How BW Tasks handles your information

BW Tasks is a customer relationship management (CRM) product built and operated by BrandingWaale ("BrandingWaale," "we," "us," or "our"). This policy applies to the BW Tasks web application and its connected integrations (Google, WhatsApp Business API, and email), and describes how we handle information belonging to the businesses and individual users who use BW Tasks, and the leads/contacts that our customers manage inside it.

Name, email address, phone number, role, and password (stored hashed) when you or your team create a BW Tasks account.

Names, phone numbers, emails, and enquiry details that you or your team enter or import into BW Tasks about your own customers/leads.

WhatsApp messages, email messages, and templates sent or received through BW Tasks on your behalf, and their delivery status.

Log-in timestamps, IP address, browser type, and basic activity logs (e.g. which pages or features were used) for security and support.

We do not knowingly collect more information than is needed to operate the features described above, and we do not require any data beyond what a given feature (e.g. connecting an inbox, sending a WhatsApp template) needs to function.

If you choose to connect a Gmail account under Email → Accounts, BW Tasks requests limited access to your Google account through Google's OAuth flow, specifically:

• Send email on your behalf (gmail.send) — used only to send messages you compose, or automated/template emails you configure (e.g. campaigns, automation rules), from the mailbox you connected.
• View your email messages (gmail.readonly) — used only to sync messages into your BW Tasks mailbox view and to match inbound replies to the correct lead/contact and conversation thread.
• View your basic account info (userinfo.email) — used only to confirm which mailbox was connected.

We do not use Gmail data for advertising, we do not sell it, and we do not allow anyone other than you (and, if applicable, teammates you've given access to that mailbox inside your own BW Tasks account) to view it. Gmail data is never read or transferred by human reviewers except where necessary to investigate abuse, comply with law, or with your explicit consent for support purposes.

You can revoke this access at any time from Google Account → Security → Third-party access, or by disconnecting the mailbox inside BW Tasks — either immediately stops all further access and BW Tasks deletes the associated access/refresh tokens.

• To provide, maintain, and secure the BW Tasks application and its features (CRM, tasks, WhatsApp, email, invoicing)
• To send transactional and automated messages you configure (email campaigns, automation rules, WhatsApp templates) to your own leads/contacts
• To sync and thread inbound/outbound email and WhatsApp conversations against the correct lead record
• To provide customer support and respond to requests
• To monitor for misuse, fraud, or security incidents
• To comply with legal obligations

We share information only in the following circumstances:

• Service providers that host or operate parts of BW Tasks on our behalf (e.g. cloud hosting, database hosting, transactional email/SMS delivery), bound by confidentiality and data-processing obligations
• Google and Meta (WhatsApp Business API), solely to deliver the messages you send through those channels and to receive delivery/read receipts
• Legal requirements, if required to comply with a subpoena, court order, or similar legal process, or to protect the rights, property, or safety of BrandingWaale, our customers, or others
• With your direction, such as exporting your own data

We retain account, lead, and communications data for as long as your BW Tasks account is active, or as needed to provide the service. Gmail messages synced into BW Tasks are retained only for as long as the corresponding mailbox stays connected; disconnecting a mailbox stops further syncing and you may request deletion of previously synced messages at any time (see Section 8). Backups are rotated on a routine schedule and are not retained indefinitely.

We use industry-standard safeguards to protect information in BW Tasks, including encryption of data in transit (HTTPS/TLS), access controls limiting which team members and systems can reach production data, hashed password storage, and secure storage of OAuth tokens.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to continuously improve these protections.

• Access & correction — update your account details directly inside BW Tasks, or contact us for data we hold that isn't editable in the app
• Deletion — request deletion of your account and associated data by contacting us at the email below; we will delete it except where we're required to retain it by law
• Revoke Google access — disconnect a Gmail account from Email → Accounts inside BW Tasks, or from your Google Account's third-party access settings, at any time
• Export — request an export of the data associated with your account

To exercise these rights, contact us at privacy@brandingwaale.com.

BW Tasks is a business tool intended for use by adults acting on behalf of a business. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18.

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify account admins by email. Continued use of BW Tasks after a change takes effect constitutes acceptance of the revised policy.

Questions about this policy or your data can be sent to: