Home · Privacy & security
Bizora handles business records and, where a customer enables it, employee location. This page explains what we collect, why, who can see it and what you can ask us to do about it.
Last updated: DD Month 2026
Bizora is a business platform operated by Bizora Tech, full registered entity name, registered at registered office address, India. In this policy, "Bizora", "we" and "us" mean that entity.
Bizora is used in two ways, and the distinction matters for your rights:
If you are an employee, dealer or customer of a business that uses Bizora and you want your data changed or removed, the fastest route is that business. We will support them in acting on your request.
Through the Bizora Connector installed on a subscriber's computer, we read accounting records from their existing software: invoices, ledgers, outstanding balances, stock, sales, purchases, credit notes, transactions and the customer and dealer names attached to them. Bizora does not write back to that accounting software, and data originating there is read-only inside Bizora.
Names, mobile numbers, email addresses, business names and addresses, roles and permissions, and records of OTP verification for the people who log in as owners, employees, dealers or customers.
Log records of logins, logouts, data access, IP address, device and app version, and errors. These exist so that a subscriber can see who viewed what, and so we can keep the service running.
Messages exchanged through the WhatsApp dealer and customer desk, service requests and complaints, and any correspondence with our support team.
Covered separately in the next section, because it deserves to be.
Where a subscribing business enables Bizora Field, the app records the location of employees it has authorised, together with entry and exit events for the geofenced sites it has defined.
Confirm your actual retention period for location history and your exact on-duty window before publishing.
We process personal data on the basis of consent, or where processing is necessary for the legitimate uses permitted by law. Where consent is the basis, it can be withdrawn, and we will explain what stops working if it is.
We do not sell personal data. We share it only with:
Our servers and data are located in state your hosting region. If any provider processes data outside India, say so and name the country.
Business records stay available for as long as the business subscribes. After an account closes, we retain data for state your period, e.g. 90 days so the business can export it, then delete or irreversibly anonymise it, except where law requires us to keep it longer. Access logs are kept for state period. Location history is kept for state period.
We describe only controls we have actually implemented. Bizora does not hold SOC 2, ISO 27001 or any other certification, and we will not claim one until it has been independently awarded. If a certification is later obtained, this page will say so and name the auditor.
If a personal data breach occurs, we will notify the affected businesses and the Data Protection Board of India as required, without undue delay.
Subject to law, you may ask to access a summary of your personal data and how it is processed; to correct or complete inaccurate data; to have data erased where it is no longer needed; to withdraw a consent you gave; and to nominate someone to exercise these rights if you die or become incapacitated.
To exercise these rights, write to our grievance officer below. If your data sits inside a business's Bizora account, we will direct your request to that business and help them act on it. We may ask you to verify your identity first — we will not hand over account information to someone we cannot identify.
In line with Indian law, we publish a named contact for data questions and complaints:
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Describe what this site actually uses. As delivered it sets no cookies and runs no analytics; if you add Google Analytics, Meta Pixel or a chat widget, they must be listed here and a cookie banner added. This site loads fonts from Google Fonts, which means Google receives your IP address when the page loads.
Bizora is a business platform and is not directed at children. We do not knowingly process the personal data of anyone under 18. If you believe a child's data has reached us, contact the grievance officer and we will delete it.
When this policy changes materially we will update the date at the top and, for subscribing businesses, notify the account owner. Continued use after a change means the updated policy applies.
We would rather answer a hard question before you sign than after.