Privacy policy

Last updated: 18 September 2026

This policy explains how VISTAARSETU TECHNOLOGIES PRIVATE LIMITED ("Bizobook", "we", "us") collects, uses, shares and protects personal data when you use the Bizobook platform, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them.

1. Two roles we play

• For our own users — the businesses that sign up and the team members they invite — we decide how their data is used. For this data we are the data fiduciary.
• For our users' customers — the people parcels are delivered to — we process names, phone numbers and addresses on behalf of the business that booked the delivery. That business is the data fiduciary and we act as its data processor.

2. What we collect

From businesses and their team members

• Account details: name, email, phone number, password (stored hashed), role.
• Business and KYC details: legal name, billing address, state, GSTIN, PAN, and documents you upload for verification.
• Pickup locations, contact persons and booking preferences.
• Wallet and billing records: recharges, holds, charges, refunds and invoices. Online payments are processed by our payment partner; we do not see or store your card, UPI PIN or net-banking credentials — we receive only the payment status, amount, method and transaction reference.
• Usage and security data: log-in times, IP address and the approximate city derived from it, device/browser details, and actions taken in the app (for audit trails and team activity reports).

About deliveries

• Recipients' names, phone numbers, email (if provided), delivery addresses and map coordinates; package weight, value and description.
• Delivery events from Carriers: status updates, rider name, phone and vehicle number, proof of delivery, and rider location while a delivery is in progress.

3. Why we use it

• To create and run your account, verify your business (KYC) and keep the Platform secure.
• To get quotes from Carriers, book, track, cancel and support deliveries, and handle returns and claims.
• To keep your customer address book so repeat deliveries are quicker (visible only to your business).
• To manage your wallet, collect payments, issue GST invoices and meet tax and accounting obligations.
• To send service messages — booking and delivery updates, alerts, invoices — and, where you switch them on, delivery notifications to your customers by email or WhatsApp.
• To prevent fraud and misuse, fix errors, and improve the Platform using aggregated statistics.

We rely on your consent when you sign up and use the Platform, on performance of our agreement with you, and on legal obligations (for example tax and KYC records). We do not sell personal data and do not use your customers' data for our own marketing.

4. Who we share it with

• Carriers you book with — pickup and drop details needed to deliver the parcel.
• Payment gateway (PhonePe) — to process online wallet recharges.
• Mapping services (Google Maps) — to search addresses and place map pins.
• Messaging providers (email and WhatsApp Business) — to deliver notifications you have enabled.
• Infrastructure providers — cloud hosting, backups, and error-monitoring services that store or process data only to run the Platform for us.
• Authorities — when required by law, court order or to protect rights and safety.

Service providers may process data only on our instructions and under confidentiality and security obligations.

5. How long we keep it

Account and booking records are kept while your account is active and afterwards for as long as needed to resolve disputes and meet legal requirements — tax and accounting records for at least 8 years. Live rider-location data is kept only for a short period after a delivery completes. When data is no longer needed it is deleted or anonymised.

6. Security

We use encrypted connections (HTTPS), hashed passwords, encryption of stored credentials and payment-gateway secrets, role-based access control within each business, strict separation of each business's data, audit logs and regular backups. No system is perfectly secure; if a breach affecting your personal data occurs we will notify you and the authorities as required by law.

7. Your rights

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you and how it is used;
• correct, complete or update it;
• erase it, where we are not required to keep it;
• withdraw consent (this may mean we can no longer provide the service);
• nominate someone to exercise these rights on your behalf.

If you are the recipient of a delivery booked by one of our business users, please contact that business first — they control your data on the Platform; we will help them respond. You may also write to our Grievance Officer.

8. Cookies

We use only essential cookies — to keep you signed in, protect forms against forgery and remember interface preferences. We do not use advertising cookies.

9. Children

The Platform is meant for businesses and is not directed at anyone under 18. We do not knowingly collect children's data.

10. Changes

We may update this policy. The new version will be posted here with a new "Last updated" date; material changes will be notified to account owners.

11. Grievance officer and contact

Grievance Officer
VISTAARSETU TECHNOLOGIES PRIVATE LIMITED
B-wing-3, Fl-1410, Kumar Pebble Park, Survey Number 55, Sasanenagar, Pune, Maharashtra 411028
Email: admin@bizobook.com

We acknowledge complaints within 24 hours and aim to resolve them within 15 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.