Privacy Policy

1. Data Controller — Business Information

2. Information We Collect

We may collect the following categories of information when you use our website or services:

3. How We Use Your Information

The information we collect is used exclusively for the following purposes:

• Providing, managing, and delivering the services you have requested
• Submitting documents and information to government portals, regulatory bodies, or third-party platforms on your behalf (with your explicit consent)
• Communicating with you regarding service status, requirements, updates, and support
• Processing payments and issuing invoices or receipts
• Sending service-related alerts, reminders (e.g., compliance due dates), or important notifications
• Improving our website performance, user experience, and service quality
• Complying with legal, regulatory, tax, or audit obligations
• Detecting, preventing, and addressing fraud, security threats, or misuse
• Conducting analytics to understand service usage patterns (aggregated, anonymized data only)

We do not use your personal information for unsolicited marketing or share it with advertisers.

4. Payment Information & Security

Payments on IndiaBizStation are processed through Razorpay Payment Solutions Pvt. Ltd. and other authorized payment gateways. Regarding payment data:

• IndiaBizStation does not collect, store, or process sensitive payment information such as debit/credit card numbers, CVV codes, UPI PINs, net banking passwords, or OTPs.
• All payment transactions are handled entirely by the respective payment gateway, which maintains PCI-DSS compliance and industry-standard encryption.
• We receive only payment confirmation, transaction reference numbers, and amounts for record-keeping and service initiation purposes.
• Payment gateway terms and privacy policies (Razorpay, etc.) govern the processing of your financial data during transactions.

5. Information Sharing & Disclosure

We do not sell, rent, trade, or share your personal information with third parties for commercial purposes. Your information may be shared only in the following limited circumstances:

• Service Providers: With our internal service providers, specialists, or partner professionals who assist in delivering the service you have requested. All such providers are bound by confidentiality obligations.
• Government Portals: With relevant government departments, regulatory authorities, or statutory bodies (e.g., MCA, GSTN, IT Dept, DGFT, UIDAI) — solely as required to complete the service you have engaged.
• Payment Gateways: With Razorpay or other payment processors — only the minimum information required to process your payment transaction.
• Legal Obligation: When required by law, court order, or lawful government authority to disclose information.
• Business Transfer: In the event of a merger, acquisition, or restructuring, your information may be transferred to the successor entity under equivalent privacy protections.

6. Data Security

We implement reasonable and appropriate administrative, technical, and organizational safeguards to protect your personal information against:

• Unauthorized access, use, or disclosure
• Accidental loss, alteration, or destruction
• Unlawful processing

However, no method of data transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that may affect your rights, we will notify affected users as required by applicable law.

7. Cookies, Analytics & Advertising Tracking

Our website uses cookies and tracking technologies to:

• Remember your preferences and session information
• Analyze traffic and user behavior (Google Analytics 4 — anonymized IP)
• Measure advertising performance (Meta Pixel + Meta Conversions API)
• Improve website performance and user experience

Meta Pixel & Conversions API (CAPI)

We use the Meta Pixel (browser-side) and the Meta Conversions API (server-side) to measure the effectiveness of our advertising on Facebook and Instagram. Both are deduplicated via a shared event ID to avoid double-counting.

• PII hashing: all personal data (email, phone, first/last name, external ID) is hashed using SHA-256 before transmission — Meta never receives raw values.
• Data minimization: we send only the minimum required fields — event name, timestamp, hashed user data, page URL (sanitized of sensitive params), IP, user agent, and Meta browser cookies (_fbp, _fbc).
• No form values: we never transmit form input values, session tokens, passwords, API keys, or similar sensitive data. Sensitive URL query parameters (token, key, otp, password, secret, session, auth) are stripped server-side.
• Admin / API pages excluded: URLs under /api/*, /admin/*, and /_next/* are never tracked.

Your consent & controls

• Consent banner: no tracking fires until you accept via the banner shown on your first visit.
• Do Not Track (DNT): if your browser sends the DNT signal, no tracking fires — irrespective of consent.
• Opt-out: visit /privacy/opt-out to opt-out at any time. Your choice is stored in a first-party cookie (ibs_optout) for 1 year.
• Withdraw consent: clear your browser cookies and site storage to reset the banner and revisit your choice.

Types of cookies: Essential (required for website function), Analytics (Google Analytics 4, anonymized), Advertising (Meta Pixel — set only after consent), and Preference cookies.

You may also manage or delete cookies through your browser settings. Disabling cookies may affect certain functionality.

8. Third-Party Links & Services

Our website may contain links to third-party websites, government portals, payment gateways, or social media platforms. IndiaBizStation is not responsible for the privacy practices, security, content, or policies of such external websites or services.

We encourage you to review the privacy policies of any third-party websites you visit through links on our platform.

9. Your Rights

Subject to applicable Indian laws, you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal information.
• Right to Deletion: Request deletion of your personal data where legally permissible and where no regulatory retention obligation exists.
• Right to Withdraw Consent: Withdraw consent to data processing at any time (note: this may affect our ability to provide services).
• Right to Grievance Redressal: Lodge a complaint with our designated contact (see Section 11) regarding privacy concerns.

To exercise any of the above rights, please contact us at hello@indiabizstation.com. We will respond within a reasonable timeframe.

10. Data Retention

We retain your personal information only for as long as necessary to:

• Fulfil the purposes for which it was collected
• Comply with applicable legal, regulatory, tax, or audit requirements (Indian tax laws typically require records for 7–8 years)
• Resolve disputes and enforce agreements

Once personal data is no longer required for any of the above purposes, it will be securely deleted or anonymized.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete such data.

12. Changes to This Privacy Policy

IndiaBizStation reserves the right to update, modify, or revise this Privacy Policy at any time. Changes will be published on this page with an updated effective date. Continued use of our website or services after such changes constitutes your acceptance of the revised policy.

13. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of the Republic of India. Any disputes arising out of this Policy shall be subject to the exclusive jurisdiction of the courts located in Rewa, Madhya Pradesh, India.