Privacy policy

• Account data: name, business name, mobile number, email, password hash, and (for sellers) PAN, GSTIN, bank account details and authorised signatory information.
• Delivery data: pincode, full address, contact person and phone for each shipment.
• Transaction data: orders, invoices, payments, payout history, disputes and refunds.
• Usage data: pages viewed, searches, products compared and devices used — to operate and improve the Platform.

• To run the marketplace — listings, comparisons, orders, invoices, shipments.
• To verify sellers and comply with GST, IT and consumer-protection laws.
• To provide customer support and resolve disputes.
• To detect and prevent fraud, abuse or policy violations.
• With your consent, to send relevant offers and product updates.

We do not sell your personal data. We share only what is necessary with: payment gateways (Razorpay), logistics providers (Shiprocket and seller-managed couriers), tax authorities when legally required, and our cloud infrastructure providers under standard data-processing agreements.

Transaction records are retained for 8 years to meet GST and audit requirements. Account data is retained while your account is active and for 18 months after closure unless a longer period is required by law.

• Access, correct or update your account data from your profile.
• Request a copy of your personal data in machine-readable form.
• Request deletion of data we are not required to retain by law.
• Withdraw marketing consent at any time.

To exercise these rights, write to privacy@bforbusiness.in.

Data is encrypted in transit (TLS 1.2+) and at rest. Passwords are stored only as Argon2 hashes. Card details are never stored on our servers — Razorpay tokenises them. Production access is restricted and audit-logged.

Material changes will be announced by email and an in-app banner at least 14 days before they take effect.