Legal & Compliance

Privacy Policy

Last Updated: [Insert Date]

Effective Date: [Insert Date]

This Privacy Policy ("Policy") describes how [Insert Legal Entity Name], operating the platform "Bizrelievo" (website, web application, and mobile application, collectively the "Platform"), ("Bizrelievo", "we", "us", "our") collects, uses, discloses, stores, and protects the personal and business information of users of the Platform ("you", "your", "User").

This Policy is published in accordance with, and is intended to comply with, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act"), to the extent applicable.

By accessing or using the Platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use the Platform.

1. Definitions

  • "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
  • "Sensitive Personal Data or Information" / "Sensitive Personal Data" includes, without limitation, financial information (bank account, payment instrument details), PAN, Aadhaar (to the extent collected and as permitted by law), passwords, and any other information classified as sensitive under applicable law.
  • "Data Principal" means the individual to whom the Personal Data relates (as defined under the DPDP Act).
  • "Data Fiduciary" means Bizrelievo, as the entity that determines the purpose and means of processing Personal Data.
  • "Processing" means any operation performed on Personal Data, including collection, storage, use, sharing, and erasure.

2. Information We Collect

2.1 Information You Provide Directly

  • Identity Information: Full name, date of birth, photograph, signature, PAN, Aadhaar number (where legally required for a specific registration or filing service), passport or other government ID, address proof.
  • Business Information: Business/company name, nature of business, proposed business activities, CIN, GSTIN, business address, incorporation documents, Memorandum and Articles of Association, partnership deeds, trust deeds.
  • Financial Information: Bank account details, cancelled cheque images, income details, turnover figures, GST returns, ITR filings, ledgers, invoices, financial statements, and other accounting records you upload for bookkeeping or compliance services.
  • Contact Information: Email address, mobile number, residential or office address.
  • Payment Information: Billing details processed through our third-party payment gateway partners (Bizrelievo does not store complete card numbers or CVV).
  • Account Credentials: Username, password (stored in encrypted/hashed form), and security question responses.
  • Communications: Any information you provide when you contact our support team, respond to surveys, or communicate with our AI assistant ("BizAI").

2.2 Information Collected Automatically

  • Device & Usage Data: IP address, browser type, device identifiers, operating system, pages visited, time spent, referring URLs, and other diagnostic data.
  • Cookies and Similar Technologies: As described in Section 8 below.
  • Location Data: Approximate location derived from IP address, where relevant to service delivery (e.g., state-specific compliance requirements).

2.3 Information From Third Parties

Where you authorise us (separately and explicitly), we may receive information from:

  • Government portals (e.g., Income Tax e-filing portal, GST Network, MCA21) that you have authorised us to access as your representative for the limited purpose of fetching notices, filings, or compliance status.
  • Payment gateway providers, confirming successful or failed transactions.
  • Authentication and verification service providers (e.g., for PAN/GST/Aadhaar verification, where permitted under law).

3. Purpose of Collection and Use of Information

We collect and process your information for the following purposes:

To register, verify, and provide the business registration services you request.
To prepare, file, and track ongoing regulatory compliances on your behalf.
To provide bookkeeping, financial reporting, and business management tools.
To verify your identity and the authenticity of documents submitted.
To communicate with you regarding your account, service status, deadlines, and support queries.
To process payments and issue invoices/receipts.
To improve, personalise, and develop the Platform, including AI systems.
To detect, prevent, and investigate fraud, security incidents, or policy violations.
To comply with applicable legal, regulatory, and statutory obligations.
To send you service updates, deadline reminders, and marketing communications.

4. Legal Basis for Processing

We process your Personal Data on the basis of:

  • Your consent, obtained at the time of registration, document upload, or specific authorisation.
  • Performance of a contract with you, to deliver the services you have requested.
  • Compliance with a legal obligation, including statutory recordkeeping and reporting requirements.
  • Legitimate business interests, such as fraud prevention and Platform security, balanced against your rights.

You may withdraw consent at any time as described in Section 9, subject to the legal and contractual consequences of withdrawal.

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Government Authorities and PortalsWhere required to deliver registration or compliance services, strictly limited to what is necessary and only upon your explicit authorisation.
  • Professional PartnersChartered Accountants, Company Secretaries, and Advocates empanelled with or engaged by Bizrelievo, for the purpose of reviewing, certifying, or signing filings.
  • Service ProvidersCloud hosting providers, payment gateways, OCR/document-processing providers, communication providers, and AI infrastructure providers.
  • Legal and Regulatory DisclosuresWhere required by law, court order, or governmental request, or to protect the rights, property, or safety of Bizrelievo, our users, or the public.

6. Artificial Intelligence Processing

Bizrelievo uses artificial intelligence/large language model technology (including third-party AI providers) to read, classify, draft, and analyse documents, notices, and financial data as part of our services (e.g., "BizAI" assistant).

Data shared with AI processing systems is used solely for the purpose of delivering the requested service to you. We do not permit our third-party AI providers to use your data to train models for the benefit of other customers, except where you have separately and explicitly opted in. AI-generated outputs are clearly marked as AI-assisted and, where legally required, are reviewed and approved by a qualified professional before being relied upon.

7. Data Storage, Retention, and Localisation

Personal Data is stored on secure servers, with a preference for data centres located within India, in line with data localisation expectations under Indian law.

We retain your information for as long as your account is active, and thereafter for the period necessary to comply with statutory recordkeeping requirements under the Companies Act 2013, Income Tax Act 1961, CGST Act 2017, and other applicable laws (which may range from 6 to 8 years or longer), or as otherwise required to resolve disputes and enforce our agreements.

8. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to:

  • Keep you logged in and maintain session security;
  • Remember your preferences;
  • Analyse Platform usage and improve performance;
  • Where you consent, deliver relevant communications.

9. Your Rights

Subject to applicable law (including the DPDP Act, 2023), you have the right to:

Right to AccessRequest a summary of the Personal Data we hold about you.
Right to CorrectionRequest correction of inaccurate or incomplete Personal Data.
Right to ErasureRequest deletion of Personal Data that is no longer necessary.
Right to Withdraw ConsentWithdraw previously given consent at any time.
Right to Grievance RedressalRaise a grievance regarding processing with our Grievance Officer.
Right to NominateNominate another individual to exercise your rights.

10. Data Security

We implement industry-standard administrative, technical, and physical safeguards including:

  • Encryption of data in transit (TLS/SSL) and at rest (AES-256 or equivalent);
  • Role-based access controls and the principle of least privilege;
  • Secure document storage ("Document Vault") with audit logging;
  • Periodic security assessments and vulnerability testing;
  • Multi-factor authentication options for account access.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Children's Privacy

The Platform is intended for use by individuals who are at least 18 years of age and legally competent to enter into a contract under the Indian Contract Act, 1872. We do not knowingly collect Personal Data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email or a prominent notice on the Platform, and will update the "Last Updated" date above.

13. Grievance Officer

Officer Details[Insert Name][Insert Designation]
Address[Insert Registered Address]
General Privacy Queries[Insert Privacy/Support Email]

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising in connection with this Policy shall be subject to the jurisdiction of the courts at [Insert City, e.g., New Delhi], India, subject to the dispute resolution mechanism set out in our Terms and Conditions.