Data Protection & GDPR

Last updated: April 2026

Our Commitment

BizBharat Pro by WENSLink Private Limited is committed to protecting the personal data of all users, including those in the European Union. We comply with the General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act (DPDPA) 2023.

Data We Collect

• Account Data: Name, email, phone, GSTIN (provided during registration)
• Business Data: Invoices, inventory, financial records, bank statements (uploaded by user)
• Usage Data: Feature usage patterns
• Communication Data: When you share an invoice on WhatsApp, WhatsApp opens on your device and you send it from your own account; we only create the link to the invoice PDF.

How We Use Data

• Providing and improving our Business OS services
• Preparing GST return data for you to file
• Rule-based smart insights
• Communication via email and WhatsApp (opt-in only)

Data Storage & Security

• Server: Hetzner Cloud, Germany (EU-hosted)
• SSL/TLS: All domains secured with Let's Encrypt certificates
• Backups: Daily encrypted backups
• Access: Role-based access control (RBAC) with JWT authentication

Sub-processors

We share the minimum data necessary with the following service providers:

• Hetzner Online GmbH (Germany) - cloud hosting, storage of application data and backup storage
• Razorpay Software Private Limited (India) - payment processing for subscription billing
• Google LLC - Google Sign-In, only if you sign in with Google
• WhatsApp (Meta Platforms) - delivery of WhatsApp bot messages
• Browser push services - delivery of web push notifications you enable
• Email delivery provider (SMTP) - sends reports and notifications

This list is updated whenever our service providers change.

Your Rights

Under GDPR and DPDPA, you have the right to:

• Access: Request a copy of all your personal data
• Rectification: Correct any inaccurate data
• Erasure: Request deletion of your data ("Right to be Forgotten")
• Portability: Export your data in standard formats (CSV, JSON)
• Objection: Opt out of marketing communications at any time

Data Retention

We retain your data while your account is active. After your account is closed, we delete your business data within 90 days. We retain our own billing records for your subscription (invoices and payment records) for the period required by law: 72 months from the due date of the annual return under Section 36 of the CGST Act, 2017, and eight financial years under Section 128(5) of the Companies Act, 2013. To close your account, email support@bizbharatpro.com from your registered email address.

Contact Our Data Protection Officer

Email: support@bizbharatpro.com
Registered Office: WENSLink Private Limited, MAA Commercial Complex, Third Floor, NH-15, Bechimari, Dist. Darrang, Assam - 784514, India