Privacy Policy

Effective Date: August 2026

This Privacy Policy describes how Bharat2Business ("we," "our," or "us") collects, processes, stores, uses, and discloses personal data when you access or use our website, mobile applications, Digital Partner (AI assistant), Government Scheme Discovery tools, Verified Expert Network, and related services (collectively, the "Platform").

By accessing or using Bharat2Business, you agree to this Privacy Policy.

1. Information We Collect

We collect information necessary to provide our services to Indian MSMEs.

1.1 Information You Provide

At the time of registration or use of our Platform, we may collect:

  • Full name
  • Company / business name
  • Email address
  • Mobile number
  • Postal address
  • Business details
  • Udyam Registration Number
  • GSTIN / PAN / CIN (if applicable)
  • Industry / sector information
  • Turnover details (if voluntarily submitted)

If you use paid services, we may collect:

  • Payment details
  • Billing information
  • Bank account details (processed securely via payment partners)

1.2 Information Generated Through Use

When you use the Platform, including the Digital Partner and Government Scheme Discovery tools, we may collect:

  • Queries submitted
  • Compliance workflows accessed
  • Expert interaction records
  • Chat transcripts
  • Usage patterns
  • Pages viewed
  • Session duration
  • Device type
  • IP address
  • Browser and operating system information

We may record communications with experts or support for quality assurance and service improvement purposes.

1.3 Sensitive Personal Data

We may process business-related statutory identifiers (GST, Udyam, PAN, etc.) where voluntarily provided for compliance or scheme discovery purposes. Bank account details and other financial information collected for paid services (see Section 1.1) are also treated as sensitive personal data under applicable Indian law and are processed securely via our payment partners, with access restricted to what is necessary to complete a transaction.

We do not knowingly collect unrelated sensitive personal data unless required for lawful business verification.

1.4 Cookies & Tracking Technologies

We and authorized partners may use:

  • Cookies
  • Pixel tags
  • Web beacons
  • Device identifiers

To:

  • Improve user experience
  • Enable personalization
  • Analyze platform performance
  • Provide relevant communications

You may control cookies through your browser settings.

2. Purpose of Data Collection

We collect and use information for the following purposes:

  • To verify user identity
  • To provide compliance and business guidance
  • To power the Digital Partner
  • To analyze eligibility under Government Scheme Discovery
  • To match users with verified experts
  • To improve platform functionality
  • To prevent fraud and misuse
  • To communicate updates and notifications
  • To comply with legal obligations

If you object to certain processing activities, we may be unable to continue providing services.

3. Data Sharing & Disclosure

We do not sell personal data.

We may share information with:

3.1 Service Providers

Including:

  • Cloud hosting providers
  • Payment processors
  • Analytics providers
  • Customer support systems

These parties are bound by confidentiality obligations.

3.2 Verified Experts

Where necessary for service delivery, relevant business information may be shared with experts engaged through the Platform.

3.3 Regulatory & Government Authorities

Where required under applicable laws, including:

  • Identity verification
  • Fraud prevention
  • Investigation of legal violations

3.4 Business Partners

Where explicitly consented by the user, we may share limited information with business partners for service enhancement.

4. Digital Partner & AI Data Use

Queries submitted to the Digital Partner may be processed to:

  • Generate contextual guidance
  • Improve system performance
  • Enhance response accuracy

We do not use user-specific business data to train public AI models.

AI-generated responses are informational and do not constitute professional advice.

5. Data Retention

We retain personal data for the following periods:

  • Account and business profile data: for as long as your account remains active, and up to 3 years after account closure to meet statutory, tax, and audit obligations under Indian law
  • Digital Partner query and chat transcripts: up to 24 months, for service quality and improvement purposes
  • Records relevant to an active dispute, investigation, or legal proceeding: until that matter is resolved, regardless of the periods above

Users may request earlier deletion subject to applicable legal requirements (see Section 10, Account Deletion).

Certain archival records may be retained beyond these periods where required for regulatory compliance.

6. Your Rights Under DPDP Act, 2023

In accordance with the Digital Personal Data Protection Act, 2023, you may:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request deletion of data
  • Withdraw consent (where applicable)
  • Nominate another individual to exercise rights in case of incapacity

Requests may be submitted to: privacy@bharat2business.com

We may verify identity before processing requests.

7. Data Security

We implement reasonable technical and organizational safeguards, including:

  • Encryption in transit
  • Access control restrictions
  • Secure cloud storage
  • Periodic security reviews

However, no internet transmission can be guaranteed to be 100% secure.

Users are advised not to share account passwords or sensitive credentials.

7.1 Data Breach Notification

In the event of a personal data breach, we will, without undue delay:

  • Notify the Data Protection Board of India, as required under the Digital Personal Data Protection Act, 2023;
  • Notify affected users via email and/or an in-app notice, describing the nature of the breach, the personal data likely affected, the likely consequences, and the measures taken or proposed to mitigate the impact; and
  • Take reasonable steps to contain the breach and prevent recurrence.

If you believe your data has been compromised, please contact our Grievance Officer (see Section 11) immediately.

8. Children's Privacy

Bharat2Business is intended for business users and individuals above 18 years of age.

We do not knowingly collect personal data from minors.

If we become aware of such collection, we will take steps to delete the information.

9. International Data Transfers

Your data is primarily stored on servers located in India, in AWS's Mumbai (ap-south-1) region. We do not routinely transfer personal data outside India.

Where a limited transfer does occur — for example, to a third-party service provider for support or infrastructure purposes — we ensure it is permitted under the Digital Personal Data Protection Act, 2023, and is not made to any country the Central Government has restricted by notification under that Act.

By using the Platform, you consent to this processing and storage arrangement.

10. Account Deletion

Users may request account deletion.

We will process deletion requests subject to:

  • Legal retention obligations
  • Ongoing dispute resolution
  • Fraud prevention requirements

Some records may remain archived as required by law.

11. Grievance Officer

In accordance with applicable law, our Grievance Officer can be reached at: admin@bharat2business.com

Users may contact us for privacy-related concerns. We aim to acknowledge and provide a first response to grievances within 45 days of receipt.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

Users are encouraged to review it periodically.

Continued use of the Platform constitutes acceptance of any updates.

Questions about this policy? Contact us at privacy@bharat2business.com or legal@bharat2business.com.