Privacy Policy for BizNavigo

1. Introduction

Welcome to BizNavigo ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business automation and customer engagement platform.

BizNavigo is operated in India and complies with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian laws.

By using BizNavigo, you provide your consent to the collection and use of information in accordance with this policy.

2. About Us

• Company Name: BizNavigo TECHNOLOGIES PRIVATE LIMITED

• Registered Address: C/O ERAMU P V, PALLIKKAL, VALIYAPUTHOOR HOUSE, TIRURANGADI, PUTHUR-PALLIKKAL, MALAPPURAM - 673636, KERALA, INDIA

• Email: privacy@BizNavigo.in

• Support Email: support@BizNavigo.in

• Phone: +91-8075624909

• Website: www.BizNavigo.in

3. Information We Collect

3.1 Personal Data You Provide

• Account Information: Full name, email address, phone number (Indian mobile number), business name, and password

• Business Information: Business name, GSTIN (if applicable), business address, industry type, and operational data

• Payment Information: Billing address, GST details, and payment information (processed securely through Indian payment gateways like Razorpay, PayU, or similar)

• Communication Data: Messages, comments, inquiries, and interactions through our platform

• KYC Information: Business registration documents, if required for verification

3.2 Information Collected Automatically

• Usage Data: Features used, pages visited, time spent on platform, clicks, and user behavior

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information

• Location Data: Geographic location based on IP address

• Cookies and Tracking: We use cookies and similar technologies (see Section 9)

3.3 Information from Third-Party Services

When you connect third-party services to BizNavigo, we collect:

Instagram Business Account Data:

• Business profile information (username, profile picture, bio, website)

• Messages and comments on your posts

• Media content (posts, stories, reels, IGTV)

• Follower counts and engagement metrics

• Direct messages and inbox conversations

• Insights and analytics data

WhatsApp Business Data:

• Business phone number and profile information

• Message templates and broadcast campaigns

• Customer conversations and chat history

• Message delivery status and read receipts

• Customer contact information

• Analytics and engagement metrics

Facebook Page Data:

• Page information and access tokens

• Post engagement and analytics

• Comments, messages, and interactions

• Page insights and metrics

4. How We Use Your Information

We use your personal data for the following purposes:

4.1 Service Delivery (Performance of Contract)

• Providing and maintaining the BizNavigo platform

• Processing your account registration and managing your subscription

• Facilitating communication between you and your customers

• Managing Instagram, WhatsApp, and Facebook integrations

• Processing payments and generating invoices

• Providing customer support and responding to your queries

4.2 Automation and Analytics (Legitimate Interest)

• Automating responses to customer inquiries

• Analyzing customer engagement and behavior patterns

• Generating business reports and insights

• Managing marketing campaigns and notifications

4.3 Platform Improvement (Legitimate Interest)

• Improving our services and developing new features

• Personalizing your user experience

• Troubleshooting and fixing technical issues

4.4 Communication (Consent)

• Sending service updates, announcements, and feature releases

• Sending promotional offers and marketing communications (with your explicit consent)

• Conducting surveys and feedback requests

4.5 Legal Compliance and Security

• Complying with Indian laws and regulations

• Responding to legal processes and government requests

• Protecting against fraud, security threats, and unauthorized access

4.6 GST and Tax Compliance

• Processing GST invoices and tax documentation

• Maintaining financial records as required under Indian tax laws

• Reporting to tax authorities as mandated

5. Legal Basis for Processing (DPDPA Compliance)

Under the Digital Personal Data Protection Act, 2023, we process your data based on:

1. Your Consent: When you create an account and agree to this Privacy Policy

2. Performance of Contract: To provide services you have subscribed to

3. Legal Obligation: To comply with Indian laws, tax regulations, and court orders

4. Legitimate Interest: To improve our services, prevent fraud, and ensure security

You may withdraw your consent at any time by contacting us or deleting your account.

6. Data Sharing and Disclosure

We respect your privacy and do not sell, rent, or trade your personal information. We may share your data with:

6.1 Service Providers (Data Processors)

We share data with trusted service providers who assist in operating our platform:

• Cloud Hosting: Amazon Web Services (AWS) India, Google Cloud India

• Payment Processors: Razorpay, PayU, Cashfree (RBI-approved payment gateways)

• SMS Services: SMS gateway providers for OTP and notifications

• Analytics: Google Analytics, Mixpanel

• Communication Services: Twilio, Gupshup for WhatsApp Business API

6.2 Third-Party Platforms

• Meta Platforms: Instagram and Facebook for social media integration

• WhatsApp Business API: For WhatsApp messaging functionality

6.3 Legal and Regulatory Authorities

We may disclose your information when required by Indian law:

• Law enforcement agencies, courts, and government authorities

• Income Tax Department, GST authorities

• Reserve Bank of India (RBI) or other regulatory bodies

7. Data Storage and Security

7.1 Data Storage Location

Your data is primarily stored on servers located in India to comply with data localization requirements. Some data may be stored on servers outside India with adequate security measures and compliance with Indian laws.

7.2 Security Measures

• Encryption: All data is encrypted in transit using SSL/TLS (256-bit) and at rest using AES-256 encryption

• Access Controls: Role-based access control (RBAC) with multi-factor authentication (MFA)

• Network Security: Firewall protection, intrusion detection, and DDoS protection

• Monitoring: 24/7 security monitoring and logging of all access

• Regular Audits: Periodic security assessments, vulnerability scanning, and penetration testing

7.3 Data Retention

When you delete your account:

• Personal data is deleted or anonymized within 30 days

• Financial records are retained for 7 years as required by Indian law

• Backup copies are permanently deleted within 90 days

• You can request data deletion by emailing privacy@BizNavigo.in

8. Your Rights Under DPDPA 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

9. Cookies and Tracking Technologies

9.1 Types of Cookies

9.2 Managing Cookies

You can control cookies through:

• Browser settings (Chrome, Firefox, Safari, Edge)

• Disabling cookies in your account preferences

• Using browser extensions like Privacy Badger

Note: Disabling essential cookies may affect platform functionality.

10. Third-Party Services and Links

10.1 Meta Platforms (Instagram & Facebook)

Our integration with Meta platforms is governed by:

• Meta's Privacy Policy

• Instagram's Terms of Service

• Facebook Platform Terms

10.2 WhatsApp Business API

Our WhatsApp integration complies with:

• WhatsApp Business API Terms

• WhatsApp Privacy Policy

We do not have access to personal WhatsApp messages that are end-to-end encrypted.

10.3 Payment Gateways

We use RBI-approved payment processors:

• Razorpay: Privacy Policy

• PayU: Privacy Policy

• Cashfree: Privacy Policy

We do not store your complete credit/debit card details or CVV numbers.

11. Children's Privacy

BizNavigo is a business platform not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a child, we will delete it immediately.

Parents/guardians can contact us at privacy@BizNavigo.in if they believe their child's data has been collected.

12. Compliance with Indian Laws

We comply with the following Indian regulations:

• Digital Personal Data Protection Act, 2023 (DPDPA)

• Information Technology Act, 2000

• Information Technology Rules, 2011

• Goods and Services Tax (GST) Act

• Income Tax Act

• Consumer Protection Act, 2019

• TRAI DND Regulations

13. Grievance Redressal Mechanism

As mandated by DPDPA 2023 and IT Act 2000, we have appointed a Grievance Officer:

Response Timeline:

• Acknowledgment: Within 24 hours of receiving complaint

• Resolution: Within 15 days of acknowledgment

How to File a Complaint:

1. Email grievance@BizNavigo.in with details

2. Include your account email and description of issue

3. Provide relevant screenshots or documentation

14. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy: