Legal
Privacy Policy
Effective date: 17 July 2026 · Last updated: 17 July 2026 · Version 2026-07-17.1
Bizmitra Notify ("Bizmitra Notify", "the Service", "we", "us" or "our") is a product of Drushtant Infoweb Pvt. Ltd., a company incorporated in India with its registered office at [[Registered office address]], Gondal, Gujarat, India (CIN: [[Company CIN — e.g. U72900GJ20XXPTCXXXXXX]]). This Privacy Policy explains how we collect, use, disclose, transfer, retain and protect personal data when you visit notify.bizmitra.io, create an account, or use our notification services.
This Policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR, and with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules made thereunder. Where terms differ, "personal data" also means "personal data" as defined under the DPDP Act, "data subject" also means "Data Principal", and "controller" also means "Data Fiduciary".
1. Who we are (Controller / Data Fiduciary)
Drushtant Infoweb Pvt. Ltd. is the controller / Data Fiduciary for personal data processed about visitors and account holders of Bizmitra Notify. For personal data of your end-recipients that you send messages to through the Service, you are the controller and we act as your processor / Data Processor — see our Data Processing Addendum.
- Company: Drushtant Infoweb Pvt. Ltd.
- Registered office: [[Registered office address]], Gondal, Gujarat, India — [[PIN code]]
- Privacy contact: privacy@bizmitra.io
- Grievance Officer (DPDP Act): [[Grievance Officer name]], grievance@bizmitra.io
- Data Protection Officer (GDPR, if appointed): [[Data Protection Officer name — if appointed]], dpo@bizmitra.io
- EU/UK representative (GDPR Art. 27, if applicable): [[EU representative name & address — if applicable under GDPR Art. 27]]
2. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Account & identity | Name, company name, work email, password (hashed), role | You, at registration |
| Contact & billing | Billing name, address, GSTIN/tax ID, payment reference | You / payment processor |
| Usage & technical | IP address, device/browser, log timestamps, pages viewed, API usage | Automatically |
| Message metadata | Sender ID, recipient identifiers you submit, channel, delivery status, timestamps | You, via the API/dashboard |
| Consent records | Which policy version you accepted, timestamp, IP and marketing choices | Automatically at registration |
| Support & communications | Messages you send us, survey responses | You |
| Cookies & similar | See our Cookie Policy | Your device (with consent) |
We do not intentionally collect special category / sensitive personal data. Please do not submit such data through the Service except as strictly necessary and permitted by law.
3. Why we process data and our legal basis
Under the GDPR we rely on the legal bases in Article 6; under the DPDP Act we rely on your consent or a legitimate use permitted by the Act.
| Purpose | GDPR legal basis | DPDP basis |
|---|---|---|
| Create & operate your account, provide the Service | Performance of a contract (Art. 6(1)(b)) | Consent / performance of contract |
| Billing, invoicing, tax and accounting | Legal obligation & contract (Art. 6(1)(b),(c)) | Legitimate use / legal obligation |
| Security, fraud prevention, abuse detection, rate-limiting | Legitimate interests (Art. 6(1)(f)) | Legitimate use |
| Service emails (transactional, security, service changes) | Contract / legitimate interests | Legitimate use |
| Product analytics & improvement | Consent or legitimate interests (Art. 6(1)(f)) | Consent |
| Marketing & promotions (incl. affiliated products) | Consent (Art. 6(1)(a)) | Consent |
| Complying with law & enforcing our terms | Legal obligation / legitimate interests | Legal obligation |
Where we rely on legitimate interests, we have balanced those interests against your rights. You may object at any time (see Section 8). Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
4. How we share data — Group & partner network declaration
Declaration: Bizmitra Notify is a product of Drushtant Infoweb Pvt. Ltd., Gondal, Gujarat, India. By using the Service and giving your consent, you acknowledge and agree that, subject to this Policy and applicable law, we may share your personal data within the Bizmitra / Drushtant Infoweb ecosystem — including Bizmitra ERP, Bizmitra CRM and other Bizmitra / Drushtant Infoweb products and services — and with our vetted partner network, for the purposes described below. Such sharing for marketing and cross-product personalisation is based on your consent, which you may withdraw at any time.
We may share personal data with:
- Affiliated Bizmitra / Drushtant Infoweb products (e.g. Bizmitra ERP, Bizmitra CRM and other Bizmitra / Drushtant Infoweb products and services) — to provide a connected experience across products, single sign-on, unified billing, cross-product support and, where you have consented, cross-product offers and personalisation.
- Partner network & resellers — authorised partners who help us deliver, sell or support the Service, bound by confidentiality and data-protection obligations.
- Sub-processors & service providers — hosting, cloud infrastructure, messaging carriers (email/SMS/WhatsApp/push gateways), payment processors, analytics and customer-support tools. See the current list in our Data Processing Addendum.
- Professional advisers & authorities — auditors, lawyers, insurers, and courts, regulators or law-enforcement where required by law or to protect rights and safety.
- Business transfers — in a merger, acquisition, financing or sale of assets, subject to this Policy.
We do not sell your personal data. We require all recipients to protect personal data and use it only for the purposes for which it was shared.
5. International data transfers
We are based in India and use service providers that may process data in India, the EEA, the UK, the United States and other countries. Where we transfer personal data out of the EEA/UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or transfer to countries with an adequacy decision. Under the DPDP Act, we may transfer personal data outside India except to any country restricted by the Central Government. A copy of the safeguards is available on request at privacy@bizmitra.io.
6. How long we keep data
We keep personal data only as long as necessary for the purposes above:
- Account data — for the life of your account and up to 90 days after closure (backups may persist for a limited additional period).
- Message metadata & delivery logs — typically retained for operational and audit purposes and then deleted or anonymised per your plan settings.
- Billing & tax records — retained for the period required by Indian tax and accounting law (generally up to 8 years).
- Consent & audit records — retained for as long as needed to demonstrate compliance.
7. Your rights
If you are in the EEA/UK (GDPR), you have the right to: access; rectification; erasure ("right to be forgotten"); restriction of processing; data portability; object to processing (including direct marketing); withdraw consent; and not be subject to solely automated decisions with legal or similarly significant effects. You also have the right to lodge a complaint with your supervisory authority.
If you are in India (DPDP Act), as a Data Principal you have the right to: access a summary of your personal data and processing; correction, completion, updating and erasure; grievance redressal; nominate another individual to exercise your rights in the event of death or incapacity; and withdraw consent.
To exercise any right, contact privacy@bizmitra.io or use our Data Rights & Grievance page. We will respond within the timeframes required by law. We may need to verify your identity first.
8. Marketing & your choices
We send marketing only where permitted — generally with your consent. You can opt out at any time via the "unsubscribe" link in our emails, your account settings, or by contacting us. Withdrawing marketing consent will not affect transactional/service messages necessary to operate your account.
9. Cookies & tracking
We use strictly necessary cookies to run the Service, and — only with your consent — functional, analytics and advertising cookies. Manage your choices any time via Cookie preferences. See the Cookie Policy for details.
10. Security
We implement appropriate technical and organisational measures — including encryption in transit (TLS), hashed passwords, access controls, network protection, logging and rate-limiting — to protect personal data. No method of transmission or storage is 100% secure. In the event of a personal-data breach we will notify the relevant supervisory authority, the Data Protection Board of India and affected individuals where required by law.
11. Children's data
The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data of children under 18 (India) or under the applicable age of digital consent (16 in the EU unless a member state sets a lower age). Under the DPDP Act, processing children's data requires verifiable parental consent and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
12. Automated processing
We use automated systems for fraud/abuse detection and rate-limiting. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing without a lawful basis and appropriate safeguards.
13. Changes to this Policy
We may update this Policy from time to time. When we make material changes we will update the "Last updated" date and, where required, notify you and/or seek fresh consent. The version identifier at the top records which version is current.
14. How to contact us & complain
For any privacy question or to exercise your rights, contact:
- Privacy: privacy@bizmitra.io
- Grievance Officer (India, DPDP Act): [[Grievance Officer name]] — grievance@bizmitra.io, [[+91-XXXXXXXXXX]]
- Post: Drushtant Infoweb Pvt. Ltd., [[Registered office address]], Gondal, Gujarat, India — [[PIN code]]
If you are in the EEA/UK and remain unsatisfied, you may complain to your local supervisory authority. In India, if your grievance is not resolved, you may approach the Data Protection Board of India.