Legal
Privacy policy
Updated 12 November 2026
Who we are
Bitsbee Tree is run by Homingo, Lucknow, Uttar Pradesh, India. This policy explains what we collect, why, and the choices you have, for people who make pages ("creators") and people who visit them ("visitors"). We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
What we collect from creators
- Account: name, email, a hashed password (never the password itself), sign-in method (email, Google or Apple), two-step sign-in settings and your plan.
- Page content: your handle, photo, bio, links, blocks, designs, uploaded files and settings. Published pages are public by design; drafts are visible only to you and your team.
- Payments: for your plan, the payment reference and status from Razorpay or the app store. We never see or store card or bank details.
- Support: the questions you send us and our replies.
Tracking pixels and consent
A creator may add a Meta Pixel or Google Analytics to their page. These load only after the visitor agrees in the consent banner on that page; if the visitor declines or ignores it, nothing loads. Once accepted, Meta or Google process the data under their own policies, and the creator is responsible for using it lawfully. The choice is remembered for that page in that browser only; clearing the browser's site data asks again.
Your audience belongs to you
Email sign-ups, form answers, orders, bookings and messages that visitors send through your page belong to you, the creator. We store and process them only on your behalf to run those features; we do not contact your audience, sell their details or use them for our own marketing. You can export them, connect your own email or sheet tools (their keys are stored encrypted), and delete them at any time.
Payments on pages
Buyers pay creators through the creator's own Razorpay account. The card, UPI or bank details go straight to Razorpay and are never seen or stored by us. We keep the order record the creator needs: the buyer's email, what was bought, the amount, the status and the receipt link. Razorpay handles payment data under its own privacy policy.
Whispers (anonymous messages)
Whispers let visitors send a creator a message without saying who they are. The creator does not see the sender's name, email or IP address, and we do not store the IP address. To stop abuse, we keep a short code that changes every day (so repeated messages can be limited) and, if the creator blocks a sender, a code that works only on that one page. Messages are stored until the creator deletes them. We may look at a message that is reported as abusive, and we share information with the authorities only when Indian law requires it.
If you connect an Instagram professional account, you sign in on Meta's own screen and choose what to allow. Depending on the features you use, we read your profile, posts and reels, their insights, comments and messages, so we can show your posts on your page, show your figures to you, schedule posts you create, and send the automatic replies you set up. We never post, reply or message without an action or rule you set. The access token is stored encrypted. Disconnect in Social or Settings to stop access; we then delete your Instagram data. You can also remove access in Instagram's settings under Apps and websites.
YouTube and Google
If you connect a YouTube channel, Bitsbee Tree uses YouTube API Services with the read-only access you give on Google's own screen ("View your YouTube account"). We read your channel's name, handle, picture and link; its subscriber, video and view counts; and the title, date, view count and privacy setting of your newest uploads. We use this only to show your channel and public videos on your pages and your figures to you. Private, unlisted, scheduled and live videos are never shown on pages.
Uploads are a separate permission ("Manage your YouTube videos"), asked only if you turn them on. We then add to your channel only the videos you send from Bitsbee Tree, with the details you choose. A video waits on our server only until YouTube has it, then it is deleted.
Bitsbee Tree's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, not used to train AI models, and not read by people except with your permission, for security, or where the law requires it.
Tokens are stored encrypted; figures are refreshed every few hours and one reading a day is kept for up to 90 days. Disconnect in Social or Settings and we revoke the access and delete your channel data straight away; if you remove access on Google's permissions page, we delete it at the next refresh, within a few hours. Videos on pages play in YouTube's own player (privacy-enhanced mode). See the YouTube Terms of Service and the Google Privacy Policy.
AI features
When you use an AI text feature or the AI assistant (for example, writing a bio, suggesting a design or drafting a reply), we send our AI provider only what that request needs: the content of your page and the prompt you type. Our current provider for AI text and assistant features is DeepSeek. We never send visitor data, your audience's details, passwords or any Google user data to an AI provider.
The providers we use may change as Bitsbee Tree grows. The current list is always kept on this page.
Who else sees data
We do not sell personal data. We share it only with service providers that help run Bitsbee Tree (hosting, file storage, email delivery, payments and AI), each bound to use it only for us; with services you choose to connect; and with authorities when Indian law requires it. Some providers may process data outside India, with safeguards as the law requires.
Keeping and deleting data
- Account and page data stay while your account exists.
- Analytics are kept as daily totals while the page exists; the daily visitor code is thrown away each day.
- Disconnecting Instagram or YouTube deletes the data we read from them.
- Deleting your account (Account settings) takes your pages offline at once and deletes your account, pages, files, analytics, audience data and connections, apart from what the law requires us to keep (such as payment records for tax), and copies in backups that expire within 30 days.
- You can also ask us to delete your data, or data Meta or Google shared with us, by writing to official@homingo.co.in from your account email.
Your rights and choices
You can see, correct, export and delete your data in the app, withdraw consent for any connection by disconnecting it, and ask us about anything we hold. You can name someone to act for you if you are unable to. If you are not satisfied, you may complain to the Data Protection Board of India.
Cookies and storage
Bitsbee Tree uses only what sign-in and your preferences need (for example, keeping you signed in and remembering light or dark mode). Visitors to pages get no analytics cookies; pixels load only with consent, as described above.
Security
Connections are encrypted (HTTPS), passwords are hashed, and tokens and payment keys are encrypted at rest. Access inside Homingo is limited to what is needed to run and support the service. If a breach affects you, we will tell you and the authorities as the law requires.
Children
Accounts are for people 18 and over. People aged 13 to 17 may use Bitsbee Tree only with the verifiable consent of a parent or lawful guardian, as the Digital Personal Data Protection Act, 2023 requires, and we do not track them or show them targeted ads. Bitsbee Tree is not for children under 13. If you believe a child's data reached us without consent, write to us and we will delete it.
Changes, grievances and contact
We may update this policy; the current version is always here with its date, and we tell you before an important change. For questions, requests or complaints, including as our grievance contact under the IT Rules, write to official@homingo.co.in. We acknowledge within 24 hours and resolve within 15 days.
Homingo, Lucknow, Uttar Pradesh, India.