Privacy policy

Last updated: 7 November 2026

This policy explains what personal data DELVE DOTS LLC ("Bazm", "we", "us") collects when you use getbazm.com, the Bazm app, our API and our integrations with AI assistants (together, the "Service"), why we collect it, and the choices you have.

Who is responsible for your data

DELVE DOTS LLC, 30 N Gould St #4953, Sheridan, WY 82801, United States, is the controller of the personal data we collect to run your account. When you use Bazm to manage your own audience (for example, comments and messages from people who contact your business), you are the controller of that data and we process it on your behalf, only to provide the Service to you.

Questions about this policy: support@getbazm.com.

What we collect

Data you give us

• Account details: your name, email address, password (stored only as a secure hash) and profile picture.
• Organisation details: your organisation's name, brands, team members, their roles and permissions, and invitations you send.
• Content: posts, drafts, images, videos, comments, notes, saved replies, brand guidelines and other material you create or upload.
• Billing details: plan, billing address and payment status. Card details are collected and stored by Stripe; we never see or store full card numbers.
• Communications: messages you send to our support team.

Data from social media platforms you connect

When you connect an account from Instagram, Facebook, Threads, WhatsApp, LinkedIn, TikTok, X, YouTube or another platform, you authorise Bazm through that platform's official sign-in. Depending on the permissions you grant, we receive:

• access tokens that let us act for you, stored encrypted;
• the profile, page, channel or ad account details of the accounts you connect;
• your published posts, their comments and replies, and messages sent to your accounts;
• performance data such as reach, engagement, audience insights and ad results.

We only request the permissions needed for the features you use, and we only use platform data to provide those features to you.

Data collected automatically

• Usage and device data: IP address, browser and device type, pages and features used, and timestamps, collected in server logs to keep the Service secure and working.
• Cookies: we use cookies that are strictly necessary to keep you signed in and protect your account. We do not use advertising cookies.

How we use data

• to create and run your account and organisation, and let your team work together;
• to publish, schedule, reply, moderate and change settings on your connected accounts, only when you or a team member you authorised asks us to, or under automations and approval rules you set up;
• to show analytics and reports about your accounts;
• to generate content and reply suggestions with AI when you use those features (see below);
• to charge for paid plans and send receipts;
• to send service emails such as sign-in links, invitations, approvals and security notices;
• to keep the Service secure, prevent abuse and fix problems;
• to comply with the law.

We do not sell personal data, we do not share it for advertising, and we do not use data from your connected accounts to build profiles for advertising.

AI features

When you use AI features, the relevant content (for example, your brand guidelines, a draft, or a comment you want to reply to) is sent to an AI model provider to produce a result. Our providers process this data only to return results to us and are not permitted to use it to train their models. We do not use your content or your audience's data to train AI models. AI results are suggestions: actions you have set to require approval are not carried out until someone with permission approves them.

Legal bases (EEA and UK users)

• Contract: to provide the Service you signed up for.
• Legitimate interests: to keep the Service secure, prevent abuse and improve it.
• Consent: where we ask for it, such as when you connect a social media account; you can withdraw it at any time.
• Legal obligation: for tax, accounting and other legal requirements.

Who we share data with

We share data only with the service providers below, who process it on our instructions to run the Service, under contracts that require them to protect it. We may also share data when the law requires it, or with a buyer if our business is sold, in which case this policy continues to apply.

We also send data to the social media platforms you connect, when you ask us to act on them (for example, publishing a post). Their use of that data is governed by their own policies.

Google and YouTube data

Bazm's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. When you connect a YouTube channel, you also agree to theYouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Bazm's access at any time from your Google account's security settings.

International transfers

The Service runs mainly in the United States. When we transfer personal data from the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

How long we keep data

• Account and organisation data: for as long as the account is open.
• Data from a connected platform: until you disconnect that account or delete your organisation. When you disconnect an account we delete its access tokens immediately.
• After you delete your organisation, we delete its data within 30 days. Copies in encrypted backups are overwritten within a further 30 days.
• Billing records: as long as tax and accounting law requires.

Instructions are on our data deletion page.

Security

Data is encrypted in transit and at rest. Platform access tokens are additionally encrypted with keys held in a dedicated key management service. Each organisation's data is isolated at the database level, team access follows the roles you assign, and our staff access production data only when needed to support you or keep the Service running.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. California residents have the right to know, delete and correct their personal information, and not to be discriminated against for using these rights; we do not sell or share personal information as those terms are defined in California law.

To use any of these rights, email support@getbazm.com. We reply within 30 days. If you are in the EEA or UK, you can also complain to your local data protection authority.

If you are one of our customers' audience members (for example, you commented on a business's post), please contact that business first; we will help them respond.

Children

The Service is for businesses and is not intended for anyone under 16. We do not knowingly collect their data.

Changes to this policy

If we make material changes, we will tell account owners by email or in the app before they take effect. The date at the top shows when this policy last changed.