Privacy Policy

1.Who we are

Digital Nexus Media Pvt. Ltd. operates Bizobell and is the data fiduciary for the personal data described here, under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000.

2.Data we collect

You give us:

• Account details — name, email address, mobile number, password (stored only as a secure hash), profile photo.
• Profile details you choose to add — gender, date of birth, city, locality and interests.
• Business details — business name, category, address, phone / WhatsApp number, opening hours, website, logo, cover photo and map location.
• Content — posts, reels, statuses, offers, catalogue items, reviews, comments and the photos and videos you upload.
• Enquiries and messages — your name, phone, email and message when you contact a business, and the conversation that follows.
• Business verification details (business owners who apply for the Bizobell Verified badge) — the WhatsApp number you verify, details of the Google Business Profile you connect (see Google user data), and any documents you upload for manual review, such as a GST certificate, shop or company registration, utility bill or address proof.

Created when you use Bizobell:

• Follows, likes, coupons you grab and redeem, reel views, and notifications.
• Your chosen browsing city and recent locations.
• Basic technical data our servers log to keep the service secure — such as IP address, browser type and time of request.

Device location is read only if you allow it in your browser (for example when you tap “Use my current location”). We use it to work out your city; we don't track your location in the background.

3.How we use it

• To create and secure your account, including sending one-time login and verification codes.
• To show businesses, offers and content relevant to your city, and to run features like following, coupons, enquiries and notifications.
• To let businesses receive and reply to your enquiries and redeem your coupons.
• To verify that a business is genuine before showing the Bizobell Verified badge, and to check from time to time that the verification still holds.
• To prevent fraud, spam and abuse, and to enforce our Terms & Conditions.
• To fix problems and improve Bizobell.
• To comply with law and respond to lawful requests from authorities.

We process your data on the basis of your consent when you sign up and use features, and for legitimate uses permitted by the DPDP Act. We don't sell your personal data, and we don't show third-party advertising or use advertising trackers.

4.What other people can see

Business pages and everything published on them — posts, reels, statuses, offers, catalogue items and reviews — are public on Bizobell and can be shared by link; link previews may show their image, title and description outside Bizobell. Your name and photo appear with reviews and comments you post. Your phone number and email are not shown publicly, but they are shared with a business when you send it an enquiry.

5.Who we share data with

• Businesses you interact with — your enquiry details and messages, and your coupon when you redeem it.
• WhatsApp (Meta Platforms) — your mobile number and the one-time code, sent through our WhatsApp Business messaging provider, to deliver login and verification codes.
• Google — if you choose “Continue with Google” or connect a Google Business Profile, Google shares the data described in Google user data with us. We don't send your Bizobell data to Google.
• Location services — when you search for or detect a location, the search text or coordinates are sent to OpenStreetMap-based services (Photon / Nominatim), BigDataCloud and, for PIN codes, India Post's PIN code service, to turn them into a city name.
• Hosting and infrastructure providers that store and run Bizobell for us, under confidentiality obligations.
• Authorities, when required by law or to protect the rights, property or safety of our users or others.

Some of these providers may process data outside India, as permitted under the DPDP Act.

6.Google user data

Bizobell uses Google APIs in two optional places. This section explains exactly what we receive from Google, how we use it, how we store it and how you can remove it.

1. Sign in with Google. When you choose “Continue with Google”, we receive your name, email address, profile photo and Google account ID (scopes openid, email, profile). We use them only to create and log in to your Bizobell account; your photo is copied to become your profile picture, which you can change.

2. Connect your Google Business Profile (business owners applying for the Bizobell Verified badge). When you click “Connect Google Business” and allow access (scope business.manage), we read:

• the Google account ID and email address that connected;
• the Business Profile accounts and locations that Google account can manage, and your role on each (for example Owner or Manager);
• for each location: business name, address, phone number, website, map coordinates, Google Place ID, Google Maps link, and whether Google has verified the listing.

How we use it. Only to verify your business: we show you the listings you manage so you can pick yours, compare its name and location with your Bizobell business profile, confirm you are an owner or manager of a Google-verified listing, and re-check about once a day that this is still true. The result decides whether the Bizobell Verified badge appears on your business. Although Google names this permission “manage”, Bizobell only reads your Business Profile — we never create, edit, post to or delete anything on your Google Business Profile.

How we store it. We keep the details of the listing you select, the connected Google account's ID and email, and an access token that lets us re-check the listing. The token is encrypted (AES-256) on our servers and used for nothing else. The details of listings you don't select are deleted as soon as you make your choice, or within a day if you don't pick one.

Who can see it. The verification details are visible to you and to Bizobell's verification team. Other users only see whether your business carries the Bizobell Verified badge. We don't sell Google user data, share it with third parties, use it for advertising, or use it to train artificial-intelligence or machine-learning models.

Removing access. Click “Disconnect” on your Business verification page: we delete the token and the stored Google details, ask Google to revoke our access, and the badge is removed if it depended on Google. You can also revoke access any time at myaccount.google.com/permissions; our next daily check then deletes the stored Google details and removes the badge if it depended on Google. When your account is deleted, all of this data is deleted too.

Limited Use. Bizobell's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7.Cookies and local storage

We use one essential cookie to keep you logged in. Your browser's local storage remembers preferences on your device — light / dark theme, your selected city and recent locations. We don't use analytics, advertising or cross-site tracking cookies.

8.How long we keep data

• Account and business data — for as long as your account is active.
• Statuses — removed automatically after 24 hours.
• One-time codes — expire after 10 minutes and are deleted once used.
• Google Business Profile details and the Google access token — until you disconnect, the access is revoked, or your account is deleted.
• Verification documents — while your verification record is active; deleted when you ask us to, or when your account is deleted.
• After you ask us to delete your account, we delete or anonymise your personal data within 30 days, except where we must keep some records longer by law or to resolve disputes. Backups are overwritten on their normal cycle.

9.How we protect it

We use HTTPS encryption, hashed passwords and one-time codes, encrypted Google access tokens, rate limits on login attempts, and access controls on our servers. Verification documents are kept in private storage that is never publicly reachable and can be opened only by Bizobell's verification team. No system is perfectly secure; if a data breach affects you, we will notify you and the Data Protection Board as the law requires.

10.Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• correct or update it — most details can be edited directly in your profile or business settings;
• ask us to erase it, or withdraw your consent (which may mean we can no longer provide the service);
• nominate another person to exercise your rights if you die or become incapable;
• raise a grievance with us, and if unresolved, with the Data Protection Board of India.

To use any of these rights, email support@bizobell.com from your account's email or mention its registered phone number. We may verify your identity first, and we respond within 30 days.

11.Children

Bizobell is meant for people aged 18 and over. We don't knowingly collect data from children without verifiable consent from a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

12.Grievance Officer

For privacy questions or complaints, contact our Grievance Officer at support@bizobell.com (Digital Nexus Media Pvt. Ltd., Bareilly, Uttar Pradesh, India). We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

13.Changes to this policy

We may update this policy as Bizobell changes. We'll update the date at the top and tell you in the app about significant changes before they apply.