Privacy Policy

This policy explains what personal data Bizkar ("we", "us") collects when you visit bizkar.in or use Bizkar CRM, why we collect it, who helps us process it, and what you can do about it. Bizkar is [Registered company name], of [Registered office address].

Two kinds of data

Your account and billing data. We decide how this is used, so we are responsible for it under this policy.

The data you put into your CRM organization: leads, contacts, customers, deals, quotes, contracts, tickets, activities and notes. Your organisation decides what goes in and who can see it. We store and process it only to provide the service to you, as described in our Terms of Serviceand data processing agreement. If you are someone whose details a Bizkar customer keeps in their CRM, please contact that customer first.

What we collect

• Account details: your name, email address and password when you register. Your password is stored only as a salted hash by our sign-in service; we cannot read it.
• Organization membership: the organizations you belong to and your role in each.
• Billing details: your plan, subscription status, invoices and a masked description of your payment method (for example, the last four digits of a card). Card numbers and bank details are handled by Razorpay and never reach our servers.
• Messages you send us: what you enter in the Contact Sales form (name, work email, phone and your message).
• Technical data: IP address, browser details and the time of each request, recorded in server logs and used to keep the service secure. Sign-in attempts are recorded by IP address to block password-guessing.

Why we use it

• To create your account, verify your email address and let you sign in.
• To run your organization and give members the access their roles allow.
• To take payment for paid plans and keep billing records.
• To send service emails: email verification, password resets, organization invitations and security notices.
• To answer your enquiries and support requests.
• To keep the service secure and to investigate misuse.

We do not sell personal data, and we do not use it for advertising.

Support access to your organization

Bizkar support can enter your organization only while your organization has granted access, for the period you choose — 1, 7 or 30 days — and, if you wish, only as the members you pick. Access is off unless you turn it on under Settings → Support access, your owners are emailed when it is granted, and revoking it ends any session in progress at once. There is no override: we do not enter an organization without that permission.

While access is granted, a support operator may view your organization as one of its users to resolve a support request. Every such session requires a stated reason, is time-limited and recorded, and when it ends your organization administrators receive an email saying who accessed it, as whom, when and why.

Who processes data for us

The full list, with what each one does and where, is on our sub-processors page.

• DigitalOcean hosts our servers, databases, stored files, server logs and backups, inSingapore.
• Razorpay processes payments and subscriptions.
• MSG91 delivers our emails.
• Sentry receives error reports from Bizkar CRM when a page fails: the technical details of the error, the page it happened on and your organization's internal identifier — not your name, email, IP address or what you entered.
• Google reCAPTCHA checks that a sign-up, or a form an organization publishes to collect enquiries, is sent by a person, not a script. Those pages load it from Google, which receives your IP address and information about your browser and how you use the page, under Google's privacy policy and terms.

Each receives only what it needs for that job.

Cookies and browser storage

This website sets no advertising or analytics cookies. When you sign in, our sign-in service sets the cookies it needs to keep you signed in. Bizkar CRM keeps your access token in memory rather than in browser storage, and remembers small interface preferences, such as whether the sidebar is collapsed, in your browser. Razorpay's checkout sets its own cookies when you pay, and Google reCAPTCHA sets its own on the sign-up page and on enquiry forms.

How long we keep it

We keep account and organization data for as long as your account or organization exists. Billing records are kept for as long as tax and accounting law requires. Contact form messages are kept while we deal with your enquiry. Server logs are kept for 30 days, then deleted. We keep backups so that data can be recovered after a failure. Data that is permanently deleted (records and files emptied from an organization's recycle bin, a person erased at a organization's request, a closed organization's data) is gone from our backups within 30 days of that deletion.

Your choices and rights

• You can view and change your name, email address and password, and set up two-factor authentication, from your account page.
• You can ask us for a copy of your personal data, to correct it, or to delete your account.
• Organization owners can remove members and ask us to close the organization and delete its data.

To make a request, email privacy@bizkar.in from the address on your account.

Changes to this policy

If we change this policy in a way that affects you, we will update the date above and, for significant changes, tell organization owners by email.

Grievance officer

If you have a complaint about how we handle your personal data, write to our grievance officer, [Grievance officer’s name] ([Designation]), at privacy@bizkar.in. We answer a complaint within 90 days. If you are not satisfied with the answer, you can complain to the Data Protection Board of India.

If your data is exposed

If a breach affects your personal data, we will tell you without delay: what happened, what it means for you, what we have done and what you can do. We also report it to the Data Protection Board of India. If it affects data in a organization, we tell the organization's owners, who are responsible for telling the people in it.

Contact

Questions about privacy: privacy@bizkar.in.