Privacy & security
Powerful visibility.
Responsible access.
Bizora handles business records and, where a subscriber enables it, employee location. This page says plainly what we collect, why, who can see it, and what you can ask us to do.
This is a working draft. It is structured to what India’s Digital Personal Data Protection Act expects, but every highlighted item below still needs your real details before this page should be treated as a published policy.
1. Who we are
OmniBizora Technologies Private Limited operates the Bizora platform. When you deal with us directly — visiting this site, requesting a demo, contacting support — we are the Data Fiduciary for that information.
Where a business subscribes to Bizora and its people use the platform, that business is the Data Fiduciary for its own records, and we act as its Data Processor. If you are an employee, dealer or customer of a business that uses Bizora and you want your data changed or removed, the fastest route is that business.
2. What we collect
Business records
Through the Bizora Connector installed on a subscriber’s computer, we read accounting records from their existing software: invoices, ledgers, outstanding balances, stock and related transaction data.
Account information
Names, mobile numbers, email addresses, business names and addresses, roles and permissions, and records of OTP verification for the people who log in.
Usage and device information
Log records of logins, logouts, data access, IP address, device and app version, and errors. These exist so a subscriber can see who viewed what.
Communications
Messages exchanged through the WhatsApp dealer and customer desk, service requests and complaints, and correspondence with our support team.
Location
Covered separately in the next section, because it deserves to be.
3. Employee location — in plain terms
Where a subscribing business enables Bizora Field, the app records the location of employees it has authorised, together with entry and exit events for geofenced places.
- Location is collected only for employees the business has explicitly authorised, and only while the employee is on duty as configured by that business.
- Collection depends on the device permission the employee grants. It can be withdrawn on the device at any time, though doing so may stop attendance and visit features working.
- The business must inform its employees, before enabling tracking, what is collected and why. We provide notice text to help, but the obligation is the employer’s.
- Location data is visible to that business’s authorised managers. It is not visible to other businesses, to dealers, or to customers.
- We do not sell location data, and we do not use it to build profiles for advertising.
Before publishing: confirm your actual retention period for location history, and your exact on-duty window.
4. Why we process it
- To provide the service a business has subscribed to, and the accounts its people log into.
- To verify identity through OTP before showing anyone financial information.
- To deliver statements, invoices, reminders, alerts and summaries the business has configured.
- To record attendance and field visits where the business has enabled it.
- To keep audit records of access, which protect both the business and its people.
- To support, secure, debug and improve the platform.
- To meet legal, tax and regulatory obligations.
We process personal data on the basis of consent, or where processing is necessary for the legitimate uses permitted by law.
5. Who we share it with
We do not sell personal data. We share it only with:
- The subscribing business whose data it is.
- Infrastructure and service providers who host and operate the platform on our behalf, under contract: Railway, which hosts our application infrastructure; Meta, for the WhatsApp Business Platform; Anthropic, which processes the questions you type to the AI Assistant so it can work out what you are asking; and Google, where a business chooses to mirror its records into a Google Sheet it controls.
- WhatsApp Business Platform, where a business uses the WhatsApp desk. Those conversations are also subject to Meta’s terms.
- Authorities, where we are legally required to disclose.
Our servers and data are located in Singapore. This means your personal data is stored and processed outside India.
6. How long we keep it
Business records stay available for as long as the business subscribes. After an account closes, we retain data for three months so the business can export it, and then delete it.
7. How we protect it
- Encrypted communication between the Connector, our cloud and every app.
- Authentication with OTP verification and managed sessions.
- Role-based access control, so people see only what their role allows.
- Company-level isolation, so one business’s data is never reachable from another’s account.
- Access logging — which user viewed which dealer, when a statement was shared, when an invoice was opened.
- Controlled location permissions and authorised-employee-only tracking.
We describe only controls we have actually implemented. Bizora does not hold SOC 2, ISO 27001 or any other certification, and we will not claim one until it exists.
If a personal data breach occurs, we will notify the affected businesses and the Data Protection Board of India as required, without undue delay.
8. Your rights
Subject to law, you may ask to access a summary of your personal data and how it is processed; to correct or complete inaccurate data; to have data erased where it is no longer needed; and to nominate someone to exercise your rights.
To exercise these rights, write to our grievance officer below. If your data sits inside a business’s Bizora account, we will direct your request to that business.
9. Grievance officer
In line with Indian law, we publish a named contact for data questions and complaints:
- NameAmit Dutta
- DesignationManager
- Emailsupport@bizoratech.in
- AddressPeace Point Road, Varanasi, Uttar Pradesh 221010
- Response timeWithin 10 days of receiving your request
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Cookies and this website
This website sets no cookies and runs no analytics or tracking of any kind. Nothing you do here is recorded, and there is no consent banner because there is nothing to consent to. If that ever changes, this section changes with it.
11. Children
Bizora is a business platform and is not directed at children. We do not knowingly process the personal data of anyone under 18.
12. Changes to this policy
When this policy changes materially we will update the date at the top and, for subscribing businesses, notify the account owner.
Questions about how
your data is handled?
We would rather answer a hard question before you sign than after.