Privacy Policy

1. Who we are

Bighelpers Software and Solutions Pvt Ltd is a private limited company incorporated in India. We operate the website bighelpers.in and the BusinessSetu Pro SaaS platform that allows Indian businesses to manage billing, customers, deliveries, and messaging.

For the purpose of the Digital Personal Data Protection Act, 2023, Bighelpers Software and Solutions Pvt Ltd is the Data Fiduciary for personal data of its direct customers (account holders) and acts as a Data Processor for personal data that those customers process about their own end customers through the platform.

2. What this policy covers

This policy covers the bighelpers.in website (forms, payments, chat, downloads, app waitlist) and the BusinessSetu Pro platform. It explains how we collect, use, store, share and protect personal data when you:

• Visit bighelpers.in or any sub-path operated by us
• Fill a form, make a payment, chat with us, download a file, or join an app waitlist on bighelpers.in
• Sign up for or use a BusinessSetu Pro tenant account
• Send or receive messages through the WhatsApp Business interface that we host on behalf of BusinessSetu Pro users
• Interact with us by email, phone, WhatsApp, or in person

3. What information we collect

3.1 When you use the bighelpers.in website

• Contact, RFP and lead-magnet forms: your name, email, phone, message, and the page you came from. Your submission is emailed to our team. It is never published.
• Payments at /pay/ and /donate/: your name, email, phone, the GSTIN you type, and the amount. Payments are processed by Razorpay. Razorpay handles card and UPI details; we do not store them. Refunds follow our Refund and Cancellation Policy.
• Live chat: the name, email or phone you give us, the chat transcript, and any rating you leave. We verify your phone number with a one-time password sent by SMS through our SMS provider.
• App waitlist at /apps/: your email address and the apps you select. See the separate waitlist notice at /apps/privacy/.
• Feedback forms: what you tell us, and your email if you choose to share it.
• APK download at /app/: no account, no personal data. The app itself belongs to righttoinformation.wiki, which has its own privacy policy.

3.2 When you use BusinessSetu Pro

• Account: full name, business name, GST identification number, email, phone, billing address
• Payment instrument details processed by Razorpay (we do not store card or bank credentials ourselves)
• Identity and KYC documents you upload (PAN, Aadhaar masked, Certificate of Incorporation, bank statement) where required for activation of payments or courier modules
• Content you create inside the platform: invoices, customer records, product catalogues, message templates, support tickets

3.3 Information collected automatically

• Device and browser data: IP address, user agent, operating system, referrer URL
• Usage logs: pages viewed, features used, timestamps, error traces
• Session cookies necessary to keep you logged in
• A cookie banner choice, your language and display preferences, and a one-time country lookup (see our Cookie and Tracking Notice at /cookie-policy)
• Analytics tools (Google Analytics 4, PostHog) are loaded only if activated, and only after you consent

3.4 Information you upload about your end customers

If you use BusinessSetu Pro to bill or message your own customers, you may upload their names, phone numbers, email IDs, GSTINs, shipping addresses and order history. We act as a Data Processor for this information and process it only on your documented instructions.

4. How we use information

5. WhatsApp Business and Meta platforms

BusinessSetu Pro integrates with the WhatsApp Business Cloud API operated by Meta Platforms Ireland Limited. When you send messages through the platform:

• Message content and recipient phone numbers are transmitted to Meta in order for delivery to take place.
• Meta processes that data under its own WhatsApp Business Messaging Policy and Data Transfer Addendum.
• You, as the sending business, are responsible for collecting prior opt-in consent from each recipient before sending non-transactional messages.
• We retain message logs for the period stated in section 8 below and do not use message content for any purpose other than delivery, troubleshooting, and compliance.

We do not sell, share, or use WhatsApp message content for advertising. We do not train any machine learning model on customer message content.

6. Sub-processors and third parties

We rely on these sub-processors to run the website and the platform:

Each sub-processor is bound by its own privacy and security commitments. We review them periodically.

7. When we share information

We do not sell personal data. We share it only:

• With the sub-processors listed above, strictly to perform the service
• With courts, regulators, or law-enforcement agencies when we receive a lawful order
• With professional advisors (auditors, lawyers) under confidentiality obligations
• In connection with a business reorganisation, merger, or sale, with notice to affected users

8. How long we keep information

You may request earlier deletion by following the process at /data-deletion, subject to the statutory retention periods above.

9. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Confirmation and access to the personal data we hold about you
• Correction, completion, and updating of inaccurate data
• Erasure of data that is no longer necessary, subject to statutory retention
• Grievance redressal through our Grievance Officer (see section 15, or our grievance page)
• Nomination of another individual to exercise your rights in the event of your death or incapacity

Requests should be sent to admin@bighelpers.in. We respond within 30 days.

10. Withdrawing consent

Some processing rests on your consent. This includes live chat, marketing messages, lead-magnet emails, and the app waitlist. You can withdraw your consent at any time:

• Reply STOP to a message, or
• Email admin@bighelpers.in

Withdrawing consent stops future messages. It does not affect processing already carried out under a contract with you or under a legal obligation.

11. Security

We protect personal data with administrative, physical, and technical safeguards including TLS in transit, encryption at rest for sensitive fields, role-based access control, audit logging, and periodic vulnerability review. No method of transmission is 100 per cent secure, so we cannot guarantee absolute security.

12. Children

bighelpers.in, our apps' waitlists and Big Helpers services are intended for users 18 and over. They are not directed at children. We do not knowingly collect personal data from children. We do not track children or target them with advertising.

If we learn that a person under 18 has given us personal data, we delete it. Where the law requires it, we seek verifiable parental consent instead. Parents and guardians can write to our Grievance Officer (details in section 15), and we act within 30 days.

13. International transfers

Personal data is primarily stored in India. Some sub-processors, notably Meta, transfer data internationally as part of their normal operations. Such transfers are governed by the sub-processor's own contractual safeguards and applicable cross-border rules.

14. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes we notify account holders by email at least 15 days before the change takes effect.