Privacy Policy
How BelloCloud LLC handles personal data when BelloSend is used by businesses, their staff and their customers.
Last updated: August 9, 2026
1. Scope and our roles
BelloSend is operated by BelloCloud LLC (“BelloCloud”, “we”, “us”), a limited liability company registered in New Mexico, United States, at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110. This policy covers the BelloSend website, account area and platform. Reach us at contact@bellosend.net or +1 505 528 3844.
For account, security and service-administration data, BelloCloud acts as a controller. For contacts, messages and other customer data submitted by a business, the business is normally the controller and BelloCloud processes that data on its documented instructions.
2. Information we process
- Account data such as name, business email, password hash, organization, role and preferences.
- WhatsApp and Instagram channel configuration, Meta asset identifiers and encrypted integration credentials.
- Business-customer data such as phone numbers, Instagram usernames and platform-scoped identifiers, profile names and pictures, message content, media, comments and mentions on the business’s own posts, templates, tags, notes and conversation history.
- Campaign, chatbot, flow, calling, team, assignment, API, webhook and audit-log data created through the service.
- Technical, security and limited usage-analytics data such as IP address, browser information, page or route viewed, referrer, request logs, timestamps and authentication events.
- Communications sent to BelloCloud about onboarding, support, privacy or legal requests.
3. Why we process information
We process information to provide and secure BelloSend, authenticate users, route WhatsApp and Instagram messages, operate requested features, understand page and feature usage, maintain auditability, prevent abuse, troubleshoot, communicate about the service and comply with law.
Where applicable, our legal bases include performing a contract, BelloCloud’s legitimate interests in operating, improving and securing the service, compliance with legal obligations and consent where the law requires it.
4. Sharing and subprocessors
We share data only as needed with the customer organization, Meta at the customer’s direction for the WhatsApp Business Platform and Instagram messaging, infrastructure and security providers, PostHog for limited product-usage analytics, professional advisers, and authorities where legally required. We may also disclose data in a corporate transaction subject to appropriate protections.
PostHog receives page-navigation and basic device data through its United States service endpoint. BelloSend disables autocapture, performance capture and session recording, and removes query strings, fragments and common record identifiers from tracked URLs. We do not sell personal data or use BelloSend message content for third-party advertising.
5. Retention and deletion
We retain account and service data while the organization uses BelloSend and as reasonably required for security, backups, dispute resolution and legal obligations. Retention for business-customer data is controlled by the customer’s instructions and available platform operations.
Deletion from active systems may not immediately remove protected backup copies; backup data is isolated and expires through the normal backup cycle. A business should export required information before ending service.
How to request deletion: write to contact@bellosend.net from the email address on the account, stating the organization name and what should be deleted: the whole account, one connected channel — a WhatsApp number or an Instagram account — or an identified contact and its message history. We acknowledge requests within five business days and complete verified requests within thirty days, except where law requires longer retention.
If you are an end customer who messaged a business through BelloSend, that business decides what happens to your data and should be contacted first. If you cannot reach them, write to contact@bellosend.net and we will identify the business and pass on your request.
A business can also end our access itself. Removing a WhatsApp number or disconnecting an Instagram account in BelloSend, or revoking BelloSend in Meta Business settings or Instagram’s connected-apps settings, stops further access immediately. Where Meta tells us that access has been withdrawn, we treat it as an instruction to stop processing that channel’s data and to delete it on the schedule described above.
6. Security
BelloCloud uses HTTPS, access controls, organization scoping, audit records and configured encryption for stored integration secrets. No system can guarantee absolute security. Customers must protect credentials, limit roles, secure Meta assets and report suspected compromise promptly.
7. International transfers and your rights
Data may be processed where BelloCloud and its infrastructure providers operate. Where required, appropriate transfer safeguards are used.
Depending on applicable law, individuals may request access, correction, deletion, restriction, objection or portability, and may complain to a supervisory authority. End customers should first contact the business that communicated with them; BelloCloud will assist that business as required.
8. Children, changes and contact
BelloSend is a business service and is not directed to children. Businesses must not use it to collect children’s data unlawfully.
We may update this policy when the service or law changes. Material revisions will be reflected by the date above. Privacy questions and rights requests may be sent to contact@bellosend.net.