Logo Bulk5
Sign In
Data Protection & Privacy Governance

Global Privacy Policy & Data Security

Effective Date: September 2026 • Compliant with TRAI DLT, GDPR & CCPA

1 Commitment to Privacy & Information Security

At Bulk5, safeguarding the personal data, messaging payloads, and recipient phone numbers processed through our telecom switching systems is our highest priority. This Privacy Policy details our data collection practices, encryption standards, retention schedules, and disclosure boundaries across our web portals, APIs, and wholesale routes.

2 Categories of Information Processed

In operating our telecom aggregation platform, we process the following categories of data:

A. Account & Billing Information

Client names, verified business emails, WhatsApp numbers, KYC entity documentation, tax identifiers, and transaction ledger histories.

B. Telecom Transmission Telemetry

Destination MSISDN (mobile numbers), Sender ID headers, message character length, parts count, carrier delivery receipts (DLR), and timestamp logs.

3 TRAI DLT & Regulatory Data Handling in India

In accordance with regulatory mandates issued by TRAI and the Department of Telecommunications (DoT):

  • Principal Entity (PE) IDs, registered Sender Headers, and Content Template IDs are matched against authorized distributed ledgers operated by licensed telecom service providers.
  • Delivery receipts, recipient masking telemetry, and transmission records are maintained for regulatory audit trails in full compliance with lawful interception and telecom governance frameworks.

4 End-to-End Encryption & Security Controls

We deploy multi-tiered defense-in-depth security measures to protect stored and transit data:

  • Transport Layer Security: All API communications, portal logins, and gateway transmissions are secured using TLS 1.3 encryption with 256-bit AES cipher suites.
  • Database Hardening: Passwords are cryptographically hashed using standard Bcrypt algorithms; session tokens utilize HTTPOnly, Secure, and Lax samesite flags.
  • Strict Downline Data Isolation: Multi-tenant isolation ensures that contact phonebooks, templates, and campaign logs of one client or reseller are entirely inaccessible to any other user.

5 Data Retention & Right to Erasure

Campaign transmission logs are retained for a rolling window of 90 days to provide historical delivery reconciliation and dispute resolution, after which detailed message payloads are automatically purged. Users may request account deactivation and data minimization by contacting our data protection desk at care@bulk5.com.