This Privacy Policy explains how Kumara Swamy Technologies ("we", "us", "our"), the operator of Bizfree (the "Service" — our website at biz.kstechx.com, our WhatsApp business tools, and our Android application), collects, uses, shares, and protects your information. By using Bizfree, you agree to the practices described here.
1. Who we are
Bizfree is a multi-tenant business platform that helps shops and businesses take orders over WhatsApp and the web, manage customers, and manage their team (including employee accounts, payroll, and attendance). The Service is owned and operated by:
- Kumara Swamy Technologies (Proprietor: Chinta Ravi Kumar)
- GSTIN: 37AYPPC2454H2ZB · Andhra Pradesh, India
- Contact: bizfree@kstechx.com
Depending on how you use Bizfree, we act as a data controller (for account holders / business owners who sign up with us) and as a data processor (for the customer and employee information that a business owner enters or manages through Bizfree). Each business owner is responsible for how they use their team's and customers' data within their own account.
2. Information we collect
a) Information you provide
- Account information: name, email address, mobile number, password (stored only as a secure salted hash), and business details (business name, GSTIN, address, UPI/payment ID, working hours).
- Business content: products/services, prices, images, coupons, storefront settings, and documents you upload.
- Team information (entered by a business owner): employee name, email, phone, job title, salary/wage, join date, permissions, profile photo, work logs, payroll records, and attendance.
- Customer information (entered by a business owner or captured through orders): customer name, mobile number, delivery address, and order history.
- Communications: messages exchanged through the WhatsApp business tools, and support requests you send us.
b) Information collected automatically
- Device & log data: IP address, browser/app version, device type, and timestamps of actions (for security, fraud prevention, and reliability).
- Usage data: features used and activity within the dashboard (for example, employee login and actions) to provide the Service and show activity to the business owner.
- Local storage: we use your browser's local storage (not third-party advertising cookies) to remember preferences such as your sidebar layout. We do not use tracking or advertising cookies.
c) Payment information
Subscription and top-up payments are processed by our payment partner (Cashfree). We do not collect or store your full card, UPI PIN, or bank credentials — these are handled directly by the payment provider. We receive only the payment status and limited details needed to activate your plan.
3. Attendance data — location & camera
Location. When an employee taps Check In or Check Out in the app, we request the device's location at that moment only, to record where the attendance was marked so the employer can verify it. We do not access location in the background, and we do not track your location continuously or when the app is not in use.
Camera & photos. We access the camera only when a user chooses to take an attendance photo (a self-photo captured at check-in/out as attendance proof) or when a business owner or employee uploads a profile, product, or document image. Photos are used only for the feature you invoked and are stored securely (see below). We do not perform facial-recognition matching or build biometric templates.
Providing location and camera access is optional and controlled by your device's permission settings; you can decline or revoke these permissions at any time in your device settings. Some attendance features may not work fully without them.
4. How we use information
- To provide, operate, and maintain the Service (orders, storefront, messaging, team & attendance management, payroll, documents).
- To authenticate users and secure accounts.
- To send transactional messages (order updates, verification and password-reset codes, receipts, and important notices) via email and WhatsApp.
- To process subscriptions and payments.
- To generate business documents you request (invoices, payslips, offer letters, ID/visiting cards).
- To display employee activity, work logs, and attendance to the relevant business owner.
- To prevent fraud and abuse, and to comply with legal obligations.
- To improve reliability and features.
We do not sell your personal information, and we do not use it for third-party advertising.
5. How we share information
We share information only as needed to run the Service, with trusted providers ("sub-processors") bound by confidentiality and data-protection obligations:
| Provider | Purpose |
|---|---|
| Railway | Application hosting & database infrastructure |
| Cloudinary | Secure storage of images (profile, product, attendance photos) |
| Meta Platforms (WhatsApp Cloud API) | Sending & receiving WhatsApp business messages |
| Cashfree Payments | Processing subscription & top-up payments |
| Resend | Sending transactional emails (verification, OTP, notices) |
| OpenStreetMap | Converting attendance GPS coordinates into a readable address (shown to the employer) |
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the public. If our business is transferred, information may be transferred as part of that transaction, subject to this policy.
6. Storage, transfers & retention
Your data is stored on secure cloud infrastructure and may be processed in data centres located outside your country. We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.
7. Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, access controls, and restricted internal access. No method of transmission or storage is 100% secure, but we work continuously to protect your information. Please keep your password confidential and notify us of any suspected unauthorised access.
8. Your rights & choices
Subject to applicable law (including India's Digital Personal Data Protection Act and, where relevant, the GDPR), you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data (see below).
- Withdraw consent for optional permissions (e.g., location, camera) via your device settings.
- Object to or restrict certain processing.
If you are an employee or customer whose data was entered by a business using Bizfree, please contact that business directly; we will assist them in fulfilling your request.
9. How to delete your data
You can request deletion of your account and associated personal data at any time by emailing bizfree@kstechx.com from your registered email address with the subject line "Delete my data". We will verify your identity and delete your personal data within 30 days, except where we must retain certain records to meet legal or accounting obligations. Business owners can also remove employees, customers, and content directly from within their dashboard.
10. Children's privacy
Bizfree is intended for use by businesses and adults (18+). It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of Bizfree after changes take effect constitutes acceptance of the updated policy.
12. Contact & Grievance Officer
For any questions, requests, or complaints about this policy or your data, contact our Grievance Officer:
- Grievance Officer: Chinta Ravi Kumar
- Kumara Swamy Technologies, Andhra Pradesh, India
- Email: bizfree@kstechx.com
We will acknowledge and address grievances in accordance with applicable law.