Privacy policy
Last updated: [DATE]
This policy explains how [COMPANY LEGAL NAME] ("Bhaavly", "we", "us"), [REGISTERED ADDRESS] handles personal data when you use Bhaavly. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. What we collect
- Account details: your name, email address, password (stored only as a one-way hash) and the role you have in your organisation.
- Business details you enter: business name, GSTIN, address, bank details, terms and signatory.
- Your customers' details: names, GSTINs, addresses and phone numbers you add to quotations and invoices. For this data you decide what is collected and why; we process it on your behalf.
- Billing details: your plan, payment status and invoices. Card, UPI and bank details are collected by Razorpay; we do not see or store them.
- Usage and technical data: sign-in times, IP address, browser type, and records of actions taken in the account, used for security and support.
2. Why we use it
- To provide the Service: create documents, share links, record payments, manage your team.
- To bill you and issue GST invoices, as the law requires.
- To keep the Service secure, prevent misuse and answer support requests.
- To send you service messages, such as invitations, billing notices and important changes. [STATE WHETHER YOU WILL SEND MARKETING EMAIL AND HOW TO OPT OUT.]
We do not sell personal data, and we do not use your customers' data for our own marketing.
3. Cookies
The app uses one essential cookie to keep you signed in. [DESCRIBE ANY ANALYTICS TOOL, OR STATE THAT NONE IS USED.]
4. Who we share it with
- Cloudflare, which hosts the Service and its database.
- Razorpay, which processes subscription payments.
- [EMAIL PROVIDER, IF ANY.]
- Government authorities, when the law requires it.
Anyone with a shared document link can see that document, so share links only with the intended person.
5. Where it is stored and for how long
Data is stored with Cloudflare, which may process it in data centres outside India. We keep account data while your account is open and [RETENTION PERIOD] after it is closed, except billing records, which we keep for as long as tax law requires.
6. Security
Connections are encrypted, passwords are hashed, each organisation's data is kept separate, and only the people you invite can see it. Staff members cannot see costs and profit. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
7. Your rights
You can ask to see, correct or delete your personal data, withdraw consent, or nominate someone to act for you, by writing to [SUPPORT EMAIL]. If you are a customer of a business that uses Bhaavly, please contact that business first.
8. Grievance officer
[NAME], [DESIGNATION]. Email: [GRIEVANCE EMAIL]. Address: [REGISTERED ADDRESS]. We will acknowledge complaints within [N] days and resolve them within [N] days.
9. Changes
We will post any update here and tell you about significant changes by email or in the app.