Last updated June 18, 2026

Privacy Policy

This Privacy Notice for Bluq Technologies Private Limited (doing business as Bluq) describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you visit https://bluq.ai/ or use BluQ, our AI-powered construction site management platform. This notice is governed by and complies with the Digital Personal Data Protection Act, 2023 (India) and other applicable data protection laws. If you have questions or concerns, please contact us at aishna@bluq.ai or kalyani@bluq.ai.

Table of Contents

  1. 1. What information do we collect?
  2. 2. How do we process your information?
  3. 3. When and with whom do we share your personal information?
  4. 4. Do we use cookies and other tracking technologies?
  5. 5. Do we offer artificial intelligence-based products?
  6. 6. How do we handle WhatsApp data?
  7. 7. How do we handle your social logins?
  8. 8. How long do we keep your information?
  9. 9. How do we keep your information safe?
  10. 10. Do we collect information from minors?
  11. 11. What are your privacy rights?
  12. 12. Controls for do-not-track features
  13. 13. India DPDPA compliance and data breach notification
  14. 14. Do we make updates to this notice?
  15. 15. How can you contact us about this notice?
  16. 16. How can you review, update, or delete the data we collect from you?

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You may include:

  • Names
  • Phone numbers
  • Email addresses
  • Project addresses and site location information

Sensitive Information. We do not process sensitive personal information.

Social Media Login Data. We may provide you with the option to register using your existing social media account details. If you choose to register in this way, we will collect certain profile information from the social media provider, as described in section 7 below.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

Some information, including your Internet Protocol (IP) address and browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

  • Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect, including your IP address, device information, browser type, pages and files viewed, searches, and other actions you take within the Services.

2. How Do We Process Your Information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with applicable law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, including:

  • To facilitate account creation and authentication: so you can create and log in to your account and keep your account in working order.
  • To deliver and facilitate services: to provide you with the requested service.
  • To respond to user inquiries and offer support: to respond to your inquiries and resolve any potential issues you might have with the requested service.
  • To send administrative information: to keep you informed about changes to our terms, conditions, and policies.
  • To fulfil and manage your service requests: to process your requests and keep you updated on their status.
  • To protect an individual's vital interests: to prevent harm where necessary.

3. When and With Whom Do We Share Your Personal Information?

We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Service Providers and Subprocessors. We share your information with the following categories of third-party vendors and service providers who process data on our behalf:
    • Cloud infrastructure: Supabase (database), Railway (backend hosting), Upstash (caching and queuing)
    • AI processing: Anthropic (Claude AI models for schedule generation, report summarisation, and delay analysis)
    • Communications: Meta Platforms (WhatsApp Business API for site check-ins and automated updates)
    • Frontend hosting: Vercel (web application delivery)
    Each subprocessor is contractually required to maintain appropriate data security standards and to process your information only as instructed by us.

4. Do We Use Cookies and Other Tracking Technologies?

We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to gather information when you interact with our Services. These technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you refuse cookies, some parts of the Services may not function properly.

5. Do We Offer Artificial Intelligence-Based Products?

We offer products, features, and tools powered by artificial intelligence and machine learning technologies.

As part of our Services, we offer artificial intelligence (AI)-based features, including AI-powered schedule generation, delay prediction, and automated daily progress report generation. These features process construction project data and site updates you provide to us.

We use Anthropic's Claude to power these features. Data you submit to our AI-powered features may be processed by Anthropic subject to their privacy policy. We limit the data shared with Anthropic to what is strictly necessary to deliver the requested feature, and we do not share personally identifiable information beyond what is required for the specific task.

6. How Do We Handle WhatsApp Data?

Site engineers submit daily updates via WhatsApp. We process these messages to power core platform features.

BluQ uses the WhatsApp Business API (operated by Meta Platforms) to receive daily site updates from engineers. When a site engineer sends a WhatsApp message to a BluQ-connected number, we receive and process the message content, including any text, photos, or attachments shared.

These messages may contain information about third parties, including workers, subcontractors, and site supervisors. We process this information solely to update project schedules, generate daily progress reports, and flag delays or risks. We do not use WhatsApp message content for any purpose beyond delivering the Services.

WhatsApp message data is transmitted and stored in accordance with our security measures described in section 9. Meta Platforms processes message metadata subject to their own privacy policy. We recommend reviewing WhatsApp's Privacy Policy for details on how Meta handles message data.

7. How Do We Handle Your Social Logins?

If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details, such as your Google account. Where you choose to do this, we will receive certain profile information from your social media provider. The profile information we receive may vary depending on the provider but will typically include your name, email address, and profile picture.

We will use the information we receive only for the purposes described in this Privacy Notice. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend reviewing their privacy notices.

8. How Long Do We Keep Your Information?

We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Upon termination or deletion of your account, we will delete or anonymise your personal information within 90 days (three months). During this period, your data is retained solely to enable account recovery, resolve pending disputes, prevent fraud, and comply with applicable legal obligations. After this window, your data is permanently deleted from our active systems.

Certain records (such as billing and audit logs) may be retained for longer periods where required by law. Where deletion is not immediately possible, we will securely isolate your personal information from any further processing until deletion can be completed.

9. How Do We Keep Your Information Safe?

We aim to protect your personal information through appropriate organisational and technical security measures.

We have implemented reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. While we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. Do We Collect Information From Minors?

We do not knowingly collect data from or market to individuals under 18 years of age.

We do not knowingly collect or solicit data from individuals under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users under 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from individuals under age 18, please contact us at aishna@bluq.ai or kalyani@bluq.ai.

11. What Are Your Privacy Rights?

You may review, change, or terminate your account at any time.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details provided in section 15.

Account Information. If you would like to review or change the information in your account or terminate your account, you can log in to your account settings or contact us. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases within 90 days. However, we may retain certain information where necessary to prevent fraud, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.

Cookies and similar technologies. Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject browser cookies at any time.

If you have questions or comments about your privacy rights, you may email us at aishna@bluq.ai or kalyani@bluq.ai.

12. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

13. India DPDPA Compliance and Data Breach Notification

Bluq Technologies Private Limited is an Indian company and complies with the Digital Personal Data Protection Act, 2023 (DPDPA).

Under the DPDPA, we act as a Data Fiduciary with respect to the personal data we collect and process. We process your personal data only for the specific purposes disclosed in this Privacy Notice and only to the extent necessary for those purposes.

Your rights under DPDPA include:

  • The right to access a summary of your personal data we hold and the processing activities carried out.
  • The right to correction and erasure of inaccurate or incomplete personal data.
  • The right to grievance redressal: any grievance will be acknowledged within 48 hours and resolved within 30 days.
  • The right to nominate another individual to exercise your rights on your behalf in the event of your incapacity or death.

Data Breach Notification. In the event of a personal data breach that is likely to result in risk to your rights, we will notify you and the relevant Data Protection Board of India without undue delay and, where feasible, within 72 hours of becoming aware of the breach. The notification will include the nature of the breach, the categories and approximate number of individuals affected, likely consequences, and the measures taken or proposed to address the breach.

To raise a grievance or exercise your rights under the DPDPA, please contact our grievance officer at aishna@bluq.ai or kalyani@bluq.ai.

14. Do We Make Updates to This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by sending you a direct notification. We encourage you to review this Privacy Notice periodically to stay informed of how we are protecting your information.

15. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, please email us at aishna@bluq.ai or kalyani@bluq.ai, or write to us at:

Bluq Technologies Private Limited
India

16. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

To request to review, update, or delete your personal information, please visit https://bluq.ai/contact or email us at aishna@bluq.ai or kalyani@bluq.ai.