Privacy Policy

Last updated: April 1, 2026

BlueChip Infotech Ltd, operating as BlueChipStack ("BlueChipStack", "we", "us"), is based in Mississauga, Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, CRM/ERP platform, and mobile app (the "Service"), and the choices available to you.

1. Information We Collect

We collect information you provide directly, such as when you create an account, subscribe to a plan, invite team members, or contact support. Depending on how you use the Service, this may include:

• Name, email address, phone number, and company details
• Account credentials (passwords are stored as salted hashes, never in plain text)
• Billing information, processed securely by our payment processor, Stripe — we do not store full card numbers ourselves
• Content you create in the platform: leads, clients, proposals, invoices, to-dos, comments, and any file, image, or voice-message attachments you upload
• Usage data such as login activity, device/browser information, and pages visited

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including features you enable such as WhatsApp notifications or email alerts
• Process subscription payments and send related billing communications
• Send account, security, and service notices, including task assignments, shared-list updates, and comment mentions within your organization
• Respond to support requests and improve the Service based on how it's used
• Detect, prevent, and address fraud, abuse, or security issues

3. How We Share Information

We do not sell your personal information. We share information only with:

• Service providers who process data on our behalf to operate the Service — for example, Stripe (payments), our hosting provider, our transactional email sender, and Meta's WhatsApp Business Cloud API (only for notification messages you or your admin choose to enable)
• Other members of your own company account, to the extent the platform's sharing features (assigned to, shared lists, comments) are designed to show that data to teammates
• Authorities, where required to comply with a legal obligation, or to protect the rights, property, or safety of BlueChipStack, our users, or the public
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to the same privacy commitments described here

4. Data Retention

We retain Customer Data for as long as your account is active, and for a reasonable period afterward to allow for account recovery, comply with legal or accounting obligations, and resolve disputes. You may request deletion of your account and associated data by contacting support@bluechipstack.com, subject to any retention we're legally required to keep.

5. Data Security

We use industry-standard safeguards to protect your information — encrypted transport (HTTPS), hashed passwords, and access controls limiting who can reach production systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to keep these protections current.

6. Cookies and Similar Technologies

We use essential cookies/session storage to keep you signed in and remember your preferences (such as your light/dark theme). We do not currently use third-party advertising trackers on the Service.

7. Google Sign-In

When you use Google Sign-In, we access your basic Google profile information (name and email) to create or link your account. We do not receive or store your Google password, and we do not access any other data from your Google account without your explicit permission.

8. International Data Transfers

Our infrastructure and service providers may process and store data outside of Canada. Where this occurs, we take reasonable steps to ensure that data continues to be protected in a manner consistent with this Policy.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal information. You can update most account information directly from your profile, or contact us at support@bluechipstack.com to make a request. Company administrators can also manage or remove team members' access at any time.

10. Children's Privacy

The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date, and for material changes we will make reasonable efforts to notify active Customers.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise a data-related request, contact us at support@bluechipstack.com, or by mail to BlueChip Infotech Ltd, Mississauga, Ontario, Canada.