Your Privacy Comes First: Bizilot does not sell, lease, or monetize your personal or business data to third-party advertisers. All collected data is used strictly to power your business operations, fulfill customer orders, and protect platform security.

1. Introduction & Scope

Bizilot Technologies(“Bizilot”, “we”, “our”, or “us”) is committed to upholding the privacy rights of all individuals who interact with our platform. This Privacy Policy details our practices concerning the collection, storage, processing, and disclosure of personal data collected through bizilot.com, merchant storefronts, POS applications, and related software services.

This policy has been designed in strict adherence to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

We collect only the minimum information necessary to provide efficient multi-tenant commerce and POS operations:

2.1 User & Merchant Profile Data

Identity Information: Full name, mobile phone number, and avatar initials.
Business Details: Business name, trade slug, category, physical address (country, state, city, locality, pincode), and Google Maps location link.
Catalog & Inventory Records: Product names, descriptions, images, pricing, stock levels, batch codes, warranty, and expiry dates.

2.2 Customer & Storefront Order Data

Customer Contacts: Customer names, mobile numbers, delivery addresses, and order history.
Order & Booking Details: Items ordered, service schedule preferences, order status, pickup and delivery verification OTPs.
Ledger & Store Credit: Customer outstanding balances, credit limits, and offline/online transaction notes maintained by merchants.

2.3 Technical, Device & Push Notification Data

Push Subscription Data: Web push credentials (endpoint URLs, authentication keys) when you opt into push notifications for order alerts.
Audit & Security Logs: IP address, timestamp, browser type, and administrative actions performed within your workspace (`AuditLog`).
Authentication Sessions: Ephemeral One-Time Passwords (OTPs) and secure authentication session tokens stored via cookies (`js-cookie`).

3. How We Use Your Data

We process your data strictly for legitimate operational and business purposes:

Authentication & Security: To verify your identity via mobile OTP and protect against unauthorized workspace access.
Order Execution: To relay customer orders and booking requests to merchants and dispatch instructions to delivery drivers.
Notifications: To deliver real-time push alerts and SMS notifications regarding order confirmations, dispatch updates, and OTP handoffs.
Platform Analytics: To provide merchants with aggregated inventory movement, sales analytics, and POS reporting.
Regulatory Compliance: To maintain transaction records required under tax, commercial, and accounting statutes.

4. Data Sharing & Third-Party Processors

We share your data only with trusted infrastructure providers essential to delivering our services:

Cloud & Database Hosting: Secure PostgreSQL database infrastructure and encrypted storage providers (Supabase / AWS / Cloudflare).
Telecommunication & Messaging Gateways: SMS and messaging aggregators for delivering transactional verification OTPs.
Payment Processors: When digital payments are enabled, transaction details are communicated directly to authorized payment gateways. Bizilot does not collect or store full credit/debit card numbers or UPI PINs.
Law Enforcement: We may disclose data if required by an enforceable court order, law enforcement summons, or regulatory investigation.

5. Data Security & Storage

We employ robust industry-standard technical and organizational security measures to protect your data:

Encryption in Transit: All web traffic is encrypted using 256-bit Transport Layer Security (TLS/HTTPS).
Multi-Tenant Isolation: Our database architecture enforces strict tenant boundary isolation so no merchant can view another business's proprietary records or customer lists.
Ephemeral OTPs: Verification OTPs are time-limited (expiring within minutes) and invalidated immediately upon first use.

6. Data Retention & Right to be Forgotten

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory retention requirements (such as retaining sales tax and invoice records for up to 7 years under applicable commercial laws).

When an account is deleted or when retention periods expire, personal records are permanently erased or irreversibly anonymized in accordance with statutory guidelines.

7. Your Rights Under the DPDP Act & Privacy Regulations

As a data principal, you have the following recognized legal rights:

Right to Access: You may request a summary of the personal data we hold about you and the processing activities undertaken.
Right to Correction: You may update or correct inaccurate, outdated, or incomplete profile data directly from your account settings.
Right to Erasure: You may request the deletion of your account and personal data, subject to legal and tax record retention requirements.
Right to Grievance Redressal: You may lodge a complaint with our designated Grievance Officer regarding the handling of your data.

8. Cookies & Local Storage

Bizilot uses first-party cookies and browser local storage strictly for essential platform functionality:

Authentication Tokens: To keep you securely logged into your authorized workspace across browser tabs.
Preferences: To remember your selected UI theme and active space selection.

We do not use invasive third-party cross-site advertising cookies or sell user browsing history to ad networks.

9. Contact & Data Protection Officer

If you have questions regarding this Privacy Policy, wish to exercise your data rights, or want to report a security concern, please contact our Data Protection and Grievance desk:

Grievance & Privacy Desk — Bizilot Technologies
Email: privacy@bizilot.com or support@bizilot.com
Location: Hyderabad, Telangana, India
Direct Support Helpline: +91 93924 66772