Privacy Policy

Account data is about you and your team as BizSaathi users: names, email addresses, phone numbers and how you use the Service. For this data, Get Catalyzed is the data fiduciary.

Business data is what your business puts into BizSaathi: leads, customers, contacts, quotations, invoices, payments, projects and files. Your business decides what to collect and why, so your business is the data fiduciary and Get Catalyzed is its data processor, handling it only on your business's instructions. People whose details a business keeps in BizSaathi should contact that business first about their data.

• When you sign up and use BizSaathi: name, email, phone, password (stored only as a secure hash), business name and details such as GSTIN, address and bank details you choose to add.
• Billing: the plan, number of users and payment records. Card and bank details are handled by Razorpay; we don't see or store full card numbers.
• Usage and security: sign-in times, IP address, browser, and a record of important changes (the audit log), to keep accounts secure and fix problems.
• Messages to us: what you send when you contact support.
• Cookies: only those needed to keep you signed in, remember preferences such as dark mode, and protect against misuse. We don't use advertising cookies.

• to provide the Service, including sending the quotations, invoices and reminders you ask it to send;
• to bill you and issue GST invoices;
• to keep BizSaathi secure, prevent misuse and fix errors;
• to send you service messages, such as trial and renewal notices, security alerts and changes to these terms;
• to answer your questions and improve BizSaathi, using usage information in aggregate.

We process account data with your consent, given when you sign up, and for legitimate uses the law allows, such as providing a service you asked for and meeting legal duties like keeping tax records. You can withdraw consent at any time by closing your account; this doesn't affect processing already done.

We don't sell personal data. We share it only with service providers who help run BizSaathi, under contracts that require them to protect it:

• cloud hosting, database, file storage and backup providers;
• Razorpay, for subscription payments;
• email delivery providers, for sign-in, notices and the emails you send from BizSaathi;
• services your business connects itself, such as WhatsApp Business, Meta lead ads and your own Razorpay account, which receive only what is needed for that feature.

We may also disclose data when the law or a lawful order requires it, or to protect the rights and safety of our users or the public. Some providers may store data outside India, in countries the Government of India has not restricted, with appropriate safeguards.

Each business's data is kept separate from every other business. Connections are encrypted, passwords are hashed, sensitive settings are encrypted at rest, access is limited by role, and important changes are logged. Two-step sign-in is available for every user. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as the law requires.

• Account and business data: while your business has an active trial or subscription, then for 90 days after access ends so you can return, after which it is deleted.
• Tax invoices and payment records: for as long as tax law requires (generally eight years).
• Backups are overwritten on a rolling basis.

You can ask us to give you a summary of your personal data and how it is processed, correct or complete it, erase it (unless the law needs us to keep it), and nominate someone to exercise these rights for you. Many of these you can do yourself in your profile and business settings, including downloading all your data.

To exercise a right, email us from the address on your account. We will reply within 30 days. For business data held by a business that uses BizSaathi, please contact that business.

BizSaathi is for businesses and is not meant for anyone under 18. We don't knowingly collect children's personal data.

If you have a concern about how your personal data is handled, contact our grievance officer. We will acknowledge your complaint within 24 hours and resolve it within 15 days.

Name: [grievance officer name: to be added]
Email: [grievance officer email: to be added]
Address: [registered address: to be added]

If you aren't satisfied with our response, you may complain to the Data Protection Board of India.

We will post any changes here and update the date above. For significant changes we will tell you by email or in BizSaathi.