Privacy Policy
Your trust is our capital. Here is how we protect it.
Last Updated: February 3, 2026
At BikriSathi (operated from Durgapur, West Bengal), we understand that for a Dukandaar, business secrets (Khata) are sacred. This Privacy Policy outlines how we collect, use, and strictly guard your personal and business data.
By using BikriSathi, you consent to the data practices described in this policy. We are committed to compliance with the Digital Personal Data Protection (DPDP) Act, 2023.
1. Information We Collect
We collect only the data necessary to provide our digital services to you:
- Personal Identity: Your mobile number (for WhatsApp login/OTP) and Name.
- Business Data: Information you voluntarily enter, including Inventory lists, Product prices, Customer details ("Udhaar" records), and Staff attendance/salary records.
- Technical Data: IP address, device type, and usage logs to help us improve app performance and security.
2. How We Use Your Data
Your data is used exclusively for the following purposes:
Service Delivery
To generate bills, track inventory, and send WhatsApp notifications to your customers on your behalf.
Product Improvement
To analyze usage patterns (anonymously) so we can build better features for Indian SMBs.
3. Data Storage & Security
We treat your data with enterprise-grade security standards.
- Location: All user data is stored securely on Microsoft Azure servers located in Central India, ensuring compliance with data localization laws.
- Encryption: Data is encrypted in transit (using SSL) and at rest (AES-256 standard).
- Access Control: Strict internal access controls ensure that no unauthorized employee can view your specific business transactions.
4. Sharing & Disclosure
WE DO NOT SELL YOUR DATA TO THIRD-PARTY ADVERTISERS.
We only share data with trusted infrastructure partners required to run the app:
- Meta / WhatsApp: To facilitate the sending of bills and messages.
- Payment Gateways: If you purchase a premium plan, your payment details are processed securely by our payment partner (e.g., Razorpay/Stripe). We do not store card details.
- Legal Requirements: We may disclose data if required by Indian law enforcement agencies under valid legal process.
5. Your Rights
Under the Digital Personal Data Protection Act, you have the following rights:
- Right to Access: You can request a copy of all personal data we hold about you.
- Right to Correction: You can update inaccurate or incomplete information via the app settings.
- Right to Erasure: You can request the deletion of your account and associated data. We will delete it within 30 days, provided no legal obligation requires us to keep it.
Contact & Grievance Redressal
If you have any questions about this policy or wish to exercise your data rights, please contact our Privacy Team.