Privacy Policy

This policy explains what personal data Bizevora Technologies Private Limited (“we”, “us”) collects through the BizeSetu website (bizesetu.com) and the BizeSetu app (app.bizesetu.com and our Android app), why, who we share it with, how long we keep it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

The short version

• We collect what a shop needs to run its khata: names, mobile numbers, addresses, sales, payments and balances.
• We never sell personal data, show ads or use advertising or tracking SDKs.
• The app does not read your contacts, location, camera, microphone or files on your phone.
• Data is stored on servers in India.
• You can ask to see, correct or delete your data at any time: write to [email protected].

1. Who we are

BizeSetu is a product of Bizevora Technologies Private Limited, a company incorporated in India. For the personal data of shop owners, their staff and visitors to our website, we are the Data Fiduciary under the DPDP Act: we decide why and how that data is used.

For the personal data a shop enters about its own customers, the shop is the Data Fiduciary and we are its Data Processor: we store and process that data only to provide BizeSetu to the shop, on the shop’s instructions.

2. What we collect

Visitors to our website

• Trial request form: your name, mobile number, shop type and city, the page you sent it from, and which of our links brought you (see “Cookies” below).
• Spam protection: Cloudflare Turnstile checks that the form is sent by a person. It looks at technical signals from your browser and your IP address.
• Visit statistics: Cloudflare Web Analytics counts page views without cookies and without identifying you.

Shop owners and staff (people who sign in to the app)

• Account: full name, mobile number, optional email address, and your password (stored only as a one-way hash, never in readable form).
• Shop details: business name, store names, addresses, store contact numbers, GST status and opening hours.
• Staff: each staff member’s name, mobile number and role (for example manager, counter staff or delivery agent).
• Your work in the app: bills, deliveries, payments received, cash handed over, notes and photos you upload (such as product images).

Customers of a shop (entered by the shop)

• Name, mobile number, delivery address and landmark, and, if the shop enters them, map coordinates for the address.
• Delivery route, subscriptions, credit limit, tags and any other details the shop chooses to record.
• Purchases, deliveries, payments (including a UPI or cheque reference the shop types in) and the running balance.
• If the shop gives a customer a login, the customer’s password (as a one-way hash).

Collected automatically

• Security and audit records: which account made a change, what changed, when, the IP address and a device identifier. These protect your shop’s records and let us investigate misuse.
• Sign-in sessions: a session token, stored as a hash, so you stay signed in.
• Server logs: technical logs of requests and errors, used to keep the service running.

What we do not collect

We do not access your phone’s contacts, location, camera, microphone or files, and we do not collect payment card or bank details. The app has no advertising, no third-party analytics and no tracking of you across other apps or websites.

3. How we use it

• To provide BizeSetu: sign you in, keep each shop’s khata, bills, deliveries and statements, and show customers their own balance.
• To set up your free trial and contact you about it, after you send the trial request form.
• To support you when you ask for help, including resetting a password.
• To keep the service secure: prevent fraud, abuse and unauthorised access, and keep audit records.
• To bill shops for their subscription and meet our legal and tax obligations.
• To fix problems and improve BizeSetu, using technical logs.

We do not use personal data for advertising and we do not sell it.

4. Why we are allowed to use it

• Consent: when you send the trial request form, or create an account and accept our terms. You can withdraw consent at any time (section 9); this does not affect what was done before.
• Legitimate uses under section 7 of the DPDP Act: where the law requires us to keep or disclose data, and to provide the service you signed up for and keep it secure.
• Customers’ data: the shop is responsible for having a lawful reason to record its customers’ details, and we process them only for the shop.

5. Who we share it with

We share personal data only with service providers who process it for us, under contract, to run BizeSetu:

Provider	What they do
Microsoft Azure (Central India region)	App servers, database, server logs and backups
Cloudflare	Website and app delivery, security, spam protection (Turnstile), file storage, email routing and cookieless visit statistics
Google Fonts	Supplies the app’s typeface; your browser’s IP address reaches Google when the font loads

WhatsApp and sharing: when you choose to share a bill, statement or login through WhatsApp or your phone’s share sheet, the message is sent by that app under its own privacy policy. We do not send WhatsApp messages on your behalf.

We may also disclose data when the law requires it, for example to comply with a court order or a lawful request from a government authority, or to protect the rights and safety of our users. If Bizevora Technologies Private Limited is merged or sold, the data would pass to the new owner under this policy.

6. Where your data is stored

The app’s database, servers and backups are in Microsoft Azure’s Central India region. Cloudflare delivers the website and app through its global network, so a request may pass through a Cloudflare location outside India on its way to you.

7. How long we keep it

• Trial requests: up to 12 months, then deleted if you did not start using BizeSetu.
• Shop accounts: while the shop uses BizeSetu. After a shop closes its account we delete its data within 90 days, which gives the owner time to download records first.
• Records the law makes us keep: our invoices and payment records for a shop’s subscription, for 8 years, as Indian tax and company law requires.
• Server logs: 30 days. Backups: 7 days, on a rolling basis.

8. How we protect it

• All traffic is encrypted in transit (HTTPS), including the connection to our database, and data is encrypted at rest on Azure.
• Passwords and session tokens are stored only as one-way hashes. Sign-in is locked after repeated failed attempts.
• Every shop’s data is kept separate from every other shop’s, and each person sees only what their role allows.
• Only authorised people at Bizevora Technologies Private Limited can access production systems, and access is recorded.

No system is perfectly secure. If a personal data breach happens, we will inform affected people and the Data Protection Board of India as the DPDP Act requires.

9. Your rights

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete it;
• delete it (see section 10);
• withdraw your consent;
• nominate someone to act for you if you die or cannot act yourself.

Write to [email protected] from the email on your account, or include your registered mobile number. We may call or message that number to confirm it is you. We reply within 30 days.

If you are a customer of a shop that uses BizeSetu, your details belong to that shop’s records, so the quickest route is to ask the shop. You can also write to us and we will pass your request to the shop and help it respond.

10. Deleting your account

See Delete your account for how to ask, what we delete and what the law requires us to keep.

11. Cookies and storage

• App: two essential sign-in cookies that keep you logged in. They cannot be read by scripts and are used for nothing else. The app stores nothing else in your browser.
• Website: if you arrive through one of our campaign links, a first-party cookie (bz_src) remembers which link it was for 30 days, so that a trial request tells us which campaign worked. It holds no personal details and is not shared with anyone.
• Visit statistics on the website are cookieless.

12. Children

BizeSetu is a business tool for shop owners and their staff and is not meant for anyone under 18. We do not knowingly collect children’s data for our own purposes. If you believe a child has given us personal data, write to us and we will delete it.

13. Grievance Officer

For any concern about your personal data, contact our Grievance Officer, Bizevora Technologies Private Limited, at [email protected]. We acknowledge complaints within 7 days and resolve them within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

14. Changes to this policy

When this policy changes we update the date at the top of this page. If a change matters to how we use your data, we will also tell you in the app before it takes effect.