SmartBiz AI ("SmartBiz AI", "we", "us") provides point-of-sale and accounting
software for small businesses in India via smartbizai.in
and an optional WhatsApp assistant. This policy explains what we collect, why, and the choices you have.
1. Information we collect
- Account data — your name, business name, mobile number, and email when you sign up.
- Business data you enter — sales, purchases, expenses, customers, staff, stock, and accounting records you record in the app.
- Payment data — when you subscribe, payments are processed by our gateway (Razorpay). We receive a payment confirmation and reference; we do not store your card, UPI, or bank credentials.
- Usage & device data — basic logs (e.g. IP address, timestamps, error reports) needed to run and secure the service.
2. How we use your data
- To provide the POS, accounting, and reporting features you use.
- To process subscription payments and manage your plan.
- To send service messages (e.g. trial-ending reminders, receipts) and, if you enable it, WhatsApp notifications you or your customers opt into.
- To secure, debug, and improve the service.
3. Sharing
We do not sell your data. We share it only with the processors that run the service, and
only as needed to deliver the features you use, or where required by law:
- Supabase — our cloud database and sign-in host.
- Razorpay — our payment gateway, for subscription payments.
- WhatsApp / Meta — for messages you choose to send. Where you send a
credit reminder or delivery update, this includes your customer's mobile number and the
amount concerned.
- Sentry — crash reports and performance diagnostics, so we can find and
fix faults. Text and images on screen are masked before anything is sent, so your customer
names, balances and amounts are not included.
4. Your customers' data
Business data you enter (including your customers' details) belongs to you. You are the
controller of that data; we process it on your behalf to run the app. You are responsible for
having a lawful basis to record it and for honouring your customers' requests.
5. WhatsApp messages & opt-out
Proactive reminders sent through the WhatsApp assistant include an opt-out. A recipient can
reply STOP at any time to stop receiving reminders (and START to resume).
6. Retention
We keep your data while your account is active. You can export your data from within the app.
On account closure we delete or anonymise your data within a reasonable period, except where we
must retain records to meet legal or tax obligations.
7. Security
Data is stored with tenant isolation and access controls, encrypted in transit (HTTPS), and
accessible only to your authorised users. No system is perfectly secure, but we work to protect
your data and to fix issues promptly.
8. Your rights as a Data Principal
Under the DPDP Act, 2023 you have the following rights over your personal data. You can
exercise any of them by contacting our Grievance Officer (section 9):
- Right to access — obtain a summary of the personal data we hold about you and how it is processed.
- Right to correction & completion — have inaccurate or incomplete data corrected, completed, or updated.
- Right to erasure — request deletion of your personal data when it is no longer needed for the purpose it was collected, subject to legal retention such as the GST record-keeping in section 6.
- Right to grievance redressal — a readily available means to raise any complaint about our handling of your data (section 9).
- Right to nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
To delete your account and data, see Delete your account & data.
9. Grievance Officer
If you have any concern or complaint about how your personal data is handled, you may
contact our Grievance Officer:
We will acknowledge every grievance within 48 hours and aim to
resolve it within 90 days of receipt, in line with the DPDP Act.
10. Data breach notification
If a personal data breach occurs, we will notify the Data Protection Board of India and
every affected user without undue delay, describing what happened, the data involved, and
the steps we are taking.
11. Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.
12. Contact
Questions or data requests: support@smartbizai.in.