Privacy Policy

This Privacy Policy explains how Bizbro360, operated by Mindaura Labs, collects, uses, stores, shares, and protects information when you use the Bizbro360 website, mobile applications, admin tools, APIs, support channels, and related services.

Bizbro360 is a multi-tenant business management platform for inventory, sales, billing, purchases, customers, suppliers, employees, reports, subscriptions, and support workflows. This policy applies to tenant owners, managers, employees, admins, website visitors, prospects, and support contacts.

Bizbro360 is provided by Mindaura Labs. For privacy requests, security concerns, account deletion, data access questions, app support, or product questions, contact contact@mindauralabs.com.

When a business creates a tenant workspace, that business controls the customer, supplier, employee, invoice, and operational records entered into the workspace. Bizbro360 processes that data to provide the service.

We collect information you provide directly, information generated by your use of the service, and limited information from trusted service providers used for authentication, payments, hosting, support, notifications, and analytics.

• Account and identity data such as name, email address, phone number, role, tenant, branch, preferred language, login method, and authentication status.
• Business workspace data such as company profile, GST/tax information, branches, users, products, stock, invoices, sales returns, customers, suppliers, purchases, job work, reports, settings, and uploaded files.
• Employee data such as profile details, role, department, permissions, targets, commissions, performance records, attendance-related records where enabled, and work-location sharing records.
• Billing and subscription data such as plan, billing cycle, payment status, order identifiers, invoice details, taxes, and payment gateway references.
• Support and communication data such as contact form submissions, chat conversations, support tickets, call notes, feedback, attachments, and diagnostic context needed to resolve issues.
• Technical data such as device type, app version, browser, IP address, approximate network location, crash logs, performance logs, security events, and usage diagnostics.

The Bizbro360 mobile app collects employee location data to enable Work Location Sharing with the tenant owner or manager. This feature is intended for workforce visibility and business operations when an employee chooses to start sharing and grants the required device permission.

Location may be collected in the background, including when the app is closed or not in use, only while Work Location Sharing is active. Employees can stop sharing at any time from the app and can revoke location permission from device settings.

• Location data may include latitude, longitude, accuracy, speed, mocked-location status, capture time, received time, session start time, session end time, start source, and stop reason.
• Authorized tenant owners and managers may view current employee location, active or stale status, and recent route history for up to 7 days.
• Active work-location sharing auto-stops after 12 hours. Location pings and ended location-sharing sessions older than 7 days are cleaned up daily.
• Bizbro360 does not sell location data and does not use location data for advertising.

• To create and secure accounts, authenticate users, manage tenants, and enforce role-based permissions.
• To provide billing, inventory, POS, purchase, employee, customer, supplier, GST/reporting, notification, and support features.
• To process subscriptions, payments, invoices, taxes, renewals, cancellations, and billing support.
• To send service messages, OTPs, alerts, reminders, account notices, product updates, and support responses.
• To monitor reliability, prevent fraud or abuse, troubleshoot errors, improve product quality, and protect tenant data.
• To comply with legal, regulatory, tax, accounting, security, dispute-resolution, and app-store requirements.

We use selected providers to operate Bizbro360. These providers process data only as needed for their service functions and under appropriate controls.

• Razorpay for subscription payments and payment status verification.
• Firebase and platform sign-in providers for authentication, push notifications, crash diagnostics, or related app services where enabled.
• AWS S3 or equivalent storage providers for images, attachments, documents, and uploaded files.
• 2Factor.in or similar SMS providers for OTP and transactional SMS delivery.
• SendGrid, SES, or similar email providers for account, billing, support, and notification emails.
• Hosting, database, cache, monitoring, analytics, and customer-support tools needed to operate and secure the service.

Tenant data is shared inside the tenant workspace with authorized users according to their roles and permissions. Tenant owners and admins are responsible for granting access only to appropriate users.

We may share information with service providers, professional advisers, authorities when legally required, or business successors in connection with a merger, acquisition, restructuring, or asset transfer. We do not sell personal information.

We use authentication, authorization, tenant-scoped access controls, encrypted network transport, security monitoring, backups, operational controls, and provider safeguards to protect data. No internet service can guarantee absolute security, but we work to reduce risk and respond to security events responsibly.

Users must keep credentials confidential, use secure devices, avoid sharing OTPs or passwords, and promptly report suspected unauthorized access.

We retain information for as long as needed to provide the service, maintain business records, comply with legal or tax obligations, resolve disputes, enforce agreements, and protect security. Tenant business records may remain until the tenant deletes them or requests deletion, subject to legal and operational retention needs.

Employee location history is retained for 7 days. Support records, audit logs, billing records, and fraud-prevention records may be retained for longer periods where required or reasonably necessary.

• You may update account, business, customer, supplier, employee, and settings data from the app where your role allows it.
• You may request access, correction, export, restriction, or deletion by contacting us with enough information to verify your account and tenant.
• Employees may stop Work Location Sharing at any time and revoke location permission from device settings.
• You may opt out of non-essential marketing communications, but service, security, billing, and account notices may still be sent.
• If you believe a tenant admin controls your data, we may direct your request to that tenant admin where appropriate.

Bizbro360 is intended for businesses and their authorized users. It is not directed to children. Tenant owners and admins must ensure that only authorized business users are invited to their workspace.

Service providers and infrastructure may process information in India or other countries where they operate. Where information is transferred, we rely on provider controls, contractual commitments, and applicable legal safeguards.

We may update this Privacy Policy as Bizbro360 evolves or legal requirements change. Material updates will be reflected by changing the last-updated date and, where appropriate, by additional notice in the app, website, or email.