Privacy Policy

1. Who we are and what this policy covers

BluPass is provided by Bluishgen (“BluPass”, “Bluishgen”, “we”, “us” or “our”), based in Nigeria. This Privacy Policy explains how information is handled when website owners, administrators, support agents and their customers use BluPass, BluPass Hybrid, BluPass Agent, BluPass Backup, our licensing and payment services, and related websites.

Each business that installs BluPass controls the customer-support information stored on its own website. That business is responsible for telling its customers how it uses their information. Bluishgen processes limited information needed to activate BluPass services, deliver purchases, provide updates and support optional integrations.

2. Information we collect or process

Depending on the features used, BluPass may process:

• Website and account information: website URL, site identifier, administrator or agent name, email address, role and authentication records.
• Support information: customer name, email address, chat messages, attachments, service category, timestamps, chat status and agent replies.
• Commercial information: token balances, package or add-on purchases, transaction references, payment status and entitlement records. Card and bank details are handled by Paystack and are not stored by BluPass.
• Technical information: software version, activation status, error information, security logs, IP address and device or browser information where needed for security and operation.
• Notification information: push-notification identifiers and delivery status where an administrator enables mobile or browser notifications.
• Backup information: backup settings, schedules, job history, archive name and size, destination, completion status and error messages.

3. Google Drive access and Google user data

BluPass Backup uses the Google OAuth scope https://www.googleapis.com/auth/drive.file. This limited scope allows BluPass to create and manage only the Google Drive files and folders created or opened through BluPass. It does not give BluPass general access to all files in a user’s Google Drive.

When an administrator connects a Google Account, BluPass uses this permission to:

• Create a folder for that website’s BluPass backups.
• Upload backup archives requested or scheduled by the administrator.
• Continue authorized scheduled uploads using an OAuth refresh token.
• Store the returned Drive file identifier and upload status so the administrator can see whether a backup completed.

BluPass does not use Google Drive data for advertising, profiling or marketing, and does not sell Google user data. BluPass does not request permission to read unrelated Drive files. Google OAuth credentials are used only to provide the Drive backup feature authorized by the user.

The BluPass Sales Server coordinates the OAuth authorization and token exchange. The one-time exchange information expires shortly after authorization. The connected customer website stores the refresh token in encrypted form so scheduled backups can continue. Access tokens are short-lived and are refreshed only when required for a permitted Drive operation.

BluPass’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4. How we use information

We use information to provide customer-support tools; authenticate administrators and agents; deliver chat and notification features; maintain token balances and paid add-on access; process and confirm payments; create requested backups; upload backups to a connected Google Drive; provide updates and technical support; prevent fraud and abuse; diagnose faults; secure the service; comply with law; and enforce our Terms.

We do not use customer chats, backup contents or Google Drive data to train public artificial-intelligence models or build advertising profiles.

5. When information may be shared

We do not sell personal information. Information may be shared only as necessary with:

• The website owner and authorized agents operating that BluPass installation.
• Google, when the administrator requests Google Drive backup operations.
• Paystack, for payment checkout and verification.
• Notification, hosting and infrastructure providers used to deliver enabled features.
• Professional advisers, regulators or law-enforcement authorities where required by applicable law or necessary to protect users, Bluishgen or the public.
• A successor in a merger, restructuring or sale, subject to appropriate confidentiality and legal safeguards.

Service providers are permitted to handle information only for the services they provide to us and under applicable confidentiality and data-protection obligations.

6. Data location, retention and deletion

Support conversations, settings and most operational records are stored in the database of the website where BluPass is installed. Website administrators control those records and may delete chats using BluPass tools. Licensing, purchase and entitlement records may be retained by Bluishgen for service delivery, fraud prevention, accounting, dispute resolution and legal compliance.

Local backup archives are retained according to the retention setting selected by the administrator. Google Drive backup archives remain in the connected Google Account until the account owner or administrator deletes them, or a configured retention process removes them. Disconnecting Google Drive deletes the encrypted OAuth token from the connected BluPass website, but it does not automatically delete backup archives already stored in Google Drive.

We retain information only for as long as reasonably necessary for the purposes described in this policy, to provide requested services, or to satisfy legal and security requirements. A verified request may be submitted to Bluishgen to access, correct or delete information we control, subject to lawful retention obligations.

7. Security

We use measures designed to protect information, including encrypted HTTPS connections, signed requests between connected websites and the BluPass Sales Server, access controls, limited OAuth scopes and encrypted storage of Google OAuth tokens on the connected website. No internet service or storage system can be guaranteed to be completely secure. Website owners must maintain secure hosting, updates, administrator passwords and appropriate access permissions.

8. Your choices and controls

Administrators may choose not to connect Google Drive and can use local backups instead. A connected Google Account can be disconnected from the BluPass Backup page. Users can also review or revoke BluPass access from their Google Account permissions. After revoking access, scheduled Google Drive uploads will stop until the account is connected again.

Users may ask the website owner controlling their support conversation to provide, correct or delete their information. Requests concerning Bluishgen-controlled licensing, payment or OAuth information may be directed to us using the contact details below.

9. Children’s privacy

BluPass is a business support and website-administration service and is not directed to children. We do not knowingly solicit personal information directly from children. Website owners must use BluPass consistently with applicable age and consent requirements.

10. International processing

Service providers may process information in countries other than the user’s country. Where applicable, we use reasonable contractual, technical and organisational safeguards for such processing.

11. Changes to this policy

We may update this Privacy Policy when BluPass features, providers or legal requirements change. We will update the effective date on this page and provide additional notice where required.

12. Contact Bluishgen

Questions, privacy requests or complaints may be submitted through bluishgen.com.ng or by WhatsApp at +234 904 304 0188. Please identify the relevant website and describe your request clearly. We may need to verify your identity and authority before acting on a request.