BlackOrbis

Privacy Policy

Version 2 · Effective 26 October 2026

This policy explains what personal information BlackOrbis ("we", "us") handles, why, who sees it, how long we keep it and what rights you have. We built it to meet India’s current rules (the Information Technology Act 2000 and the SPDI Rules 2011) and to be ready for the Digital Personal Data Protection Act 2023 and its Rules as they start to apply. It also covers the main duties under the GDPR, UK GDPR, Taiwan’s PDPA and US state laws where they reach us.

1. Who we are

BlackOrbis is an AI agency that builds WhatsApp agents, personal AI agents, lead generation AI, marketing agents and websites for businesses. For information you give us through this website or when you contact us, BlackOrbis decides why and how it is used. For information that flows through an agent we build for a client, the client decides and we act only on their instructions (see section 5).

Contact for any privacy question: WhatsApp +91 76003 73710 or Instagram @blackorbis.ai.

2. What we collect

• Messages you send us on WhatsApp or Instagram: your name or number as shown by the app, and what you write or send (including voice notes or files, if you send them).
• Project information from clients: business details, content, and access to accounts needed to do the work.
• Payment details are entered on our payment provider’s page, not on this site. We receive confirmation of payment, not your full card details.
• Technical data such as IP address and browser type, kept in our hosting provider’s standard server logs for security and to keep the site running.

This website has no sign-up, no forms and no accounts, and it does not set advertising or analytics cookies. We do not knowingly collect sensitive personal data such as health or financial account details, and we ask you not to send it to us.

3. Why we use it, and our legal basis

• To answer your enquiry, prepare a quote and, if you hire us, deliver and support the work. Basis: your consent and the contract we enter into with you.
• To send invoices and keep tax and accounting records. Basis: legal obligation.
• To keep our systems secure and prevent misuse. Basis: our legitimate interests.
• To tell you about our services, only if you asked us or already work with us. You can say stop at any time and we will stop.

We do not sell your information and we do not use it for advertising profiles.

4. Who receives it

We share information only with the service providers needed to do the work, under written terms that limit them to that purpose:

• Messaging platforms: Meta (WhatsApp and Instagram).
• AI model providers used to power the agents.
• Website hosting and domain providers.
• Payment providers (for example Razorpay).
• A freelance developer who works with us under a confidentiality and ownership agreement.

We give clients the current list of providers that touch their data on request, and we tell them before we add a new one. We also share information if the law or a court requires it.

5. Information inside the agents we build

When we build an agent for a business, that business is the owner of its customers’ data and decides what the agent does. We are the processor: we use that data only to build, run, test and support the agent for that client, never for another client, and never to train AI models. Our terms with clients are described on our Data Handling page. If you are a customer of one of our clients, please contact that business for your privacy requests; we will help them respond.

6. Transfers outside your country

We work from India, and the providers above may process information in other countries, including the United States. Where the law of your country requires a safeguard for such transfers (for example EU or UK Standard Contractual Clauses), we use it.

7. How long we keep it

• Enquiry messages: until the enquiry is closed, then up to 12 months unless we become your service provider.
• Client project files and agent chat logs: for the life of the project and as the client configures, by default no longer than 90 days for chat logs; clients can ask for longer or shorter.
• Voice notes: deleted after they are turned into text.
• Invoices and tax records: as long as Indian law requires.
• Security logs: at least 180 days, and up to one year or longer where the law requires.

8. Your rights

You can ask us to show you what we hold about you, correct it, delete it, stop using it or take back a consent you gave. If you are in the EU or UK you can also object to some uses and ask for a copy you can move elsewhere. You can nominate someone to exercise your rights if you cannot. Contact us as in section 1. We will answer within 30 days, and sooner when we can. If you are not happy, you can complain to your local data protection authority (in India, the Data Protection Board once it starts work).

9. Grievance officer

Our Grievance Officer handles privacy complaints. Message WhatsApp +91 76003 73710 with the words "Privacy complaint". We acknowledge within 48 hours and aim to resolve within 30 days.

10. Security and incidents

We use HTTPS, restricted access to client accounts, two-step login on our important accounts and separate access for each client. No system is perfectly secure. If an incident affects your information we will report it to the authorities as Indian law requires (including to CERT-In within 6 hours for qualifying incidents) and tell affected clients quickly, so they can meet their own deadlines.

11. Children

Our services are for businesses, not for anyone under 18. We do not knowingly collect information from children. If you think a child has sent us information, tell us and we will delete it.

12. Marketing messages

We message you about our services only if you contacted us or asked us to. Reply STOP at any time and we will stop and add you to our do-not-contact list.

13. If you are in the US

We do not sell or share personal information as those terms are defined in US state privacy laws. You can ask to know, delete or correct information about you, and we will not treat you differently for asking.

14. Changes

If we change this policy in a way that matters, we will update the version and date above and, where we hold your contact details, tell you.