Privacy Policy

BizNuma ("BizNuma", "we", "us", "our") operates websites, applications, and online services under biznuma.com and its subdomains (for example, www.biznuma.com, crm.biznuma.com, or hub.biznuma.com). This Privacy Policy applies to all such services. It explains what personal data we collect, how we use it, how long we keep it, and the choices available to you.

This policy is intended to help you understand how BizNuma handles personal data in connection with our WhatsApp CRM and related products for Indian businesses. It should be read together with our Terms of Service.

Where Indian law applies, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Rules notified under it, and with other applicable laws.

Depending on the context, BizNuma handles personal data in different ways:

• Your account and website data (name, email, business details, login credentials, billing information, and similar data) — we decide how this data is used to operate your BizNuma account, provide the platform, and support you.
• Your business data (customer contacts, WhatsApp conversations, quotations, pipeline records, lead data from integrations, and integration credentials) — you provide this data to use BizNuma. You remain responsible for ensuring you have a lawful basis to collect and use your customers' information. BizNuma processes this data on your instructions solely to deliver the features you use.

If you are a business using BizNuma, you are responsible for informing your own customers about how their data is handled, including data processed through WhatsApp or connected integrations, and for responding to their requests where the law requires it.

The data we collect depends on which BizNuma product or service you use. The following describes data commonly collected across our services:

Information you provide when signing up:

• Name, email address, and phone number
• Business name and type
• Password (stored as a one-way hash — we cannot read your password)

Information you provide when using our services (for example, when using our WhatsApp CRM product):

• WhatsApp Business number you connect to BizNuma
• Messages sent and received through your connected WhatsApp number
• Customer contacts and lead information you add or import
• Quotations, notes, pipeline data, and other CRM records
• Integration credentials or settings you provide (for example, IndiaMART, Razorpay, or similar services)

Information collected automatically:

• Browser type, device information, and IP address
• Pages visited and actions taken on the platform (including via cookies and analytics tools)
• Log data used for security, troubleshooting, and support

We use personal data to:

• Create, authenticate, and manage your BizNuma account
• Provide WhatsApp messaging, CRM, automation, quotations, pipeline, and related features you request
• Connect your account to third-party services you choose to enable
• Send service-related communications, such as account notices and support responses
• Maintain platform security, prevent abuse, and improve reliability and usability
• Comply with applicable legal obligations

We process personal data where it is needed to provide the services you request, where you have given consent (for example, for optional communications), for security and fraud prevention, to comply with law, or for other uses permitted by applicable law.

We do not sell your personal data to third parties. We do not use your business data to advertise to other businesses.

BizNuma relies on third-party services to deliver certain features. When you use these features, relevant data may be shared with or processed by the applicable provider under their own terms and privacy policies. These include, among others:

• Meta / WhatsApp Business API — for sending and receiving WhatsApp messages. See WhatsApp Privacy Policy.
• Razorpay — for payment link generation. BizNuma does not store card or bank details. See Razorpay Privacy Policy.
• IndiaMART, JustDial, TradeIndia — for lead data fetched via integrations you configure.
• Cloud and infrastructure providers — for hosting, storage, email delivery, and related platform operations.
• Google Analytics — for aggregated usage insights to help us improve the platform.

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies before enabling an integration.

BizNuma primarily serves businesses in India. Some service providers we use may process personal data outside India. Where personal data is processed outside India, we do so subject to applicable Indian law, including any restrictions or conditions notified by the Central Government.

BizNuma depends on external platforms and APIs — including Meta and the WhatsApp Business API — to deliver core messaging features. Other integrations such as lead sources and payment providers also operate independently of BizNuma.

From time to time, these third-party services may experience outages, maintenance windows, policy changes, rate limits, or other interruptions beyond our control. When that happens, related BizNuma features may be delayed, limited, or temporarily unavailable.

We work to keep the platform stable and will make reasonable efforts to restore affected features, but we cannot guarantee uninterrupted access to any feature that relies on a third-party service. BizNuma is not liable for loss or inconvenience arising from disruptions, changes, or discontinuation of third-party services.

We retain your account and business data for as long as your account remains active and as needed to provide the Service. If you close your account, or if you request erasure of personal data we hold about you, we will delete or anonymise it within a reasonable period, except where we must retain certain records by law (for example, billing or tax records) or where retention is needed for security, dispute resolution, or enforcement of our Terms.

Message history and other CRM records may be retained for varying periods depending on your plan, account settings, and operational needs. We may also retain limited backup copies for a short period after deletion for disaster recovery and security purposes. Those backups are isolated from normal use until they are overwritten or deleted in the ordinary course.

You may request deletion of your account and associated personal data by contacting us. See Section 11 for details.

We apply reasonable technical and organisational measures to protect personal data, including encrypted transmission (TLS/HTTPS), hashed passwords, access controls, logging, and periodic security reviews. Where we use service providers to process personal data on our behalf, we require appropriate security safeguards in our arrangements with them.

No method of transmission or storage is completely secure. If you believe your account has been accessed without authorisation, please contact us immediately at support@biznuma.com.

If a personal data breach occurs that is likely to affect you, we will take steps to contain it and, where required by applicable law, notify affected individuals and the relevant authority without undue delay, including information about what happened and recommended next steps where appropriate.

BizNuma uses cookies and similar technologies to keep you signed in, remember preferences, and understand how the platform is used. Analytics cookies help us improve the product. You can manage cookies through your browser settings; some features may not function correctly if essential cookies are disabled.

Subject to applicable law, you may have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data, where applicable
• Withdraw consent for optional communications or processing, where consent is the basis
• Nominate another individual to exercise your rights in the event of death or incapacity, as permitted by law

To exercise any of these rights, email us at support@biznuma.com. Please include enough detail for us to identify your account (for example, your registered email or business name). We will respond within a reasonable timeframe and in accordance with applicable law.

If you are not satisfied with our response, you may raise a grievance by contacting legal@biznuma.com. We aim to respond to privacy grievances within 30 days of receiving them. If you remain dissatisfied after our grievance process, you may escalate the matter to the Data Protection Board of India or another competent authority as permitted by law.

BizNuma is intended for use by businesses and individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered users by email. We encourage you to review this page periodically.

For privacy-related questions and data requests, contact us at: