Privacy Policy

Everyone: name, email, phone (optional), role, sign-in and device metadata, in-app messages, notifications, consent records and an audit trail of significant actions.

Experts additionally: firm, city, professional history and résumé, business card image (optional), LinkedIn URL, the last four characters of your PAN for identity verification, rates, availability, skills and self-described expertise, and public-web research results you ask us to run about you. Earnings recorded through the platform.

Clients additionally: the needs you declare (which may describe your business situation), engagement terms and reviews.

Billing: the legal name, GSTIN and billing address you provide for tax invoices, and payment references from Razorpay. We never see or store full card or bank details.

Communities: your membership, posts, comments, chat messages, event RSVPs and any files you attach.

• Matching Clients to Experts: we build an anonymised profile from your expertise data and use it in retrieval and ranking. Identity is held separately (see section 4) and released only on a Client's connect.
• Verification of Experts, including human review of KYC signals, résumé consistency checks and interviews for community admins.
• Operating engagements: NDA acknowledgements, chat, delivery, reviews and dispute handling.
• Payments, invoicing and tax compliance, including issuing GST invoices and retaining them as law requires.
• Communities: showing your display name and contributions to other members.
• Notifications about matches, messages, decisions and billing, in-app and by email.
• Security, fraud prevention and audit, and improving the service using aggregated statistics.

Each purpose above is either something you specifically consented to (recorded with a text version and timestamp) or necessary to provide the service you signed up for.

With your specific consent, we send your résumé, business card image or name-and-firm to an AI processor (Anthropic, and Voyage AI for embeddings) to pre-fill your profile and to compute similarity for matching. Results are advisory: every Expert is approved by a person, and no decision with legal effect on you is made solely by automated means. You can decline these features and enter information manually; matching quality may be lower without embeddings.

Identity data (name, contact details, PAN digits, résumé) is stored in a separate, access-restricted identity vault. The matching system runs with a database role that has no access to that vault and works only on anonymised attributes. An identity is copied into a Client's view only when that Client executes a connect, and the event is logged in an append-only audit trail.

• Other users: as described above, and only to the extent needed for a match, an engagement or a community.
• Processors under contract: Supabase (database, authentication and file storage), Render (hosting), Razorpay (payments), Anthropic and Voyage AI (AI processing you consent to), and our email delivery provider. Some processors operate outside India; we rely on their contractual safeguards, and the Central Government has not restricted transfers to those countries at the time of writing.
• Authorities where required by law or a valid order, and professional advisers under confidentiality.
• We do not sell personal data or use it for third-party advertising.

• Account and profile data: for as long as your account is active, then deleted or anonymised within 90 days of closure.
• Résumés and business-card images: deleted 90 days after verification is complete or on request, whichever is earlier, unless a dispute requires them.
• Invoices, payment records and the consent and audit logs: 8 years, as required by GST and company law.
• Chat and community content: for the life of the engagement or community plus 12 months, to support dispute handling.

• Access a summary of the personal data we hold and how it has been processed.
• Correction and erasure of inaccurate, incomplete or no-longer-necessary data.
• Withdraw consent at any time for AI processing, web research, community membership or the account itself. Withdrawal does not affect processing already done, and some services cannot operate without the data.
• Grievance redressal through the officer below, and if unresolved, a complaint to the Data Protection Board of India.
• Nominate a person to exercise these rights on your behalf in case of death or incapacity.

Most of these can be done from Account settings; otherwise email us. We respond within 30 days.

Data is encrypted in transit and at rest, access is role-based and logged, uploaded files are stored in private buckets and served only to authorised users, and payment signatures are verified server-side. No system is perfectly secure; if a breach affects you we will notify you and the Data Protection Board as the DPDP Act requires.

We use browser local storage for your sign-in token and interface preferences (such as theme). We do not use advertising or cross-site tracking cookies.

BizStreet is a business service and is not directed at anyone under 18. We do not knowingly collect children's data; if you believe we have, contact us and we will delete it.

Grievance Officer: CA Rishabh Kumar S, Founder, Pluto Corporate Services Private Limited, B-56, Oakwood Estate, DLF Phase-2, Gurugram, Haryana 122002, India. Email: contact@bizstreet.biz, which also takes general privacy questions.

We may update this policy; the version and effective date at the top change when we do, and you will be asked to re-accept material changes.