Privacy Policy

This Privacy Policy describes how MyBizC Private Limited ("MyBizC," "we," "us," or "our") collects, uses, stores, and discloses personal information when you use our SaaS-based platform and related services (collectively, the "Service") available at mybizc.com.

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. If you do not agree with this Policy, please do not use our Service.

This Policy applies to all users of MyBizC — including visitors, registered merchants, and customers of merchant stores hosted on our platform.

We collect information in several ways — information you give us directly, information generated by your use of our service, and in some cases, information from third-party sources.

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Register for an account — name, mobile number, email address, and password.
• Set up your business store — business name, category, address, description, logo, and product information.
• Purchase a subscription — billing name, billing address, and payment method details (processed securely via Razorpay; we do not store card numbers).
• Contact us or submit a support request — name, email, and the content of your message.
• Subscribe to our newsletter — email address.
• Fill in any form on the platform — any information you choose to enter.

1.2 Usage Data (Automatically Collected)

When you access and use our Service, we automatically collect certain technical and usage information:

• Device & Browser Information: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Information: Pages visited, features used, time spent on the platform, clicks, and navigation paths.
• Log Data: Server logs including timestamps, error reports, and access records.
• Location Data: Approximate geographic location derived from your IP address (city/region level — not precise GPS location).

1.3 Store Visitor Data (Merchant Stores)

If you visit a merchant's store hosted on MyBizC (e.g., mybizc.com/storename), we may collect:

• Visitor analytics such as page views, clicks, and device type — aggregated and anonymised for merchant dashboards.
• Contact information voluntarily submitted via the store's enquiry form (name, phone number) — this data is passed to the merchant.

We use the information we collect for specific, legitimate business purposes. We never use your data in ways you wouldn't reasonably expect.

Purpose	Data Used	Legal Basis
Providing the Service — running your store, dashboard, AI tools	Account info, business details, usage data	Contract
Processing Payments — billing, invoicing, order management	Billing info, transaction data	Contract
Account Communication — confirmations, updates, policy changes	Email, phone number	Contract
Customer Support — responding to queries and issues	Contact info, account data, message content	Contract
Marketing & Promotions — newsletters, new features, offers	Email, phone number	Consent
Analytics & Improvement — improving platform features	Anonymised usage data	Legitimate Interest
Security & Fraud Prevention — detecting abuse, protecting users	IP address, usage patterns, log data	Legitimate Interest
Legal Compliance — meeting regulatory obligations	Relevant personal and transaction data	Legal Obligation

2.1 Marketing Communications

By providing your phone number or email address, you consent to receive promotional and personalised marketing communications from MyBizC via SMS, RCS, WhatsApp, email, or other communication channels.

You may opt out at any time by:

• Clicking the "Unsubscribe" link in any marketing email.
• Replying STOP to any SMS or WhatsApp message to unsubscribe.
• Adjusting your notification preferences in your dashboard settings.
• Contacting us at [email protected].

Note: Even if you opt out of marketing communications, we may still send you transactional messages (e.g., payment confirmations, security alerts, policy updates) that are necessary to provide our Service.

2.2 Aggregated & Anonymised Data

We may aggregate and anonymise collected data to generate statistical insights, improve our Service, develop new features, and for other legitimate business purposes. Aggregated data cannot be used to identify any individual user.

We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We may share your data only in the following limited circumstances:

3.1 Trusted Service Providers

We engage trusted third-party service providers to help operate our platform. These providers may access your personal information only to the extent necessary to perform their functions and are bound by strict data protection obligations.

Provider Category	Purpose	Examples
Payment Processing	Secure payment transactions	Razorpay
Logistics & Delivery	Order shipping for merchants	Shiprocket
Cloud Infrastructure	Hosting and data storage	AWS, Google Cloud
Analytics	Platform usage analytics	Google Analytics
Email & Communication	Sending transactional emails and SMS	SendGrid, Twilio
Customer Support	Support ticket management	Freshdesk, Intercom

3.2 Legal Requirements

We may disclose your personal information if required to do so by law, regulation, court order, or governmental authority — including to meet national security or law enforcement requirements.

3.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of MyBizC, your personal data may be transferred as part of that transaction. We will provide you with at least 30 days' notice via email or a prominent notice on our website before any such transfer, giving you the opportunity to object or delete your account.

3.4 With Your Consent

We may share your information with third parties in other circumstances with your explicit consent.

We take the security of your personal data seriously. We implement reasonable and industry-standard technical, administrative, and physical safeguards to protect your information from unauthorised access, disclosure, alteration, or destruction.

Our Security Measures Include

• Encryption in Transit: All data transmitted between your browser and our servers is protected using TLS (Transport Layer Security) encryption.
• Encryption at Rest: Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure only authorised personnel can access personal data, on a need-to-know basis.
• Regular Security Audits: We conduct regular security assessments and vulnerability testing of our systems.
• Payment Security: All payment processing is handled by Razorpay, which is PCI-DSS Level 1 compliant — the highest level of payment security certification.
• Two-Factor Authentication: Available for all MyBizC accounts to add an extra layer of login security.

Data Breach Response

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours of becoming aware of the breach, as required by applicable law. The notification will include details of what happened, what data was affected, and what steps we are taking.

We use cookies and similar tracking technologies to enhance your experience on our platform, understand how you use our Service, and deliver relevant content. You can control cookie settings through your browser preferences.

Types of Cookies We Use

Third-Party Tracking

We use Google Analytics to analyse platform usage. Google Analytics may set cookies and collect data about your visit. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.

Merchant stores on Enterprise plans may use Facebook Pixel and Google Tag Manager. These are set up by individual merchants and governed by their own privacy practices.

You have significant rights regarding your personal data. We are committed to honouring these rights promptly and transparently. Under applicable Indian privacy laws and international standards, you have the following rights:

How to Exercise Your Rights

To exercise any of the above rights, please submit a Data Subject Access Request (DSAR) through one of the following channels:

• DSAR Form: mybizc.com/dsar-form (preferred method — fastest processing)
• Email: [email protected] with subject "Data Rights Request"
• Post: 612A, Lodha Supremus, NCP, Near Wadala Truck Terminal, Mumbai 400 037, Maharashtra

We will acknowledge your request within 3 business days and respond fully within 30 days. We may ask you to verify your identity before processing sensitive requests.

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable law and regulation.

Data Type	Retention Period	Reason
Account & Profile Data	Duration of account + 30 days after deletion	Service provision; grace period for reactivation
Transaction & Billing Records	7 years after transaction	Legal/tax compliance requirements (GST Act)
Support Communications	3 years	Dispute resolution and quality assurance
Usage & Analytics Data	26 months (anonymised)	Platform analytics and improvement
Marketing Consent Records	Until withdrawal + 3 years	Legal proof of consent compliance
Security Logs	12 months	Security incident investigation
Store Visitor Lead Data	As specified by merchant, max 3 years	Merchant's customer relationship management

After the applicable retention period, personal data is securely deleted or anonymised. We conduct regular audits to ensure compliance with our retention schedules.

Our Service is not intended for use by individuals under the age of 18. MyBizC is a business platform designed for adult merchants and business owners.

We do not knowingly collect, use, or disclose personal information from anyone under 18 years of age. By using our Service, you represent and warrant that you are at least 18 years old.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take immediate steps to:

• Delete the information from our systems as quickly as possible.
• Terminate the associated account if applicable.
• Notify the relevant parent or guardian if contact information is available.

If you believe we may have collected personal information from a child, please contact us immediately at [email protected] and we will investigate promptly.

MyBizC is based in India and primarily stores and processes data within India. However, some of our trusted third-party service providers may operate internationally and may process your data outside of India.

In such cases, we ensure that appropriate safeguards are in place to protect your data, including:

• Requiring third-party providers to maintain at least the same level of data protection as is provided in this Policy.
• Using standard contractual clauses and data processing agreements where applicable.
• Only transferring data to countries that have adequate data protection laws or to organisations that comply with international standards.

If you have questions about international data transfers involving your information, please contact our Privacy Officer at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The latest version will always be available at mybizc.com/privacy-policy.

• The "Last Updated" date at the top of this Policy will reflect when changes were most recently made.
• For material changes that significantly affect how we collect or use your data, we will notify you via email at least 14 days before the changes take effect.
• Your continued use of the Service after the updated Policy takes effect constitutes your acceptance of the revised terms.
• If you do not agree with any changes to this Policy, you may delete your account and request erasure of your data.

We encourage you to review this Policy periodically. For historical versions or questions about a specific change, please contact us at [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us through any of the following channels:

Purpose	Contact
General Privacy Queries	[email protected]
Data Subject Access Requests (DSAR)	mybizc.com/dsar-form or [email protected]
Grievance & Escalations	[email protected] — Mr. Rahul Sharma, Grievance Officer
Phone	support@mybizc.com (Mon–Sat, 9am–6pm IST)
Registered Office	612A, Lodha Supremus, NCP, Near Wadala Truck Terminal, Mumbai 400 037, Maharashtra, India

We will acknowledge all privacy-related queries within 3 business days and fully respond within 30 days. We are committed to resolving all data-related concerns fairly and transparently.