Last updated: October 20, 2026
This Privacy Policy describes how Project Blue Services LLC (doing business as “Project Blue”, “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with our website, applications, and message transmission platform (“Services”). It should be read together with our Terms of Service.
This policy does not apply to third-party websites, applications, carriers, device platforms, or other services that we do not control.
By using our Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.
Project Blue provides a message transmission and communications infrastructure platform. We transmit messages and place calls at our customers’ direction and on their behalf.
This policy covers two categories of individuals:
For account, billing, website, and support data about a Business User, Project Blue is the controller (or equivalent under applicable law).
For End User data and other Customer Data that a Business User submits, uploads, or transmits through the Services — including message content, recipient telephone numbers, sending identities, consent records, and campaign metadata — the Business User is the controller and Project Blue is the processor (or service provider), acting on the Business User’s documented instructions. As between the Business User and Project Blue, the Business User is the sender of every message transmitted through the Services.
We collect information directly from you, from Business Users, from third parties, and automatically through use of the Services.
The specific End User data we process depends on how a Business User uses the Services. It may include recipient contact information, message content, delivery metadata, and device or technical data associated with a message or call. Business Users are responsible for informing End Users about this collection and for having a lawful basis to provide the data to us.
We use information to:
When we act as a processor, we process Customer Data only to provide the Services, to comply with law, and to follow the Business User’s instructions. We do not select End User recipients, author message content, or decide when a message is sent.
We may share information with:
We share information for the purposes described above. When we share Customer Data with messaging and calling providers, we do so as necessary to deliver and support the communications a Business User directs. We do not share Customer Data with these providers for their own marketing, and as stated in the SMS and Text Messaging section, mobile numbers and SMS consent collected by Project Blue are not shared with third parties or affiliates for marketing or promotional purposes.
We may also share de-identified and aggregated data that does not identify you.
Project Blue may respond to subpoenas, court orders, regulatory demands, carrier inquiries, and other legal process relating to an account or use of the Services, and may produce Customer Data in response. Where not prohibited, we will use commercially reasonable efforts to notify the Business User before producing Customer Data.
We retain account, billing, and service records for as long as reasonably necessary to provide the Services, comply with law, resolve disputes, and enforce our Terms. We may retain de-identified and aggregated data that no longer identifies an individual for analytics, security, and service improvement, where permitted by applicable law and platform requirements. This does not authorize indefinite retention of identifiable messages or account data. WhatsApp data is subject to the service-delivery limits in the WhatsApp Messaging section. See Requesting Deletion of Your Data for how to request deletion and the limited circumstances in which records may be retained.
Business Users are solely responsible for maintaining their own records of consent and of messages sent, and should not rely on Project Blue as their system of record for compliance purposes. We do not warrant that any particular Customer Data record will remain available.
We use administrative, technical, and physical measures designed to protect personal information. No system is completely secure, and we cannot guarantee absolute protection.
Message and call transmission depends on Third-Party Providers. Communications sent through the Services may travel over networks that are not end-to-end encrypted, and Project Blue does not guarantee the confidentiality, security, or privacy of any message or call in transit. Business Users are responsible for safeguarding their account credentials and for the security of data they submit.
This section describes text messages that Project Blue sends from its own business phone numbers to its own prospects and customers. It does not cover messages a Business User sends through the Services to its own contacts; those are governed by that Business User’s privacy policy.
If you provide your mobile phone number to Project Blue and agree to receive text messages, for example by checking the SMS consent box on our demo booking form at https://www.tryprojectblue.com/book-demo, or by sending a text message to a Project Blue business number, we use your number to send you one to one text messages about your demo request, scheduling, and your account. See how we collect SMS consent.
Our text messaging program:
Mobile phone numbers, SMS consent, and text messaging opt in data are not shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt in data and consent are not shared with any third parties.
We retain records of SMS consent and opt out events for as long as needed to honor your choices and to comply with carrier and legal requirements. To access your number, contact us at the address in the Contact section. To request deletion, follow the steps in Requesting Deletion of Your Data.
Business Users can connect their own WhatsApp Business account to Project Blue to use our messaging integration. When they do, we process the connected account’s identifiers, business phone number, message content, sender and recipient details, delivery status, and message templates as needed to provide and support that integration.
We process this data on behalf of the Business User and under its instructions, including transmitting messages, showing conversations to its authorized team members, and syncing messaging data with its connected customer relationship management system where it has enabled that integration. The Business User is the controller of this Customer Data, and Project Blue acts as its processor or service provider, as described in Who We Are; Roles.
We do not sell WhatsApp data or use it for advertising. We do not use WhatsApp message content for AI features, model training, or product improvement beyond delivering and supporting the Business User’s messaging integration. The general analytics and de-identified data provisions in this policy do not expand these uses.
WhatsApp is part of Meta. Use of WhatsApp is also subject to the applicable WhatsApp and Meta terms and privacy policies. A Business User’s own privacy notice explains how it uses the information it receives through WhatsApp.
To request deletion of data processed through this integration, including data associated with a connected Meta or WhatsApp account, follow the steps in Requesting Deletion of Your Data.
The Services are not intended for Protected Health Information (“PHI”) as defined under the Health Insurance Portability and Accountability Act (“HIPAA”). Do not use the Services to create, receive, maintain, or transmit PHI unless you have executed a written business associate agreement with Project Blue. Use of the Services for PHI without that agreement is prohibited.
Business Users are responsible for:
If you are an End User and want to access, correct, or delete data a Business User submitted about you, contact that Business User. We will assist the Business User as required by law.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information we hold as a controller, to opt out of certain processing, or to lodge a complaint with a regulator.
To exercise rights we can fulfill as a controller, contact us at support@tryprojectblue.com. For deletion requests, follow the steps in Requesting Deletion of Your Data. We may need to verify your identity. If we process the data only as a processor for a Business User, we will direct you to that Business User or forward your request to them.
You can request deletion of personal information held by Project Blue, including data associated with our WhatsApp integration, by emailing support@tryprojectblue.com with the subject “Data deletion request.”
We will respond without undue delay and within the time required by applicable law. Our target is to respond within 30 days of receiving your request, or sooner if the law requires. If a legally permitted extension is necessary, we will explain the reason and the expected response date within the applicable initial response period. Our response will explain the action taken, any information needed to complete the request, or why we cannot delete particular records.
If you communicated with a business using Project Blue: that Business User controls the messages and other Customer Data it submits to the Services. You can request deletion directly from that business. If you contact us, we will direct you to it or forward your request as appropriate and assist it in fulfilling the request as required by law. Deleting data from Project Blue does not automatically delete copies held independently by the business, its CRM, or other providers; those copies are subject to their own privacy policies and deletion processes.
If you connected a Meta or WhatsApp account: you may also revoke Project Blue’s access through the relevant Meta account’s app or business integration settings. Look for Project Blue or Project Blue Relay, depending on the name shown for your connection. Removing an integration revokes its access but does not by itself ensure deletion of data already stored by Project Blue. Email us using the steps above to request deletion of that data.
Limited retention: we may retain records where required or permitted by applicable law, including to meet legal obligations, preserve evidence for legal claims, prevent fraud, or honor opt-out choices. Carrier or platform recordkeeping requirements apply only to the extent consistent with applicable law. Any retained personal information remains subject to this policy and is limited to the purpose requiring retention. Where applicable, we will explain any retention exception in our response. Information that has been de-identified so it can no longer be associated with you is addressed in the Retention section.
Our Services are not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have collected such information, we will delete it.
We may update this Privacy Policy from time to time. Changes are effective when posted on this page. Continued use of the Services after a change constitutes acceptance of the updated policy.
Questions or privacy requests:
Email: support@tryprojectblue.com
Project Blue Services LLC
