
Blueticks ensures that persons authorized to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
Blueticks takes Technical and Organizational measures in accordance with Article 32 of the GDPR
Blueticks respects the conditions referred to in paragraphs 2 and 4 of Article 28.3 of the GDPR for engaging another processor;
Blueticks will use commercially reasonable efforts, insofar as this is possible, for the fulfillment of the controller's obligation to respond to requests for exercising the data subject's rights laid down in Chapter III of the GDPR;
Blueticks assists the controller in ensuring compliance with the obligations pursuant to Articles 32 to 36 of the GDPR taking into account the nature of processing and the information available to the processor;
Blueticks will, at the choice of the controller, which should be exercised via the Service or by emailing the choice to privacy@blueticks.co, delete or return the personal data to the controller within 30 days of the controller's written request, made at or after termination of the services, and will delete existing copies, unless Union or Member State law requires storage of the personal data. Deletion happens on request, not automatically. Copies in routine backups are removed as the backups rotate;
Blueticks will make available to the controller all information necessary to demonstrate compliance with the obligations laid down in Article 28.3 of the GDPR and allow for and contribute to audits, including inspections, conducted by the controller or another auditor mandated by the controller.
By using our site or affiliated products, you consent to our privacy policy. If you do not consent to the collection and processing of the information required to be processed, we are unable to provide you with our service, and you should not use our site.
If we decide to change our privacy policy, we will post those changes on this page, send an email notifying you of any changes, and/or update the Privacy Policy modification date below. Policy changes will apply only to information collected after the date of the change.
If there are any questions regarding this privacy policy you may contact us using: support@blueticks.co