1. Information We Collect
When you use or register for Bizloom OS, we collect and process the following categories of information:
- Identity & Account Information: Owner Full Name, connected Google OAuth email address, profile avatar, and verified user identifier.
- Business & Workspace Credentials: Registered Business / Store Name, Business Category (e.g. Retail, Cafe, Wholesaler), Phone / WhatsApp Number, Store Address, and optional Tax Identification (GSTIN / VAT Number).
- Operational Financial & Ledger Records: Daily revenue inflows (cash and online/UPI splits), itemized operational expense items, customer and supplier Khata debt ledgers (Lena-Dena balances), POS invoices, and inventory catalog quantities.
- Technical & Usage Data: Internet Protocol (IP) address, browser client user-agent, operating system, session cookies, and interaction logs necessary for preventing fraudulent access.
2. How We Use Your Information
We process your data strictly for legitimate operational purposes:
- To provide, maintain, and operate the core Bizloom OS ledger, Daily Notebook, Khata registers, and POS invoicing features.
- To dispatch automated, user-triggered payment reminder links and debt recovery notices to your customers via WhatsApp.
- To generate auditor-ready 1-click PDF Profit & Loss statements and thermal checkout receipts.
- To authenticate your identity, prevent duplicate tenant provisioning, and maintain multi-tenant isolation.
- To process subscription plan payments through our certified PCI-DSS compliant third-party payment gateway partners.
- To comply with statutory financial, legal, and tax reporting requirements in relevant jurisdictions.
3. Data Storage, Security & Bank-Grade Encryption
We implement industry-leading technical and organizational security measures to protect your commercial ledger from unauthorized interception:
- Row-Level Security (RLS): Every single database record is isolated in PostgreSQL using cryptographic tenant policies tied to your verified authentication ID. No other business tenant can access or view your entries.
- Encryption: All data in transit is encrypted using Transport Layer Security (TLS 1.3), and all database records and storage backups are encrypted at rest using AES-256 standards.
- Managed Cloud Architecture: Hosted on world-class, ISO-27001 and SOC-2 certified cloud infrastructure with continuous uptime monitoring.
4. Payment Gateways & Financial Transactions
When subscribing to our Free or Pro plans, financial transactions are routed through accredited Payment Aggregators (such as Stripe, Razorpay, or Cashfree) that comply strictly with Payment Card Industry Data Security Standards (PCI-DSS Level 1).
Bizloom OS does not capture, store, or view your complete credit card numbers, CVVs, or online banking passwords. All payment details are processed directly within encrypted gateway iframes.
5. Your Rights: Access, Export & Permanent Erasure
You maintain full ownership of your data at all times. In accordance with applicable data protection laws (including the Digital Personal Data Protection Act 2023 and GDPR):
- Right to Rectification: You may edit and update your business name, contact phone, operating currency, and GST details at any time in the Settings section.
- Right to Export: You can export full P&L reports and customer Khata statements in standard PDF and CSV formats.
- Right to Complete Erasure: You can permanently wipe your account at any time using the Danger Zone: Delete Account tool in Settings. Executing this permanently purges all ledger entries, customer Khata logs, invoices, inventory items, workspaces, and authentication credentials from both our database and authentication servers.
6. Grievance Redressal & Support Inquiries
If you have any questions, concerns, or grievances concerning data processing, account security, or our privacy practices, please contact our support desk:
Any complaint or grievance concerning data processing or security will be addressed promptly from the date of receipt.