Privacy Policy
Last updated 19 October 2026
1. Who we are
Blitz Docket is operated by Blitz Docket Platforms LLP (LLPIN ACV-0934), registered in India and based in Gurugram, Haryana. Our registered address is available on request. Contact: privacy@blitzdocket.app.
Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for account data and a Data Processor for customer content, which we handle only on our customer's instructions. Requests from a customer's own buyers or contacts should go to that customer, and we will help them respond.
2. What we collect
- Customer content: business correspondence and documents a customer connects to the service, such as emails, WhatsApp messages, purchase orders, quotations, invoices and catalogues, and the information extracted from them. These can contain personal data about third parties, such as names, phone numbers, email addresses and delivery addresses.
- Account data: the name and work email of each person given access, their permissions, and operational logs needed to run, secure and bill for the service.
3. Google account data
A customer may connect a Google mailbox through Google's consent screen and can disconnect it at any time. We request gmail.readonly, to read incoming business mail and attachments, and gmail.compose, to create draft replies in the customer's mailbox and send reports the customer has set up. We do not request access to delete, move or label mail, or to Google Drive, Calendar or Contacts.
Blitz Docket's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data obtained through Google APIs is never used for advertising, never sold or transferred to data brokers, never used to train generalised machine learning models, and is read by a person only where the customer asks us to, to investigate a fault or abuse, or where the law requires it.
4. WhatsApp
A customer may connect their own WhatsApp Business Account through Meta's WhatsApp Business Platform and can disconnect it at any time. When someone messages that number, we receive the message, any attached media and the sender's phone number, and use them only to provide the service to the customer.
- The sender's WhatsApp display name is discarded on receipt and not stored.
- We do not request or import chat history, profile photographs, group chats or address books.
- Where a customer also uses the WhatsApp Business app on the same number, messages the customer sends from the app may also reach us, so that the conversation is complete.
- Messages from numbers the customer has not identified as a buyer or a member of their team are held without being processed until the customer decides what to do with them.
What is sent
We send messages to a buyer only in reply to a buyer who wrote first, and only replies the customer has approved or set up. We send no marketing. We also send messages to people the customer designates within their own business, such as requests to approve a reply and daily summaries.
Buyers' details
A buyer's phone number and messages are customer content, processed for the customer as described in section 1. Meta also stores WhatsApp messages and media under its own retention, which we do not control; deleting our copy does not delete Meta's. Our use of the platform follows the WhatsApp Business Messaging Policy.
5. Why we process it
To provide the service the customer has subscribed to, to give their users access, and to run, secure and bill for the service. We do not use any of it for advertising, profiling, or any purpose the customer has not asked for.
6. Model training
Customer data is never used to train any machine learning model, ours or anyone else's, and is never used to improve the service for another customer. To read documents and messages, their content is sent to Google's Gemini API, which processes it on our behalf and does not use it for training. If we change provider, we will update this page before the change takes effect.
7. Service providers
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, file storage, sign-in | Japan |
| Railway | Application hosting | Region of our deployment |
| Gmail (connected mailboxes) and Gemini API (document reading) | Global | |
| Meta | WhatsApp Business Platform (connected accounts) | Global |
| Cloudflare | Serving this website; no customer data | Global |
We use no analytics, advertising or error-reporting services.
8. Storage and retention
Data is stored with Supabase in Japan, outside India. Customer content is kept while the customer subscribes. When a subscription ends, or at any time on request, we delete the customer's data within 14 days, after exporting it to them if they ask. Backups are cycled out within 90 days. Disconnecting a mailbox or WhatsApp account stops further access to it immediately. See how to request deletion.
9. Security
Data is encrypted in transit and at rest. Each customer's data is kept separate from every other customer's, and internal access is limited to what is needed to support the customer. We will notify the Data Protection Board and affected people of a personal data breach as the DPDP Act requires.
10. Your rights
Under the DPDP Act you may request access to, correction or erasure of your personal data, raise a grievance, and nominate someone to act for you. Write to privacy@blitzdocket.app; we respond within 30 days. You can also revoke our access to a Google account at any time from your Google account permissions.
11. Cookies
This website sets no cookies and runs no analytics. It loads fonts from Google Fonts and is served through Cloudflare, which keep standard request logs for delivery and security.
12. Changes
We will update the date above when this policy changes, and tell subscribers by email before any material change takes effect.
13. Contact and grievances
Grievance Officer: Bhavya Gupta, privacy@blitzdocket.app. If a grievance is not resolved, you may complain to the Data Protection Board of India.