Privacy Policy

This Privacy Policy describes how Bizeneed India Private Limited, a company incorporated under the Companies Act, 2013, with its registered office in New Delhi, Delhi, India, collects, uses, stores, discloses, and protects your personal data when you use our website, mobile applications, API services, and all related professional services. This policy is framed in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and all other applicable Indian data protection and privacy laws. By using our Platform or services, you expressly consent to the data practices described herein.

• This Privacy Policy applies to all personal data collected through our Platform and services
• We are committed to protecting your privacy and handling your personal data responsibly
• The policy is framed in compliance with the DPDP Act, 2023, IT Act, 2000, and SPDI Rules, 2011
• By using our Platform, you consent to the collection, use, and processing of your data as described
• If you do not agree with this policy, you must discontinue use of our services immediately
• This policy was last updated on September 3, 2026, and may be revised periodically

We collect personal information that you provide directly to us, including your name, email address, phone number, business name, PAN, Aadhaar, incorporation certificates, and other compliance documents. We also automatically collect technical data such as IP address, browser type, device information, and usage patterns when you interact with our Platform. This includes data collected through cookies, web beacons, and similar tracking technologies in accordance with applicable law. We may also collect information from third-party sources such as government databases, business registries, and professional networks where permitted by law.

• Identity and contact information: name, email address, phone number, postal address, and PAN
• Business details: company name, registration number, business type, and operational address
• KYC and identification documents: Aadhaar, PAN, incorporation certificates, MOA/AOA, and other statutory documents
• Financial information: bank account details, transaction history, invoice details, and payment records
• Technical data: IP address, browser type, operating system, device identifiers, and network information
• Usage data: pages visited, features used, session duration, search queries, and interaction patterns
• Location data: derived from IP address or device settings for regional compliance and service delivery
• Communication records: support tickets, chat transcripts, email correspondence, and call logs

Your data is used to deliver our services, process transactions, communicate service updates and compliance reminders, improve our Platform features, personalise your experience, and fulfill our legal obligations under applicable Indian laws. We process your data on the basis of contractual necessity, legal obligation, legitimate interests, and your explicit consent where required. Data processing is conducted in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and applicable data protection regulations.

• Processing registrations, filings, accounting, tax, and compliance services as per applicable statutes
• Sending service updates, compliance reminders, statutory due-date alerts, invoices, and responses to queries
• Creating and managing user accounts, processing authentication, and managing subscription plans
• Processing payments and maintaining transaction records for accounting and compliance purposes
• Analyzing usage patterns to enhance features, usability, security, and overall service offerings
• Fulfilling statutory obligations under the Companies Act, 2013, GST Act, 2017, Income-tax Act, 2025 (and the Income-tax Act, 1961 for earlier periods)
• Detecting, preventing, and addressing fraud, unauthorised access, and security incidents
• Conducting internal audits, quality assurance reviews, and service delivery evaluations
• Personalising Platform experience based on your business profile, service history, and preferences
• Sending promotional communications, newsletters, and service offers (with opt-out available)

We do not sell your personal data to third parties. We may share data with chartered accountants, company secretaries, legal advisors, government authorities (GSTN, Income Tax Department, MCA), payment processors, and technology partners only as necessary for service delivery and legal compliance, or when you have explicitly authorised disclosure. All third-party processors are bound by strict data protection obligations through data processing agreements. We may also disclose data when required by law, regulation, or legal process, or to protect the rights, property, or safety of Bizeneed, our users, or the public.

• Service partners including chartered accountants, CS, and legal advisors for statutory compliance work
• Government authorities and regulatory bodies (GSTN, Income Tax Department, MCA, ROC) for mandatory filings
• Payment gateway providers and banking partners for transaction processing under applicable payment laws
• Technology partners for cloud hosting (AWS/GCP), analytics platforms, and customer support systems
• Professional indemnity insurers in connection with professional liability claims or audits
• Business parties in connection with mergers, acquisitions, asset sales, subject to confidentiality obligations
• Law enforcement agencies or statutory authorities upon receipt of valid legal processes
• Professional service providers such as courier services for dispatch of physical documents

We implement industry-standard security measures to protect your personal data. This includes 256-bit SSL/TLS encryption for data in transit, AES-256 encryption for data at rest, role-based access controls with multi-factor authentication, regular security audits and vulnerability assessments, and secure data backup and disaster recovery procedures. We comply with the Information Technology Act, 2000 and the SPDI Rules, 2011 for reasonable security practices. Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security of your data.

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• AES-256 encryption for all data stored at rest in our databases and cloud infrastructure
• Role-based access controls (RBAC) ensuring minimum necessary access to personal data
• Multi-factor authentication (MFA) as an optional security layer for enhanced account protection
• Regular security audits, penetration testing, and vulnerability assessments by certified third-party firms
• Secure data backup with encrypted off-site storage and tested disaster recovery procedures
• Incident response protocols aligned with applicable CERT-In directions and the breach-intimation requirements of the DPDP Act, 2023
• Employee training on data protection, confidentiality, and secure handling of personal information
• Periodic access log reviews and anomaly detection to identify unauthorised access attempts

Under the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000, you have the right to access, correct, and request erasure of your personal data. You may file grievances with our Grievance Officer, nominate another individual to exercise your rights, and withdraw previously given consent at any time. You also have the right to data portability and the right to be informed about data breaches affecting your personal information. We will respond to your requests within the timelines prescribed by applicable law.

• Right to Access: Request access to your personal data and information about its processing, including categories of data, purposes of processing, and recipients
• Right to Correction: Request correction of inaccurate or incomplete personal data free of charge within a reasonable timeframe
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements and ongoing statutory obligations
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format
• Right to Grievance Redressal: File a complaint with our designated Grievance Officer at grievance@bizeneed.com
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity, under Section 14 of the DPDP Act, 2023 once that section comes into force (eighteen months after 13 November 2025, under MeitY notification G.S.R. 843(E) dated 13 November 2025)
• Right to Withdraw Consent: Withdraw previously given consent at any time through your account settings or by contacting us
• Right to be Informed: Receive notification of any data breach that may impact your personal data within legally mandated timelines
• Right to Object: Object to the processing of your personal data for direct marketing or legitimate interest purposes
• Right to approach the Data Protection Board of India: Once Sections 13 and 27 of the DPDP Act, 2023 come into force (eighteen months after 13 November 2025, under MeitY notification G.S.R. 843(E) dated 13 November 2025), you may approach the Data Protection Board of India if your grievance is not resolved through our Grievance Officer; Section 13(3) requires you to use our grievance redressal mechanism first

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, personalise content, and remember your preferences. You can manage your cookie preferences through your browser settings. Essential cookies required for platform functionality cannot be disabled. We use both session cookies (deleted when you close your browser) and persistent cookies (stored until expiry or manual deletion). Our use of cookies is in compliance with applicable privacy regulations and we provide you with meaningful choices about cookie usage.

• Essential cookies: Required for authentication, session management, and platform security - cannot be disabled
• Functional cookies: Remember your preferences, language settings, and dashboard configurations
• Analytics cookies: Help us understand how visitors interact with our Platform for improvement purposes
• Performance cookies: Monitor and improve the speed, responsiveness, and reliability of our services
• Third-party cookies: From trusted partners for payment processing, embedded content, and analytics
• You can configure your browser to reject or delete cookies, though some features may not function optimally
• Cookie preferences can be updated at any time through the Cookie Settings button in the bottom-left corner of every page
• We do not use cookies for behavioural advertising or to track you across unrelated third-party websites

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Retention periods are determined based on the nature of the data and applicable statutory obligations under the Companies Act, 2013, the Income-tax Act, 2025 (and the Income-tax Act, 1961 for earlier periods), and GST Act, 2017. After the applicable retention period, data is securely deleted or anonymised. We review our data retention schedules periodically to ensure compliance with evolving legal requirements.

• Customer account data retained for the duration of the business relationship plus 7 years for statutory compliance
• Financial and transaction records retained for 8 years, or longer where the Companies Act, 2013, section 36 of the Central Goods and Services Tax Act, 2017 or income-tax law requires
• Corporate records including incorporation documents and MCA filings retained as required by the Companies Act, 2013
• KYC and identification documents retained for 5 years after account closure per KYC/AML guidelines
• Technical logs and analytics data retained for a maximum of 26 months unless required for ongoing investigations
• Deleted account data is removed from production systems within 30 days and from backups within 90 days
• Data subject to ongoing legal proceedings is retained until the conclusion of such proceedings

Our Platform and services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at privacy@bizeneed.com. Upon verification, we will take immediate steps to delete such information from our servers. If we become aware that we have collected personal data from a child under 18 without parental consent, we will take prompt steps to remove that data from our systems.

• Our Platform is not intended for use by individuals under the age of 18
• We do not knowingly collect personal information from children under 18
• Parents or guardians who believe their child has provided data should contact us immediately
• Verified requests for deletion of a minor's data will be actioned promptly
• We do not use age gating as a substitute for parental consent where required by law
• If we discover inadvertent collection of a minor's data, we will delete it immediately upon discovery

Your personal data is primarily stored and processed in India. In certain circumstances, data may be transferred to, stored in, or processed in jurisdictions outside India where our service providers or technology partners operate. Any such transfers are conducted in compliance with applicable data protection laws including the Digital Personal Data Protection (DPDP) Act, 2023. We ensure that any international transfer of personal data is subject to appropriate safeguards, including standard contractual clauses, data processing agreements, and adequacy measures as required by applicable law. You will be informed of any material changes to our data storage locations.

• Personal data is primarily stored and processed in India on secure cloud infrastructure
• Data may be transferred to international cloud service providers (AWS, GCP) for infrastructure purposes
• All international transfers comply with the Digital Personal Data Protection (DPDP) Act, 2023
• Third-party processors in other jurisdictions are bound by data processing agreements with appropriate safeguards
• We implement appropriate technical and organisational measures to protect data during cross-border transfers
• Material changes to data storage locations will be communicated to affected users in advance
• You have the right to request information about the countries where your data is processed

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us. Our privacy team is available to address your inquiries about data collection, use, storage, and protection practices. For formal data access, correction, or deletion requests, please submit a written request through the contact details below. We will respond to your inquiry within the timelines prescribed by applicable law, typically within 30 days of receipt.

• Email: privacy@bizeneed.com - for general privacy policy inquiries and data-related questions
• Email: grievance@bizeneed.com - for formal complaints and data access/correction/deletion requests
• Email: privacy@bizeneed.com - for legal and compliance-related matters
• Registered Office: Bizeneed India Private Limited, New Delhi, Delhi, India
• Response time: We aim to respond to all privacy inquiries within 30 days of receipt
• Data requests may require identity verification before processing

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. We will notify you of material changes by posting the updated policy on our Platform with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. The 'Last updated' date at the top of this page indicates when this policy was last revised. Your continued use of our Platform following any changes indicates your acceptance of the updated Privacy Policy.

• This Privacy Policy may be updated periodically to reflect changes in practices or legal requirements
• Material changes will be communicated via email or in-platform notification at least 7 days in advance
• The Last updated date indicates when this policy was last revised
• Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy
• Previous versions of this policy are available upon written request
• Users who do not agree with updated terms should discontinue use of our services