Privacy policy

Who we are

PocketBiz is operated by [company legal name] (CIN [CIN]), registered at [registered address]. In this policy, "we" means [company legal name]. Contact: [support email].

Two roles: sellers and us

PocketBiz is used by businesses ("sellers") to manage their own customers, enquiries, orders and payments. For the information about a seller's customers, the seller decides why and how it is used and we process it on the seller's behalf. For information about the seller's own account, we decide how it is used.

What we collect

• Account details: name, login (email or phone), password (stored only as a one-way hash), role in the business.
• Business records the seller enters: customers (name, phone number, address), leads and orders, items and prices, payments, expenses, notes and follow-ups.
• Connected accounts, when a seller connects them: identifiers of the connected WhatsApp Business and Instagram accounts, access tokens (stored encrypted), and the messages those accounts receive, including the sender's name or username, phone number, message text, and photos or voice notes they send.
• Technical data: sign-in cookie, IP address and basic device information for security and troubleshooting.

Why we use it

• To run the service: turn messages into leads, track orders and payments, and send reminders to the seller and their team.
• To keep accounts and data secure, prevent abuse and fix problems.
• To contact sellers about the service, billing and changes.

We do not sell personal data and we do not use it for advertising.

Who we share it with

Only the services we need to run PocketBiz, under agreements that protect the data:

• Hosting, storage and backup providers.
• Meta (WhatsApp and Instagram), because messages and connections come through its platform. Meta's own privacy terms apply to its services.
• A payment provider, when paid plans are offered.
• Authorities, when the law requires it.

Where it is stored and how long we keep it

Data is stored on servers in [country where data is stored]. We keep a seller's data while their account is active. When an account is closed we delete or anonymise its data within 30 days, except what the law requires us to keep. Backups are overwritten on a regular cycle.

Security

Data is sent over HTTPS, sellers can only see their own business's data, access tokens are encrypted, passwords are hashed, and important actions are logged. No system is perfectly secure; if a breach affecting you occurs we will tell you and the authorities as the law requires.

Your rights and how to use them

You can ask to see, correct or delete your personal data, and withdraw consent where we rely on it. A seller can export their business data from their account and can ask us to delete it. If you are a seller's customer, please ask the seller first; we will also help you directly.

To delete data held about you, including data linked to your Facebook or Instagram login, see Delete my data.

Grievance officer

For complaints about how personal data is handled: [grievance officer name], [support email]. We aim to reply within 7 days.

Cookies

We use one cookie, to keep you signed in. We do not use advertising or tracking cookies.

Children

PocketBiz is for businesses and is not meant for people under 18.

Changes

If we change this policy in a way that matters, we will update the date above and tell signed-in users.