1. INTRODUCTION

Bizrato Connecting Solution (OPC) Pvt Ltd ("Company", "We", "Us", or "Our") operates the Bizrato Merchant Portal at https://merchant.bizrato.com and the Bizrato Business App ("Merchant Platform").

This Merchant Privacy Policy explains how we collect, use, store, share, and protect the personal and business data of Merchants who register and use the Merchant Platform.

By registering as a Merchant on the Platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not register or use the Merchant Platform.

This Privacy Policy complies with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (DPDP Act)
• Consumer Protection Act, 2019

2. INFORMATION WE COLLECT FROM MERCHANTS

2.1 Information You Provide During Registration

When you register as a Merchant, we collect:

• Mobile number — mandatory for OTP-based KYC verification
• Business name — as you wish it to appear on the Platform
• Business category and sub-category
• Business keywords for search optimization
• Business address — city, area, pincode
• Business description
• Business operating hours

2.2 Optional Information You May Provide

The following information is optional but recommended for better listing quality:

• Business photographs and gallery images
• Service or product details and pricing
• Social media links
• Website URL
• Years of experience or establishment year

2.3 Information Collected During Platform Use

When you use the Merchant Platform, we automatically collect:

• Login activity — date, time, and device used for login
• Lead and enquiry data — customer enquiries received and your responses
• CRM activity — lead status updates, notes, and follow-ups you add
• Chat messages — communication between you and customers through the Platform
• Review responses — your responses to customer reviews
• Subscriber data — customers who subscribe to your business
• Analytics data — views, enquiry counts, and listing performance metrics
• Device information — device type, operating system, app version
• IP address and approximate location

2.4 Payment Information

If you purchase a Premium Plan subscription:

• Payment transaction ID and status
• Subscription start and end dates
• Payment method type (UPI, card, net banking) — we do NOT store full card numbers or bank account details
• GST information if provided

All payment processing is handled by our payment gateway partners. We do not store sensitive financial information on our servers.

2.5 Information We Do NOT Collect

Bizrato does NOT collect the following from Merchants:

• Aadhaar number or government-issued ID (not currently required for KYC)
• PAN card number
• Bank account details
• Full credit or debit card numbers

3. HOW WE USE MERCHANT INFORMATION

3.1 To Operate the Merchant Platform

• To verify your identity through OTP-based authentication
• To create and display your business listing on bizrato.com
• To deliver customer enquiries exclusively to your business
• To enable chat communication between you and customers
• To send you lead notifications, review alerts, and admin messages
• To manage your subscription and process payments
• To provide analytics and performance data for your listing

3.2 To Improve Our Services

• To understand how Merchants use the Platform
• To improve Platform features and user experience
• To develop new tools and services for Merchants
• To conduct internal research and analytics

3.3 For Safety and Compliance

• To detect, prevent, and address fraud and abuse
• To enforce our Merchant Terms and Conditions
• To comply with applicable Indian laws and regulations
• To respond to legal requests from government authorities
• To protect the rights and safety of customers and other Merchants

3.4 For Communications

• To send subscription renewal reminders and payment receipts
• To notify you of Platform updates, new features, and policy changes
• To send promotional communications about Bizrato products (with your consent)
• To respond to your support requests and grievances

4. HOW WE SHARE MERCHANT INFORMATION

We do NOT sell your personal or business data to any third party. We share information only in the following limited circumstances:

4.1 With Customers (Users)

Your business listing information is publicly displayed on bizrato.com and is accessible to all visitors. This includes:

• Business name, description, category, and keywords
• Business address and area
• Business images and gallery
• Star ratings and reviews received
• Verified badge status
• Operating hours

Your mobile number is shared with customers ONLY when they send an enquiry to your business, for the purpose of facilitating direct contact.

4.2 With Service Providers

We share data with trusted third-party service providers:

• Google LLC — Analytics, Tag Manager (website usage data)
• Meta Platforms Inc. — Facebook Pixel (advertising data)
• Payment Gateway Partners — for processing Premium Plan payments
• Cloud and hosting providers — for secure data storage
• WhatsApp Business API providers — for lead and subscriber notifications
• Email service providers — for transactional emails

All service providers are contractually bound to protect your data and use it only for specified purposes.

4.3 For Legal Compliance

We may disclose Merchant information to:

• Law enforcement agencies in response to valid legal requests
• Courts in response to court orders or legal proceedings
• Government authorities for regulatory compliance
• Consumer protection agencies in case of verified customer complaints

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change in advance.

5. CUSTOMER DATA HANDLING BY MERCHANTS

When customers contact you through the Platform, you receive their contact information. As a Merchant, you agree to:

• Use customer data ONLY to respond to their specific enquiry
• Not store customer data beyond what is necessary for the immediate transaction
• Not use customer contact information for marketing or promotional purposes without their explicit consent
• Not share or sell customer data to any third party
• Comply with all applicable data protection laws including the DPDP Act 2023 when handling customer information
• Delete customer data upon their request

Misuse of customer data obtained through the Platform is a serious violation of these terms and may result in immediate account termination and legal action.

6. DATA STORAGE AND SECURITY

6.1 Where We Store Your Data

Your data is stored on secure servers. We take all reasonable steps to ensure data is stored securely and in compliance with applicable Indian data protection laws.

6.2 How Long We Keep Your Data

• As long as your account is active on the Platform
• 3 years after account deletion for legal and audit purposes
• As required by applicable Indian laws and regulations
• Until you request deletion (subject to legal retention requirements)

6.3 Security Measures

We protect your data using:

• SSL/TLS encryption for all data in transit
• Secure server infrastructure with access controls
• OTP-based authentication for account access
• Regular security assessments and monitoring
• Restricted access to personal data within the Company

However, no electronic system is 100% secure. We cannot guarantee absolute security but commit to industry best practices.

7. YOUR RIGHTS AS A MERCHANT

Under the Digital Personal Data Protection Act, 2023, and other applicable Indian laws, you have the following rights:

• Right to Access — Request details of what personal data we hold about you
• Right to Correction — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your data, subject to legal obligations
• Right to Withdraw Consent — Withdraw consent to data processing at any time
• Right to Data Portability — Request your data in a portable format
• Right to Grievance Redressal — File complaints about our data practices

To exercise any of these rights, contact our Grievance Officer at [email protected]. We will respond within 30 days.

7.1 Account Deletion

You may request deletion of your Merchant account at any time by emailing [email protected]. Upon account deletion:

• Your business listing will be removed from bizrato.com
• Your personal data will be deleted or anonymized within 30 days
• Certain data may be retained for legal compliance for up to 3 years
• Lead and transaction history may be retained in anonymized form for analytics
• Any active Premium subscription will be cancelled as per our Refund Policy

8. COOKIES AND TRACKING ON MERCHANT PORTAL

The Merchant Portal uses cookies and similar tracking technologies. Please refer to our Cookie Policy at https://merchant.bizrato.com/cookie-policy for detailed information.

Essential cookies are used to:

• Maintain your login session securely
• Remember your Portal preferences
• Ensure Platform security

Analytics cookies (Google Analytics) help us improve the Merchant Portal experience. You can manage cookie preferences through your browser settings.

9. CHILDREN'S PRIVACY

The Merchant Platform is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected].

10. THIRD-PARTY LINKS

The Merchant Portal may contain links to third-party websites. This Privacy Policy applies only to our Platform. We are not responsible for the privacy practices of third-party websites. Please review the privacy policies of any third-party sites you visit.

11. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the Effective Date at the top of this Policy
• Post the updated Policy on the Merchant Portal
• Notify you via your registered mobile number for significant changes

Continued use of the Merchant Platform after changes constitutes acceptance of the updated Policy.

12. GRIEVANCE OFFICER

In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, we have appointed a Grievance Officer:

Grievance Officer: Manish Kumar Vij

Company: Bizrato Connecting Solution (OPC) Pvt Ltd
Email: [email protected]
Website: https://merchant.bizrato.com
Address: New Delhi, India

We will acknowledge your complaint within 48 hours and resolve it within 30 days.

13. CONTACT US

For any questions about this Privacy Policy or your data:

Bizrato Connecting Solution (OPC) Pvt Ltd

Registered Office: New Delhi, India
Email: [email protected]
Website: https://merchant.bizrato.com

We are committed to protecting your privacy and resolving all concerns promptly.