Privacy Policy

SmartBiz AI ("SmartBiz AI", "we", "us") provides point-of-sale and accounting software for small businesses in India via smartbizai.in and an optional WhatsApp assistant. This policy explains what we collect, why, and the choices you have.

1. Information we collect

• Account data — your name, business name, mobile number, and email when you sign up.
• Business data you enter — sales, purchases, expenses, customers, staff, stock, and accounting records you record in the app.
• Payment data — when you subscribe, payments are processed by our gateway (Razorpay). We receive a payment confirmation and reference; we do not store your card, UPI, or bank credentials.
• Usage & device data — basic logs (e.g. IP address, timestamps, error reports) needed to run and secure the service.

2. How we use your data

• To provide the POS, accounting, and reporting features you use.
• To process subscription payments and manage your plan.
• To send service messages (e.g. account and billing notices, receipts) and, if you enable it, WhatsApp notifications you or your customers opt into.
• To secure, debug, and improve the service.

3. Sharing

We do not sell your data. We share it only with the processors that run the service, and only as needed to deliver the features you use, or where required by law:

• Supabase — our cloud database and sign-in host.
• Razorpay — our payment gateway, for subscription payments.
• WhatsApp / Meta — for messages you choose to send. Where you send a credit reminder or delivery update, this includes your customer's mobile number and the amount concerned.
• Sentry — crash reports and performance diagnostics, so we can find and fix faults. Text and images on screen are masked before anything is sent, so your customer names, balances and amounts are not included.

CCTV alerts and Android notifications

When your business enables CCTV alerts, SmartBiz AI receives incident details (station, camera, time, rule and detected counts) and selected incident images from the station desktop. Images can contain people and vehicle number plates. Images are stored in private cloud storage and shown to authorised station users through temporary links. Google Firebase Cloud Messaging processes device registration tokens and alert content, including a temporary image link when available, to deliver Android notifications. You can turn notifications off in Android settings. The station operator controls camera placement and local recording; SmartBiz AI does not continuously stream all camera footage to the app.

4. Your customers' data

Business data you enter (including your customers' details) belongs to you. You are the controller of that data; we process it on your behalf to run the app. You are responsible for having a lawful basis to record it and for honouring your customers' requests.

5. WhatsApp messages & opt-out

Proactive reminders sent through the WhatsApp assistant include an opt-out. A recipient can reply STOP at any time to stop receiving reminders (and START to resume).

6. Retention

We keep your data while your account is active. You can export your data from within the app. On account closure we delete or anonymise your data within a reasonable period, except where we must retain records to meet legal or tax obligations.

7. Security

Data is stored with tenant isolation and access controls, encrypted in transit (HTTPS), and accessible only to your authorised users. No system is perfectly secure, but we work to protect your data and to fix issues promptly.

8. Your rights as a Data Principal

Under the DPDP Act, 2023 you have the following rights over your personal data. You can exercise any of them by contacting our Grievance Officer (section 9):

• Right to access — obtain a summary of the personal data we hold about you and how it is processed.
• Right to correction & completion — have inaccurate or incomplete data corrected, completed, or updated.
• Right to erasure — request deletion of your personal data when it is no longer needed for the purpose it was collected, subject to legal retention such as the Tax record-keeping in section 6.
• Right to grievance redressal — a readily available means to raise any complaint about our handling of your data (section 9).
• Right to nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To delete your account and data, see Delete your account & data.

9. Grievance Officer

If you have any concern or complaint about how your personal data is handled, you may contact our Grievance Officer:

• Grievance Officer, SmartBizAI
• Email: support@smartbizai.in

We will acknowledge every grievance within 48 hours and aim to resolve it within 90 days of receipt, in line with the DPDP Act.

10. Data breach notification

If a personal data breach occurs, we will notify the Data Protection Board of India and every affected user without undue delay, describing what happened, the data involved, and the steps we are taking.

11. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

12. Contact

Questions or data requests: support@smartbizai.in.