Privacy Policy

Last updated: 26 October 2026

This Privacy Policy explains how Business Solutions Ecosystem (GSTIN 03AAWFP9900G1ZY), having its office at 2454/13, Lane No. 5, Daya Complex, 2nd Floor, Sharifpura, Amritsar, Punjab 143001, India ("we", "us", "our"), collects, uses, stores, shares and protects personal data when you use BSE Business — the website bsebusiness.com, the BSE Business web application, the BSE Business Android application and related services (together, the "Service"). Please read it together with our Terms and Conditions.

This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and the rules made under it (together, "applicable law"). We are the Data Fiduciary for account and website data. We process the data of your contacts and audience on your instructions, as explained in section 5.

By registering for or using the Service, you consent to the processing described in this policy. You may withdraw your consent at any time (see section 11). Withdrawal does not affect processing done before it, and some features may stop working once consent is withdrawn.

1. Who this policy applies to

• Account holders: businesses (B2B and B2C), their owners and the team members they add.
• Contacts and recipients: people and businesses that an account holder adds to the Service or sends messages to, and members of BSE Business Groups and BSE Business Communities.
• Visitors: people who browse our website, view a public business catalogue, respond to our advertisements or contact us.

2. Personal data we collect

2.1 Data you give us

• Account data: name, company name, designation, mobile number, email address, city, state and business type.
• Business details: GSTIN or other business details you choose to add.
• Messages and content: marketing messages, templates (including those created from our specimen template library), requirements, offers, custom call-to-action buttons and links, one-to-one messages, group and community posts, and attachments.
• Contacts: contacts you import from Excel / CSV files, your phone contacts (only with your permission), email contacts sync or manual entry, contacts you find among existing BSE Business users, and the tags you give them.
• CRM data: responses and counter-offers you receive, lead statuses, notes, follow-up reminders and lead assignments to your team.
• Team data: details of team members you add, their roles and permissions, and their activity on leads.
• Business catalogue: your business profile (name, logo, address, contact details, description) and your products and services, including photos and prices you choose to add. Your catalogue is public through its catalogue link.
• Billing data: billing name, address and GSTIN needed to issue tax invoices.
• Support data: messages, call notes and screenshots you share with our support team.

2.2 Data collected automatically

• Device type, operating system, browser, IP address, approximate location derived from the IP address, app version, notification tokens, log and error data.
• Message activity: whether a message was delivered and opened, and which call-to-action buttons were clicked. This is used to show senders their reports (reach, clicks, leads and conversions).
• Membership activity: joining, leaving or muting groups and communities, approvals, mutes and blocks.
• Cookies, pixels and similar technologies, as explained in section 8.

2.3 Payment data

• Payments are processed by our payment gateway, Razorpay. Card, UPI, net-banking and wallet details are entered on Razorpay's secure pages and are not stored by us. We receive only the payment status, transaction reference, amount and the limited details needed for invoicing.

3. Why we use personal data

• to create and manage your account and verify your mobile number by one-time password (OTP);
• to deliver your messages, requirements and offers inside the Service, with notifications, to the recipients, groups and communities you choose — personalised with each recipient's name where you use that feature;
• to ask a recipient to approve the first message from a new sender, and to apply mutes and blocks;
• to save responses in your CRM, and to provide lead statuses, notes, reminders, team assignment and reports;
• to run BSE Business Groups and BSE Business Communities, including automatic RFQ sharing where you allow it and the visibility settings you choose;
• to publish your business catalogue at its public link and show it in your messages and buttons;
• to show contacts that are "not on app", so you can invite them;
• to process payments, issue tax invoices and credit notes, and manage the Free plan, Ad credits, Pro plans and offers;
• to provide customer support and service messages;
• to secure the Service, prevent spam, fraud and misuse, and enforce our Terms and Conditions;
• to measure and improve the Service and our advertising, using aggregated or de-identified data wherever possible; and
• to comply with legal obligations and lawful requests from government authorities.

4. Marketing communication from us

We may send you information about the Service, offers and new features by email, SMS, in-app message or phone. You can opt out at any time. Service and transaction messages (such as OTPs, payment confirmations and important account notices) will continue while you have an account.

5. Your contacts' and recipients' data

• The contacts, audience lists and CRM data you add belong to you. We process them only to provide the Service to you, on your instructions.
• You are responsible for having a lawful basis (including any consent required under applicable law) to add people to the Service and to message them, and for honouring their requests to stop.
• Recipients receive messages inside the Service. The first message from a new sender waits for the recipient's approval, and every recipient can mute or block a sender at any time.
• Contacts who are not users are shown to you as "not on app"; we contact them only if you choose to invite them.
• We do not sell your contact lists or your CRM data, and we do not share them with other users or third parties for their own marketing.

6. What other users can see

• Recipients see your business name and profile with your messages, and any personal details you include in them.
• Your business catalogue is public to anyone with its link, and may be shown in your messages and buttons.
• In BSE Business Groups, the group owner decides whether members can see the messages in the group.
• In BSE Business Communities, posts and broadcasts are visible to the community's members; the owner decides whether members can post. Public communities can be discovered by other users.
• Other users can find your business among existing BSE Business users by product, city and similar business details, so that they can add you as a contact.

7. Who we share personal data with

• cloud hosting, storage, backup and infrastructure providers;
• notification, SMS and email delivery providers used for OTPs, notifications and invitations;
• our payment gateway, Razorpay, and the banks and payment networks involved in your payment;
• analytics and advertising partners, including Meta Platforms (Meta Pixel), as described in section 8;
• our authorised staff and service partners who help us operate and support the Service, under confidentiality obligations;
• professional advisers such as auditors and lawyers; and
• courts, regulators, law-enforcement and government authorities, where required by law or to protect the rights, property or safety of our users, the public or us.

Our service providers may process personal data only on our instructions. If our business is merged, acquired or reorganised, personal data may be transferred to the successor entity, which will be bound by this policy. Any transfer of data outside India will be made only in compliance with applicable law.

8. Cookies, Meta Pixel and similar technologies

• Essential cookies keep you signed in and protect the Service against misuse.
• Measurement and advertising: our website uses the Meta Pixel provided by Meta Platforms to record page visits and actions such as starting a sign-up, together with device and browser information, so that we can measure our advertising and show relevant advertisements to people who have visited our website. Meta processes this data under its own privacy policy.
• You can block or delete cookies in your browser settings and manage advertising preferences in your social media account settings.

9. Security

We follow reasonable security practices appropriate to the nature of the data, including encryption of stored data, encrypted (HTTPS) connections, access controls, OTP-based verification and activity logging. No method of transmission or storage is completely secure. Please keep your login and OTPs confidential and tell us immediately if you suspect unauthorised access. In the event of a personal data breach, we will notify affected users and the Data Protection Board of India as required by applicable law.

10. How long we keep personal data

• We keep personal data while your account is active and as needed to provide the Service.
• You may delete your data or your account at any time. A deleted account is archived and can be restored within 30 days; after that it is permanently deleted or irreversibly anonymised within a further 30 days.
• Messages you sent may remain visible to recipients, group members and community members who already received them.
• Invoices and tax records are retained for the period required by law, even after an account is deleted.

11. Your rights

Subject to applicable law, you have the right to obtain a summary of the personal data we process about you; to correct, complete or update it; to erase it or delete your account (except where we must retain it by law); to withdraw consent; to nominate another person to exercise these rights in the event of death or incapacity; and to have your grievances redressed by our Grievance Officer and, if you are not satisfied, by the Data Protection Board of India. Recipients can also mute or block any sender inside the Service.

To exercise these rights, write to support@bsebusiness.com or to our Grievance Officer (section 14). We may need to verify your identity first.

12. Children

The Service is meant for businesses and for persons aged 18 years or above. We do not knowingly collect personal data of children.

13. Changes to this policy

We may update this policy. The updated policy will be posted here with a new "Last updated" date, and material changes will be notified within the Service or by email before they take effect.

14. Grievance Officer and contact

Name: Vishal Narang
Email: grievance@bseapps.io
Address: Business Solutions Ecosystem, 2454/13, Lane No. 5, Daya Complex, 2nd Floor, Sharifpura, Amritsar, Punjab 143001, India
Support: support@bsebusiness.com · +91-98146-27080 (365 days a year, 9:30 am – 6:45 pm IST)

We will acknowledge a grievance within 24 hours and resolve it within 15 days of receipt, or within any shorter period required by applicable law.