Privacy Policy

Last updated: 11 October 2026

BartaCare is a customer messaging service made by Amir Technologies. Businesses use it to answer messages from WhatsApp, Facebook Messenger and Instagram in one shared inbox, to send WhatsApp campaigns and, if they choose, to use an AI assistant. This policy explains what information BartaCare handles when we host it for a business, why we need it, and the choices you have.

1. Who we are

Amir Technologies, Karent Hat, Chirirbandar, Dinajpur, Bangladesh. Email: hello@bartacare.com.

This policy covers BartaCare when Amir Technologies hosts it at app.bartacare.com (the “hosted service”), the BartaCare app on Meta’s platform, and this website, bartacare.com.

Some businesses run BartaCare on their own server under a self-hosted license. That business decides how data is handled in its installation, and its own privacy policy applies. We don’t receive the messages or contacts stored there.

2. Our role

Business accounts. For the people who sign in to BartaCare (business owners and their team members), we decide how their account information is used.

Customer conversations. Messages, contacts and other customer information belong to the business that uses BartaCare. We handle them only to provide the service, on that business’s instructions. If you messaged a business, that business is your first point of contact (see section 10).

3. Information we collect

When a business signs up and uses BartaCare

• Name, email address and password. Passwords are stored only as a secure hash.
• Two-factor authentication and passkey details, if you turn them on.
• Workspace name, team members, roles and invitations, and language and display preferences.
• Sign-in sessions: IP address, browser type and time of last activity, used to keep you signed in and to protect your account.

When a business connects its Meta accounts

A business owner or admin connects accounts through Facebook Login or WhatsApp Embedded Signup. With the permissions the business grants, we receive:

• the Facebook Pages the person manages (Page ID, name and picture) and their linked Instagram professional accounts (ID, username, name and picture);
• WhatsApp Business Account and phone number details (IDs, display name, verified name, quality rating and messaging limit);
• access tokens that let BartaCare act for those accounts. We store them encrypted.

Facebook Login is used only to connect business accounts, never to sign anyone in to BartaCare. We don’t request or read your personal Facebook profile, friends list, email address, birthday or any other personal profile information.

When customers message a connected account

• Messages and attachments (text, photos, videos, voice notes, documents and locations) sent and received in the inbox, with their delivery and read status.
• The customer’s WhatsApp phone number and profile name, or their Messenger or Instagram ID, name, username and profile picture link, as provided by Meta.
• Comments on the business’s Facebook or Instagram posts, and the replies sent, when the business uses Comment Automation.
• Contact details the business adds or imports, such as name, phone number, email address, tags, notes and custom fields, and whether a contact has opted out of campaigns.

WhatsApp Business app numbers

A business can connect a number it keeps using in the WhatsApp Business app. If it agrees to share them during setup, we receive the app’s contacts, up to 6 months of past chats (including photos and files), and copies of the messages the business sends from the app from then on.

AI assistant (optional)

If a business turns on the AI assistant, we store the documents and web pages it adds to its knowledge base, short notes the AI keeps about each customer (for example, their preferred language), suggested answers learned from the team’s replies, and usage records such as the model used and the number of tokens.

Technical information

Our servers keep logs (for example, IP address, time and the action requested) so we can keep the service secure and fix problems. We also keep a copy of each notification Meta sends us about messages, so that every message is processed reliably.

4. How we use information

We use this information to:

• provide the inbox: receive messages, show them to the business’s team and send their replies;
• send the WhatsApp campaigns and message templates the business creates;
• run the AI assistant, when the business turns it on;
• send account emails, such as email verification, password resets and team invitations;
• keep the service secure, prevent abuse and fix problems;
• meet our legal obligations.

We don’t sell personal information, use it for advertising or build marketing profiles. We don’t use customer conversations to train AI models.

5. Information from Meta

This section covers information we receive from Facebook, Instagram and WhatsApp through Meta’s APIs.

• We use it only to provide the features the business has turned on, as described in this policy, and in line with Meta’s Platform Terms and Developer Policies.
• We don’t sell or license it, share it with data brokers or use it for advertising.
• We share it only with the service providers listed in section 6, and only when needed to run BartaCare.
• When a business disconnects an account or removes BartaCare’s access, we stop receiving new information from that account. Information we already have is deleted when the business or Meta asks us to. See the BartaCare data deletion instructions.

6. Who we share information with

• Meta Platforms, to send and receive messages on WhatsApp, Messenger and Instagram for the business.
• The AI provider the business chooses (for example Anthropic, OpenAI or Google), only when the business turns on the AI assistant with its own API key. To write a reply, we send the provider the conversation’s recent messages (up to 20, as text; attachments are described, not sent), the customer’s name, the notes and fields the business keeps about them, and relevant parts of the knowledge base. We don’t add the customer’s phone number or email address. To learn suggested answers, we also send past conversations to the same provider and ask it to leave out names, phone numbers and other personal details. The business’s agreement with that provider governs how the provider handles this information.
• Our hosting provider, which runs the servers where BartaCare is stored.
• Our email provider (currently Google Workspace), which delivers account emails.
• Authorities, when the law requires it, and a buyer or successor if Amir Technologies’ business is sold or merged, who must keep to this policy.

We don’t share personal information with anyone else.

7. Cookies

BartaCare uses cookies only to keep you signed in, to protect forms against forgery and to remember display preferences such as light or dark mode. We don’t use advertising or analytics cookies.

The WhatsApp connection page loads Meta’s JavaScript SDK so a business can log in with Facebook. Meta may set its own cookies on that page, under Meta’s privacy policy.

This website, bartacare.com, sets no cookies and loads nothing from other companies.

8. How long we keep information

• Accounts, workspaces, connected accounts, contacts and conversations: for as long as the business uses BartaCare, or until the business asks us to delete them.
• Server logs: 14 days.
• Team invitations: deleted when they expire, after 3 days.

When a business asks us to delete its information, we delete it within 30 days, except anything the law requires us to keep.

9. How we protect information

• Connections between your browser and BartaCare are encrypted (HTTPS).
• Access tokens, API keys, email passwords and two-factor secrets are encrypted in our database.
• We check that every notification about a message really comes from Meta before we process it.
• Attachments can be opened only by members of the workspace, or through links that expire after one hour.
• Roles control what each team member can do, and two-factor authentication and passkeys are available for every account.

No system is perfectly secure. If a breach affects personal information, we will tell the affected businesses, and the authorities where required, without undue delay.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how it is used, and to complain to a data protection authority.

If you use BartaCare for a business: you can update your name and email under Settings → Profile and export your contacts from the Contacts page. For anything else, email us.

If you messaged a business that uses BartaCare: ask that business first, because it controls your conversation. You can also email us with the business’s name and your phone number or Messenger or Instagram name, and we’ll pass your request on and help the business respond. To stop receiving WhatsApp campaign messages, reply STOP.

We reply within 30 days, and may first need to confirm your identity. To have information deleted, follow the BartaCare data deletion instructions.

11. International transfers

Amir Technologies is based in Bangladesh, and our service providers may process information in other countries. When personal information moves across borders, we take the steps the applicable law requires to protect it.

12. Children

BartaCare accounts are for businesses and their staff, not for children under 16.

13. Changes to this policy

We’ll post any changes on this page and update the date at the top. If a change is significant, we’ll tell business account owners by email or in BartaCare before it takes effect.

14. Contact us

Email hello@bartacare.com, or write to Amir Technologies, Karent Hat, Chirirbandar, Dinajpur, Bangladesh.