Privacy Policy

Overview

These Terms of Service ("Terms") govern your use of Bizaxl mobile applications on Apple App Store and Google Play Store, including but not limited to:

• Bizaxl Tuition Suite (Staff, Owner, Parent, Student)
• Bizaxl Hospitality Suite (Staff, Owner, Manager)
• Bizaxl Insurance, Cafe, Legal Management
• Website at bizaxl.com

It also covers our website and web platform at bizaxl.com.

Bizaxl Optimisations LLP ("Bizaxl", "we", "us", "our") is owned by SERIA Applied Research Private Limited. SERIA does not access user data; Bizaxl operates independently.

This Privacy Policy explains how we collect, use, store, and protect your information. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. What Information We Collect

1.1 Information You Provide

We collect information you choose to give us:

• Email address (used as username to log into your Bizaxl instance)
• Password: NOT stored by Bizaxl. Your password is sent directly to your organization's Bizaxl backend for authentication via secure API. Bizaxl never receives, sees, or stores your password.
• Optional: profile photo, phone number (if your Bizaxl instance requests it)

1.2 Information the App Collects Automatically

When you use Bizaxl apps, we automatically collect:

• Device information: Device type, OS version, app version, unique device ID
• Crash reports: Error logs, stack traces, device state at time of crash (sent to Sentry)
• Location data (only for specific apps and only while you are using the feature):
  • Bizaxl HRMS: Precise location (GPS) for geofence-based check-in verification
  • Bizaxl Tuition: Approximate location (GPS) for finding nearby branches and route optimization
  • Other apps: Approximate location (IP-based) for region/country detection, currency display
• Push notification tokens: Identifier for sending you notifications (Firebase Cloud Messaging)
• App usage: Features you use, buttons you click, time spent in-app (aggregated, not tied to individual users)
• Session ID: Temporary identifier to keep you logged in securely

To be completely clear (this affects our App Store and Play Store privacy labels):

• We do not collect advertising identifiers (IDFA / Google Advertising ID)
• We do not enable cross-app tracking or tracking across other companies' websites
• We do not request access to contacts, camera, or microphone
• We do not collect biometric data. If you unlock the app with Face ID/Touch ID/fingerprint, verification happens only on your device; we receive only a yes/no result
• We do not collect health data, browsing history, or third-party message content
• We do not engage in behavioral profiling or create advertising profiles. Users will never see targeted ads based on Bizaxl data

1.3 From Your Organization's Bizaxl Instance

We receive data only that your Bizaxl instance sends to the mobile app when you log in via our secure API. This includes your user profile, account settings, and permissions. Your Bizaxl instance remains the authoritative source of all your data.

2. App Permissions & Features by App

Each app below lists which permissions it requests and why. All permissions are optional—declining one disables only that feature.

Tuition Suite

Bizaxl Tuition Staff

Notifications
Purpose: Alerts for student attendance, grades, schedule changes
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Download and save reports, attendance sheets, grade books
If You Decline: View in app only

Bizaxl Tuition Owner

Notifications
Purpose: School-wide alerts, admin notifications
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Export reports, school data, analytics
If You Decline: View in app only

Bizaxl Tuition Parent

Notifications
Purpose: Child's grade updates, attendance alerts, fee reminders
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Save child's report cards, fee receipts
If You Decline: View in app only

Bizaxl Tuition Student ⚠️ Used by students including minors

Notifications
Purpose: School announcements, grade updates, schedule changes
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Save your report card and school documents
If You Decline: View in app only

Hospitality Suite

Bizaxl Hospitality Staff

Notifications
Purpose: Guest check-in alerts, shift updates, task notifications
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Download shift schedules, guest lists, operational reports
If You Decline: View in app only

Bizaxl Hospitality Owner

Notifications
Purpose: Business alerts, occupancy updates, financial notifications
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Export reports, analytics, financial data
If You Decline: View in app only

Bizaxl Hospitality Manager

Notifications
Purpose: Shift alerts, guest issues, daily updates
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Download shift schedules and daily reports
If You Decline: View in app only

Other Business Tools

Bizaxl Insurance, Bizaxl Cafe, Bizaxl Legal Management

Notifications
Purpose: Business alerts, updates, reminders
If You Decline: You miss in-app notifications

Storage / File Access
Purpose: Download and save reports and documents
If You Decline: View in app only

3. How We Use Your Information

Provide the app and its features
Purpose: Email, device ID, permissions, app settings, location (if enabled)
If You Decline: Performance of contract

Send notifications (reminders, alerts, updates)
Purpose: Email, push notification token, user preferences
If You Decline: Your consent

Diagnose and fix app crashes
Purpose: Crash reports, error logs, device ID, session ID
If You Decline: Legitimate interest (app stability)

Data synchronization
Purpose: Keep your app in sync with your Bizaxl instance via secure API calls
If You Decline: Performance of contract

Comply with legal obligations
Purpose: Account data, transaction history, audit logs
If You Decline: Legal obligation

Respond to user requests
Purpose: Contact information, account details
If You Decline: Legal obligation (DPDP Act)

4. Third-Party Service Providers

We work with the following partners who process your data on our behalf:

Sentry
Purpose: Crash reports, error logs, device ID, session ID
If You Decline: Diagnose and fix app crashes

Firebase Cloud Messaging (Google)
Purpose: Firebase token (only if you enable push notifications)
If You Decline: Send push notifications (reminders, alerts)

Payment Partners (Razorpay, Stripe)
Purpose: Billing name, address, invoice amounts
If You Decline: Process payments securely

SMS/Email Delivery (Twilio, SendGrid, etc.)
Purpose: User email address
If You Decline: Send transactional messages (reminders, confirmations)

Cloud Storage (AWS S3)
Purpose: Encrypted backup data
If You Decline: Secure backup and disaster recovery

CDN (Cloudflare, etc. if applicable)
Purpose: IP address, request metadata
If You Decline: Deliver app assets faster, DDoS protection

Important: All sub-processors are contractually required to handle your data securely and only for the purposes we specify. We do not allow them to use your data for their own purposes.

5. Your Data Protection Rights

5.1 Right to Access

You have the right to request a copy of all personal data we hold about you. Email privacy@bizaxl.com with "Data Access Request" in the subject line. We will provide your data within 30 days.

5.2 Right to Deletion ("Right to Be Forgotten")

You can request deletion of your account and personal data. Email privacy@bizaxl.com with "Data Deletion Request". We will delete your data and notify you within 30 days. Some data may be retained for legal/tax compliance (up to 8 years per Indian law).

5.3 Right to Correction

If your information is inaccurate or incomplete, you can update it in-app or request correction from privacy@bizaxl.com. We will correct it within 15 days.

5.4 Right to Data Portability

You can request your data in a portable, machine-readable format (CSV, JSON). Email privacy@bizaxl.com with "Data Portability Request". We will provide your data within 30 days.

5.5 Right to Withdraw Consent

You can withdraw consent for notification pushes, location access, or other optional features anytime. Withdraw via app settings or email privacy@bizaxl.com. Withdrawal does not undo prior processing.

5.6 Right to Lodge a Complaint

If you believe Bizaxl has violated your privacy rights under the DPDP Act, you can lodge a complaint with the Data Protection Board of India. First, contact our Grievance Officer: grievance@bizaxl.com (Bizaxl's target: 48-hour acknowledgment).

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit: All data sent to Bizaxl is encrypted using TLS 1.2+
• Encryption at rest: Data stored in our systems is encrypted
• Access controls: Only authorized staff can access production data
• Regular security audits: We conduct periodic security reviews and penetration testing
• Data backups: Regular encrypted backups stored in secure locations
• Incident response: Documented procedures for responding to data breaches

Password Security: Your password is NOT stored by Bizaxl. It is sent directly to your organization's Bizaxl backend via secure API for authentication only. Bizaxl has no way to recover your password.

Note: While we implement strong security, no system is 100% secure. We cannot guarantee absolute security against all threats.

7. Where Your Data is Stored

Primary Storage:

• Bizaxl is an Indian company. User data is primarily stored on secured infrastructure within India
• Your organization's Bizaxl instance is hosted and managed by your organization

Cross-Border Transfers:

• When you use Bizaxl apps, data is processed in India
• Some third-party services (Apple, Google for push notifications; Sentry for crash reporting) operate globally and may process limited data outside India
• All such transfers are made under contractual data protection commitments and only to destinations not restricted under India's Digital Personal Data Protection Act, 2023
• Details available on request at privacy@bizaxl.com

8. How Long We Keep Your Data

User account info
Purpose: Life of subscription + 60 days after cancellation
If You Decline: Service provision, data export, recovery

Crash reports (Sentry)
Purpose: 90 days
If You Decline: Bug diagnosis and app stability

Location data
Purpose: Not stored; used in real-time only
If You Decline: Only for immediate geofence/map verification

Push notification tokens
Purpose: Until app is uninstalled or token refreshed
If You Decline: Notification delivery

Tax/financial records
Purpose: Up to 8 years
If You Decline: Indian tax law requirement (Section 44AA, Income Tax Act)

Legal hold data
Purpose: As required by law
If You Decline: Compliance with court orders or legal proceedings

After Subscription Cancellation:

• Your data is retained for 60 days to allow export or recovery
• After 60 days, data is deleted from production systems
• Encrypted backups purged within 30 days of standard backup retention
• You can request immediate deletion by emailing privacy@bizaxl.com
• Tax records retained per Indian law (up to 8 years)

9. Children's Privacy & Student Data

9.1 Most Apps Are Not Directed to Children

Most Bizaxl apps are business tools designed for adults: Business owners and managers, Teachers and school administrators, Parents and guardians (adults, 18+), Hotel/hospitality staff and owners, Insurance agents and legal professionals.

Exception: Bizaxl Tuition Student - The Bizaxl Tuition Student app is used by students including minors (under 18). See Section 9.4 below.

9.2 Bizaxl Tuition Suite (4 Apps for Different Roles)

Some Bizaxl customers are schools, tuition centers, and coaching centers.

9.3 How Student Data Is Managed (Tuition Staff, Owner, Parent Apps)

IMPORTANT: The institution (school/center) is responsible for student data compliance, not Bizaxl.

How it works:

1. A school administrator (adult, 18+) creates accounts for staff (teachers), parents (linked to their child), and students (if using Tuition Student app)
2. School/teachers enter student data—students in Staff/Owner/Parent apps do NOT create their own accounts
3. In Tuition Staff/Owner/Parent: Students are not users; their data is managed by adults
4. In Tuition Student: Students (including minors) directly log in with admin-created accounts

Legal responsibility:

• School = Data Fiduciary (under DPDP Act 2023): Responsible for collecting data, obtaining parental consent, ensuring compliance
• Bizaxl = Data Processor: Stores and secures the data per the school's instructions

Under India's Digital Personal Data Protection Act, 2023:

• Schools MUST obtain verifiable consent from a parent or lawful guardian before entering a child's personal data into Bizaxl Tuition
• Schools must inform parents what data is collected and how it will be used
• Schools must allow parents/guardians to request access, correction, or deletion of child's data
• Bizaxl supports schools in responding to parent requests

What Bizaxl Guarantees:

• Student data is encrypted and stored securely
• Student data is NOT shared with third parties (remains within the school's Bizaxl instance only)
• Student data is NOT used for advertising, profiling, or behavioral tracking
• Student data is retained only during the school's active subscription
• Student data is deleted or exported within 60 days of subscription termination (unless school requests longer retention for legal/tax reasons)
• Parent/guardian deletion requests (submitted via the school or via Tuition Student app) are processed within 30 days

9.4 Tuition Student App (Children's App for Student Users)

THIS APP IS USED BY STUDENTS INCLUDING MINORS UNDER 18.

Who uses Tuition Student:

• Students in schools and educational institutions
• Ages: mix of minors (under 18) and older students (18+)
• Student accounts created by school administrator (not by the student)

What students see in Tuition Student:

• Their own attendance and absences
• Their grades and academic performance
• Their class schedule
• Fee status and payment reminders
• School announcements
• NOT other students' data—student cannot see classmates' records

Parental Consent & Compliance:

Before a school admin creates a student account in Tuition Student for a minor:

1. Parental/guardian consent is REQUIRED (school obtains this per DPDP Act 2023)
2. School must explain: What data the student can access (their own records only), Why the school collects student data, How long data is retained, Student's and parent's rights (access, deletion)
3. School must use Bizaxl School Compliance Guide to ensure compliance

Data in Tuition Student:

• Student email (for login)
• Student name
• Student class/section
• Attendance records (student's own)
• Grades and marks (student's own)
• Schedule information (student's own)
• Fee status (student's own)

What Student CANNOT see:

• Administrative controls
• School settings
• Other students' data
• Teacher's private notes

Student's Privacy Rights:

• Student can request access to their own data
• Parent/guardian can request deletion of student's account and data
• Upon deletion, Bizaxl removes data from backups within 30 days
• For deletion: School admin removes the account, or parent requests via app

Bizaxl's Commitment to Student Privacy:

• NO advertising SDKs, NO tracking IDs, NO behavioral profiling
• NO third-party data sharing
• NO social media integration or tracking
• Crash reporting (Sentry) only—no analytics tracking students
• Student data encrypted at rest and in transit
• NO student data used to train AI models
• Student passwords NEVER stored by Bizaxl—sent directly to school's Bizaxl instance

App Store Compliance:

• Google Play: Marked as "children's app" / Education category
• Apple App Store: Marked as "involves children" / Education category
• Privacy Label: Shows student can view own records; no third-party sharing

9.5 If a Parent/Guardian Requests Access to a Child's Data

For Tuition Staff/Owner/Parent (school admin manages data):

1. Parent contacts the school directly
2. School downloads/provides the data to the parent
3. If needed, school contacts Bizaxl: privacy@bizaxl.com
4. Bizaxl provides data export assistance within 15 days

For Tuition Student (student directly uses app):

1. Parent/student can request via the Tuition Student app itself
2. OR parent contacts school, school requests from Bizaxl
3. Student can also request directly within Tuition Student
4. Bizaxl provides data within 30 days

9.6 If a Parent/Guardian Requests Deletion of a Child's Data

For Tuition Staff/Owner/Parent:

1. Parent contacts school
2. School removes student record from Bizaxl Tuition
3. Bizaxl automatically removes from backups within 30 days
4. School confirms deletion to parent

For Tuition Student:

1. Parent/student contacts school OR requests deletion in app
2. School admin removes student account from Tuition Student
3. Student data deleted from Bizaxl within 30 days
4. Confirmation sent to school and parent

9.7 Student Users Who Are Adults (18+)

Some Bizaxl Tuition customers are colleges, universities, and professional skill centers. If students are 18 or older: They are treated as regular adult users, Standard privacy protections apply, They have full rights to access, correct, and delete their data, The entire privacy policy applies to them.

9.8 If Child Data Reaches Bizaxl Improperly

If personal data of a child reached Bizaxl without proper parent/guardian consent or entered improperly:

• Email immediately: privacy@bizaxl.com or grievance@bizaxl.com
• Provide: Child's name, school/organization, date of birth (if known)
• Bizaxl will:
  1. Acknowledge receipt within 24 hours
  2. Investigate who entered the data
  3. Work with the school to obtain proper consent OR delete the data
  4. Complete resolution within 30 days
• We will NOT penalize anyone who reports improper data handling

10. Your Organization's Bizaxl Instance

Your Bizaxl instance is hosted and managed by your organization. When you log in:

• The Bizaxl app communicates directly with your Bizaxl backend via our secure API
• Your organization's data and settings remain entirely within your Bizaxl instance
• Bizaxl serves as a mobile client interface to your Bizaxl instance; we do not see or store the data you enter

11. Links to Other Services

The Bizaxl apps and website may link to or integrate with services we do not control:

• Bizaxl backend (your organization's instance)
• Google, Apple, Razorpay, Stripe, etc.

Their privacy policies govern their data. Bizaxl is not responsible for third-party practices. Please review their policies before providing data.

12. Changes to This Policy

We update this policy when our apps, features, or laws change. The current version is always at: bizaxl.com/policies/privacy-policy

Material changes will be notified via email. Continued use after notice means you accept the new policy.

13. Compliance with Indian Law

Digital Personal Data Protection Act, 2023

Bizaxl complies with India's DPDP Act, 2023. You have rights to:

• Access your personal data
• Delete your personal data (subject to legal holds)
• Correct inaccurate data
• Port your data
• File complaints with Data Protection Board of India

For details, contact privacy@bizaxl.com or grievance@bizaxl.com

14. Contact & Grievances

For Privacy Inquiries:
Email: privacy@bizaxl.com
Response time: 7 business days

For Grievances (DPDP Act):
Email: grievance@bizaxl.com
Response time: 48 hours acknowledgment, 30 days resolution

Support & Sales:
Email: support@bizaxl.com
Phone: 9886711156

Mailing Address:
Bizaxl Optimisations LLP
No: 302, 1st Floor, 2nd A Main, 3rd A Cross
Kasturinagar, East of NGEF
Bangalore 560043, Karnataka, India

Last Updated: September 2, 2026
Version: 1.0
Effective Date: September 2, 2026

For questions about this Privacy Policy, contact: privacy@bizaxl.com