Privacy Policy

Last Updated: August 04, 2025

This Privacy Policy explains how Bubbledata Technologies Private Limited ("Aixel," "we," "us," or "our"), a company registered at Innov8 Mantri Commercio, Tower A 5th Floor, Bellandur, Bangalore South, Bangalore- 560103, Karnataka., collects, uses, processes, and safeguards personal data when you interact with our services through our websites (aixel.io and app.aixel.io) and associated platforms. This policy also covers how we handle the data of individuals who interact with our clients' websites and services when our platform is being used. This policy complies with the Terms and Conditions and also with applicable laws.

The terms "User", "customer", "client", "You", "Your", and "Yourself" refer to users of the Platform whose Personal Information is being collected in accordance with the terms of this Privacy Policy.

1. Data Collection

• Direct Interactions: We collect data when you interact with us directly, including when you:
  • Visit or sign up on our websites (aixel.io and app.aixel.io)
  • Participate in events
  • Interact with our online ads and content
  • Communicate with us through emails, sales, or marketing channels
  • Use our integrations with other platforms
• Client Integrations: We collect data when you integrate our services with your platforms (e.g., Shopify, Google Ads, Meta Ads). This includes data about your business and your end-users, as permitted under the terms of your agreements with those platforms, and with the appropriate consent from your end-users.
• Social Logins: We offer you the option to register and log in to our services using your existing accounts with third-party platforms such as Google and Facebook. If you choose to use these social logins, we may receive certain personal information from them. This data typically includes your name, email address, and profile picture, along with a unique user ID. We use this information to create and manage your account with us and also to personalize your experience with our platform. Please note that your interactions with these platforms are governed by their respective privacy policies. You should review the Google Privacy Policy and the Facebook Privacy Policy to understand how they handle your data. We will handle the tokens received from these platforms securely and will only use them for logging you into our platform.

2. Data Collected

• Personal Data: Email address, phone number, first name, last name, company details, and any other data you provide.
• Technical Data: IP address, geolocation (with consent where required), session duration, actions on user website, browser type, device type, unique device identifiers, time and date of visit, pages visited, referral URLs, and other diagnostic data.
• Platform Data: Information related to your connected platform accounts (e.g., Shopify, Google Ads, Meta Ads), including campaign data, settings, metrics, and performance data.
• Advertising Data: We collect data related to user interactions with our and our customer's online advertisements and marketing campaigns, including clicks and conversions, including data from platforms like Google Ads and Facebook Ads.

3. Data from Third Parties

• Shopify: When you integrate your Shopify store, we may access information such as name, business name, email, phone number, and website information directly from your Shopify account. We also use cookies, web pixels, and webhooks to track actions on your website and collect data such as IP address, browser type, and timestamps. We adhere to Shopify’s API Terms and ensure that this data is used only for the purposes of providing our services, such as conversion tracking and analytics. We do not sell, misuse, or otherwise repurpose the data obtained through Shopify.
• Google Ads: When you integrate your Google Ads account, we receive permissions to view data related to ad accounts. We access and store data such as ad names, budget, bid strategies, and performance metrics of the campaigns and ads. We get access to the user's Adwords account in order to fetch data. Our access to and use of this data is governed by the Google API Services User Data Policy, including the "Limited Use" requirements, ensuring that data is used only for providing our services and not for unrelated purposes. Specifically, we do NOT use data obtained from Google APIs to develop, improve, or train generalized AI and/or ML models
• Meta Ads (Facebook/Instagram): Similarly, when you integrate your Meta Ads account, we receive permissions to view data related to ad accounts and pages. We may access and store all settings and performance metrics for the campaigns. We adhere to the Meta Platform Policy and use this data solely for providing our services and optimization purposes. We ensure that data is collected with appropriate user consent.

4. Integration with Meta Platforms (Facebook)

• To provide our full range of services, Aixel integrates with Meta platforms. When you connect your Meta account to Aixel, we request your permission to access data necessary for our platform to function. The specific permissions requested are:
  • Access your Page and App insights: We use this permission to retrieve and display performance metrics from your connected Facebook Pages. This allows us to provide you with comprehensive analytics and reports on audience engagement and content performance directly within the Aixel platform.
  • Manage ads for ad accounts that you have access to: This permission allows Aixel to act on your behalf to manage advertising campaigns. Its primary purpose within our platform is to enable ad creation, monitoring, and optimization features, allowing you to control your ad accounts from a single interface.
  • Access your Facebook ads and related stats: We use this permission to read data about your ad campaigns, ad sets, individual ads, and their performance statistics (such as spend, impressions, and conversions). This data is essential for the reporting, analytics, and insights features of the Aixel platform.
  • Audience Creation (Custom & Lookalike Audiences): Our platform allows clients to use their own first-party data (such as customer email lists or phone numbers) to create Custom Audiences on Meta's platforms. When this feature is used, customer data is hashed on the client's side before being sent to Meta. Meta then matches this hashed data against its own user base to allow our clients to securely target advertisements to their existing customers. Furthermore, this data can be used to create Lookalike Audiences to help our clients reach new users who share similar characteristics with their existing customers. Our clients are solely responsible for ensuring they have obtained all necessary rights, permissions, and consents from their end-users before using their data for this purpose, in compliance with applicable laws and Meta's Custom Audience Terms.
• Data Use and Deletion: All data obtained through these permissions is used exclusively to provide and improve the Aixel services you use. This data is not sold or shared with any unaffiliated third parties. You can request the deletion of any data obtained from Meta by contacting us at hello@aixel.io, and we will process your request promptly in accordance with our data retention policies and Meta's Platform Terms. We retain data obtained from Meta only for as long as is necessary to provide you with our services or until you request its deletion.

5. Integration with WhatsApp Business Platform

• As a WhatsApp Measurement Partner, Aixel processes data on behalf of our clients to provide analytics and insights into their communications on the WhatsApp Business Platform. Our processing is governed by the WhatsApp Business Terms and this policy.
• User Consent: Our clients are responsible for obtaining appropriate consent from their end-users to communicate with them via WhatsApp and to have those interactions measured, in accordance with the WhatsApp Business Policy.
• Data We Process for Measurement: To provide measurement services, we process message metadata. This includes:
  • Phone numbers of the conversation participants.
  • Message status information (e.g., sent, delivered, read timestamps).
  • Conversation and message identifiers.
  • Aggregate analytics on messaging activity.
• Purpose of Processing: This data is used exclusively to provide our clients with analytics dashboards, measure campaign effectiveness, report on messaging volume and response times, and help them optimize their use of the WhatsApp Business Platform.
• End-to-End Encryption: We state for the record that all conversations on the WhatsApp platform are end-to-end encrypted. Aixel, as a Measurement Partner, does not have access to, nor does it store, view, or process the content of any messages (including text, images, or audio) exchanged between our clients and their end-users.

6. Data Processing and Use

• Service Provisioning: To provide our core services, including:
  • Sending emails related to notifications, contracts, subscription, billing, and product updates.
  • Generating insights and reports to enhance the customer journey, analyze user behavior, and optimize the customer's marketing campaigns.
  • Providing an integrated data platform that centralizes data from various sources, enabling seamless access, management, and use of data.
• Communication and Support: To communicate with you and provide customer support, respond to your queries and requests, and provide support through email or other channels.
• Analytics and Improvement: To analyze usage patterns, improve our services, develop new features, and understand user behavior. All data is used in an anonymized and aggregated manner, and we do not identify any individual user.
• AI Based Suggestions Where applicable, we use a specific user's data to generate AI-based suggestions that are tailored only to that individual. We do not use this data to train generalized AI models. This ensures that your data is used solely for your benefit and does not contribute to the development of broader AI capabilities.
• Marketing and Sales: To send you marketing emails about our products and services and for sales and promotional activities with your consent, which you may revoke at any time. You can unsubscribe from marketing emails at any time by using the unsubscribe link provided in the email or by emailing us at hello@aixel.io.
• Legal Compliance: To comply with legal obligations, respond to legal requests, and protect our legal rights.
• Business Transfers: We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

7. Data Sharing

• Service Providers: We use third-party service providers to assist with various functions such as data processing, hosting, marketing, customer support, and payment processing. We require these service providers to adhere to our privacy policies and applicable data protection laws.
• Legal Authorities: When required by law, legal process, or a governmental request.
• Affiliates & Partners: We will share your information with our affiliates, agents, and partner platforms as and when required for the smooth operation of our services.
• Advertising Platforms: We may share aggregated data with advertising platforms (like Google Ads and Meta Ads) for optimization and reporting purposes. This data is anonymized to prevent identification of individual users, unless explicit user consent has been obtained for a specific purpose. When sharing for conversion tracking, we adhere to the platform's guidelines on data security and user privacy.

8. Tracking Technologies and Cookies

• Google Analytics: To track user behavior on our services, including page content, click/touch interactions, movements, scrolls, and keystroke activities. You may refer to the Google Analytics Privacy Policy.
• Google Ads and Conversion Tracking: To track conversions and user behavior resulting from our Google Ad campaigns. We use conversion tracking pixels which are managed by Google and also adhere to their user policy guidelines. You may refer to the Google Ads Privacy Policy.
• Meta Pixel: To track user behavior and ad performance on Facebook and Instagram. We ensure that the Meta Pixel is implemented in a manner consistent with Meta's data privacy policies and that data is used solely for the purpose of optimizing your advertising campaigns. We also provide clear opt-out mechanisms where required. You may refer to the Meta Privacy Policy.
• LinkedIn Insights: This feature may collect your IP address and page you are visiting to facilitate the feature functionality. You may refer to the LinkedIn Privacy Policy.
• Other Cookies: To personalize your experience and enable core website functionalities.

9. Data Security

• We implement appropriate technical, organizational, and administrative security measures to protect your data against unauthorized access, disclosure, alteration, and destruction. These include regular security reviews, updates to our software and infrastructure, and specific controls to safeguard user tokens and credentials obtained through APIs from platforms like Google and Meta. We adhere to the Google API Services User Data Policy, including the Limited Use requirements, and similar standards outlined by other third-party platforms. Our internal security protocols require the rotation of credentials periodically to avoid any potential security breaches. We minimize the data we collect and store to only what is necessary. We store the tokens obtained from the social login providers securely to ensure you have continued access to our platform.

10. Data Retention and Deletion

• We retain your data for as long as necessary to provide our services, meet our legal obligations, and for business continuity purposes. When data is no longer needed, we ensure it is securely deleted or anonymized in accordance with applicable platform guidelines. We comply with data deletion requests in a timely manner. Data from connected platforms, including Shopify, Google Ads, and Meta Ads, are deleted according to the policies of each platform upon request or termination of service.

11. Data Subject Rights

• Under the upcoming Indian Digital Personal Data Protection Act 2023 and applicable international laws, you may have certain rights regarding your personal data, such as:
  • The right to access your personal data
  • The right to rectification of your data
  • The right to erasure of your data
  • The right to restrict the processing of your data
  • The right to data portability
  • The right to withdraw your consent given to process your data
  • The right to complain to the relevant authority
  • The right to object to the processing of your data
  • The right to opt-out of marketing communications
• To exercise your rights, please contact us at hello@aixel.io. We will ensure that all user requests are processed in compliance with the relevant platform's policies as well. Please note that if you interact with our clients, you may also contact them to exercise your data rights. You may contact us at hello@aixel.io if the client is unresponsive.

12. Children's Privacy

• Our services are not intended for children under the age of 18. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at hello@aixel.io. We will promptly remove such information from our servers.

13. International Data Transfers

• As a company operating in India, we may transfer personal data to other countries. We will implement appropriate safeguards in accordance with applicable laws to ensure your personal data is protected, including standard contractual clauses or other legally recognized transfer mechanisms.

14. End-User Privacy (Information for our Clients' Customers)

• What Data We Collect: When you visit one of our client's websites or interact with one of their ads, we may collect information about how you use that site or ad, such as what pages you looked at, how long you stayed on each page, and the items you added to your cart. We may also collect your IP address, location data (if permitted), and device information. We may also collect data that you enter in forms while on a website or while engaging with an app. The specific data collected depends on which website or app you are using and your consent preferences. If the website or app that you are using has social login integration, you can also use that to log in; by doing this, the owners of those websites and apps will get access to your profile information according to the terms of use and privacy policy of that particular platform. Please check that to know more about how they handle the data.
• How We Use Your Data: We use this information to help our client understand how customers interact with their website and ads. This helps them improve their website, target ads better, and offer a better experience. We will not use this data to market to you directly unless you also become one of our users by creating an account with us. We may share the data with the clients that you have interacted with, or if required by law enforcement.
• Data Retention & Deletion: We will retain the data of our client's users for a period that allows us to provide our services and will delete or anonymize them when it is no longer needed. We will also adhere to any data deletion requests from our clients. If you wish to request the deletion of your data, you should reach out to the company whose website or app you were using. However, we may assist in these deletion requests. If you have a direct relationship with our company, you can also request it from us. We are also required to cooperate with data controllers for data-related requests.
• Access to Your Data: If you would like to know what data has been collected about you by our clients when they use our service, please contact the company directly. They are responsible for handling access and deletion requests from their customers. However, if you have a direct relationship with our company, you can also request it from us.
• Security Measures: We take steps to protect the information of users on the websites of our clients, like keeping data encrypted and using robust access controls. We continuously monitor our systems to protect against unauthorized access.
• Opt-Out Options: We aim to provide transparent ways to control your data. If you do not wish to have your information collected by our clients through our service, you can opt out of cookies in your browser settings, or contact the website or application owner. Please note that opting out might affect your experience on some websites or apps.

15. No Discrimination

• We provide equal and non-discriminatory services to all the Users of the Website and do not discriminate against any User on refusal for providing their consent in exercise of their rights under law. However, collection and processing of your data is necessary for us to provide you with some Services, and in the event you refuse to grant us the permission, we may not be able to provide you with our Services.

16. Changes to this Policy

• We may update this Privacy Policy from time to time. We encourage you to review it periodically for any changes. Your continued use of our services constitutes acceptance of the updated Privacy Policy.

17. Contact Us

• If you have any questions or concerns about this Privacy Policy, please contact us at:
  • BUBBLEDATA TECHNOLOGIES PRIVATE LIMITED
  • Innov8 Mantri Commercio, Tower A 5th Floor, Bellandur, Bangalore South, Bangalore- 560103, Karnataka.
  • Email: hello@aixel.io