Privacy Policy

1. Who we are

Bighelpers Software and Solutions Pvt Ltd is a private limited company incorporated in India. We operate the website bighelpers.in and the BusinessSetu Pro SaaS platform that allows Indian businesses to manage billing, customers, deliveries, and messaging.

For the purpose of the Digital Personal Data Protection Act, 2023, Bighelpers Software and Solutions Pvt Ltd is the Data Fiduciary for personal data of its direct customers (account holders) and acts as a Data Processor for personal data that those customers process about their own end customers through the platform.

2. What this policy covers

This policy explains how we collect, use, store, share and protect personal data when you:

• Visit bighelpers.in or any sub-path operated by us
• Sign up for or use a BusinessSetu Pro tenant account
• Send or receive messages through the WhatsApp Business interface that we host on your behalf
• Interact with us by email, phone, or in person

3. What information we collect

3.1 Information you give us

• Account: full name, business name, GST identification number, email, phone, billing address
• Payment instrument details processed by Razorpay (we do not store card or bank credentials ourselves)
• Identity and KYC documents you upload (PAN, Aadhaar masked, Certificate of Incorporation, bank statement) where required for activation of payments or courier modules
• Content you create inside the platform: invoices, customer records, product catalogues, message templates, support tickets

3.2 Information collected automatically

• Device and browser data: IP address, user agent, operating system, referrer URL
• Usage logs: pages viewed, features used, timestamps, error traces
• Session cookies necessary to keep you logged in

3.3 Information you upload about your end customers

If you use BusinessSetu Pro to bill or message your own customers, you may upload their names, phone numbers, email IDs, GSTINs, shipping addresses and order history. We act as a Data Processor for this information and process it only on your documented instructions.

4. How we use information

5. WhatsApp Business and Meta platforms

BusinessSetu Pro integrates with the WhatsApp Business Cloud API operated by Meta Platforms Ireland Limited. When you send messages through the platform:

• Message content and recipient phone numbers are transmitted to Meta in order for delivery to take place.
• Meta processes that data under its own WhatsApp Business Messaging Policy and Data Transfer Addendum.
• You, as the sending business, are responsible for collecting prior opt-in consent from each recipient before sending non-transactional messages.
• We retain message logs for the period stated in section 8 below and do not use message content for any purpose other than delivery, troubleshooting, and compliance.

We do not sell, share, or use WhatsApp message content for advertising. We do not train any machine learning model on customer message content.

6. Sub-processors and third parties

We rely on the following sub-processors to operate the platform:

Each sub-processor is bound by its own privacy and security commitments. We review them periodically.

7. When we share information

We do not sell personal data. We share it only:

• With the sub-processors listed above, strictly to perform the service
• With courts, regulators, or law-enforcement agencies when we receive a lawful order
• With professional advisors (auditors, lawyers) under confidentiality obligations
• In connection with a business reorganisation, merger, or sale, with notice to affected users

8. How long we keep information

You may request earlier deletion by following the process at /data-deletion, subject to the statutory retention periods above.

9. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Confirmation and access to the personal data we hold about you
• Correction, completion, and updating of inaccurate data
• Erasure of data that is no longer necessary, subject to statutory retention
• Grievance redressal through our Grievance Officer (see section 14)
• Nomination of another individual to exercise your rights in the event of your death or incapacity

Requests should be sent to admin@bighelpers.in. We respond within 30 days.

10. Security

We protect personal data with administrative, physical, and technical safeguards including TLS in transit, encryption at rest for sensitive fields, role-based access control, audit logging, and periodic vulnerability review. No method of transmission is 100 per cent secure, so we cannot guarantee absolute security.

11. Children

BusinessSetu Pro is intended for use by businesses and adults aged 18 or above. We do not knowingly collect personal data of children. If you believe a child has provided data to us, please contact us so we can delete it.

12. International transfers

Personal data is primarily stored in India. Some sub-processors, notably Meta, transfer data internationally as part of their normal operations. Such transfers are governed by the sub-processor's own contractual safeguards and applicable cross-border rules.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes we notify account holders by email at least 15 days before the change takes effect.