This policy explains how we handle the information you share while purchasing a plan, answering assessment questions, and receiving your business performance report.
1. About this Privacy Policy
This Privacy Policy explains how Ameerang Enterprise Private Limited ("BizVitals", "Company", "we", "us" or "our") collects, uses, stores, shares and protects personal data when you visit BizVitals.io, create an account, purchase or use a product, complete an assessment, receive an AI-generated report, contact support or otherwise interact with the Services.
BizVitals acts as the entity responsible for deciding the purposes and means of processing personal data for its own Services, subject to applicable law. Where a third party processes data for its own independent purposes, that third party's privacy terms may also apply.
This Policy applies to current and future BizVitals digital offerings including assessments, AI-assisted reports, toolkits, templates, frameworks, guidebooks, calculators, dashboards, indices, industry packs, courses, subscription content, and downloadable PDF, Word, Excel or similar files.
2. Information we collect
2.1 Account and identity information
We may collect your name, email address, mobile or WhatsApp number, country, state, city, address, company name, designation, industry, business type, business age, team size, turnover range, billing details and other account or profile information that you provide.
We may also process authentication information such as verification status, OTP records, login tokens or identifiers received from Google Sign-In or another approved authentication provider. We do not need or intend to store your third-party account password.
2.2 Business and assessment information
When you use an assessment or business tool, we may collect questions shown to you, answers selected, scores, business goals, challenges, operational information, financial or turnover ranges, team information, business-model information, planning information and other context necessary to generate the requested result.
We may store generated reports, recommendations, assessment history, product usage, download history and related account activity.
You should not provide highly sensitive personal information, passwords, banking credentials, Aadhaar information, medical information or third-party confidential information unless the relevant BizVitals feature expressly requests it and you are legally entitled to provide it.
2.3 Purchase, payment and transaction information
We may collect product purchased, price, applicable tax information, billing details, GSTIN if voluntarily provided for invoicing, payment status, transaction identifier, coupon or promotional information, refund information and order history.
Payments are processed through Stripe and/or another processor displayed at checkout. Full card or bank credentials are generally collected by the payment processor rather than BizVitals.
2.4 Technical, usage and cookie information
We may automatically collect IP address, browser type, device type, operating system, login records, session identifiers, approximate location derived from IP, page views, timestamps, referring pages, downloads, clicks, assessment progress, error logs and security events.
Cookies, pixels, tags, scripts, local storage or similar technologies may be used for essential authentication, security, preferences, analytics, performance and, where enabled and lawfully consented to, marketing measurement.
2.5 Communications and support
If you contact us, raise a ticket, request a refund, report a problem, respond to a survey or communicate by email, phone, SMS or WhatsApp, we may retain the communication, contact details and information necessary to respond, investigate and maintain an appropriate record.
3. AI and automated processing
BizVitals may use artificial-intelligence and automated systems, including OpenAI technologies such as ChatGPT or related APIs, to generate reports, summaries, explanations, recommendations, drafts, classifications or other outputs.
Depending on the product and technical configuration, information sent to an AI provider may include assessment answers, scores, business context, company name and identifiers such as your name or email address where necessary for the requested functionality.
BizVitals does not itself use identifiable User data to train a proprietary general-purpose AI model. Third-party AI providers process information under their applicable contractual, technical and privacy arrangements. Where business/API configurations are available, BizVitals aims to use configurations that do not use business inputs and outputs for general model training by default, unless a different use is clearly disclosed and lawfully authorised.
AI outputs may be inaccurate or incomplete. Automated reports are intended as guidance and decision-support and are not treated by BizVitals as legally binding decisions about you.
4. How we use information
We may use personal and business information to:
5. Legal grounds for processing
The legal ground for processing depends on the applicable law and purpose. For processing governed by Indian data-protection law, BizVitals will rely on consent or another recognised legitimate use where available under applicable law.
Where laws in another jurisdiction apply, processing may also rely on consent, performance of a contract, legal obligation, legitimate interests or another lawful basis recognised by that jurisdiction.
Where consent is required, you may withdraw it using the available account, unsubscribe, ticket or email mechanism. Withdrawal does not affect processing that was lawful before withdrawal and may mean that a feature requiring the relevant data can no longer be provided.
6. How and with whom we share information
We do not sell personal data for money. We may share or allow access to information only as reasonably necessary with categories of service providers and recipients such as:
We may also share information at your direction or with your consent.
7. Service providers and third-party websites
Service providers may process information on our behalf to help operate, secure, analyse or improve the Services. We seek to limit access to what is reasonably necessary for the relevant function.
The Platform may contain links to third-party websites or services. BizVitals does not control their content, security or privacy practices. If you leave BizVitals.io or interact directly with a third party, you should review that third party's privacy policy and terms.
8. International processing and transfers
BizVitals may make Services available to users in India and other countries. Some service providers, including AI, cloud, analytics, authentication, communications or payment providers, may process or access information from locations outside your country.
Where cross-border transfer requirements apply, BizVitals will take reasonable steps to use lawful transfer mechanisms and contractual, technical or organisational safeguards appropriate to the circumstances. We will comply with any binding restriction imposed by applicable Indian law on transfers of personal data outside India.
If the law of your location gives you additional non-waivable rights regarding international transfers or privacy, those rights remain available to you.
9. Cookies and analytics
Essential cookies may be used to provide login, security, session management, fraud prevention and core functionality. Optional analytics or marketing technologies may be subject to consent or opt-out requirements depending on the applicable law.
You can usually manage cookies through the consent tool made available on the Platform and through your browser settings. Blocking essential cookies may prevent some features from functioning correctly.
10. Marketing communications
Where permitted, BizVitals may send information about products, events, updates, offers or related business resources by email, SMS, WhatsApp or another communication channel.
Marketing consent will be handled separately where required. You may opt out using an unsubscribe link, reply instruction, account preference or by contacting support@bizvitals.io. We may retain limited suppression information so that we can honour your opt-out.
Opting out of marketing does not prevent necessary transactional, account, security, payment, legal or service-related messages.
11. Aggregated and anonymised information
We may aggregate or anonymise information so that a person or business is not reasonably identifiable. Such information may be used for analytics, benchmarking, research, product improvement, industry insights, planning and development.
Where information can still reasonably be linked back to a person, we will continue to treat it as personal data under this Policy.
12. Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, to maintain your account and purchased entitlements, and to meet applicable legal, tax, accounting, cybersecurity, fraud-prevention and dispute-resolution requirements.
Typical retention principles include:
When retention is no longer justified, information will be deleted, anonymised or placed beyond ordinary operational use, as appropriate.
13. Access, correction, deletion and your privacy rights
Depending on applicable law, you may have rights to request information about processing, access personal data, correct or complete inaccurate information, request deletion, withdraw consent, object to certain processing, request a copy of data, nominate another person, or use another privacy right available in your jurisdiction.
You may also delete or manage certain information through your account where the feature is available.
To make a request, raise a ticket through the Platform or email support@bizvitals.io. We may verify your identity and authority before acting. Some information may be retained where required for legal compliance, payment records, fraud prevention, security, dispute resolution or another lawful reason.
Deleting an account may permanently remove access to reports, purchases or saved results that are tied to that account after any applicable retention or recovery period.
14. Security
BizVitals uses administrative, technical and organisational safeguards designed to protect personal and business information against unauthorised access, misuse, alteration, disclosure or loss. Measures may include access controls, secure authentication, encryption in transit, protected storage, backups, logging, monitoring, vendor controls and incident-response processes.
No method of internet transmission or electronic storage is completely secure. Although we take reasonable precautions, we cannot guarantee absolute security.
If we become aware of a data or security incident, we will investigate, contain and respond to it and make notifications to affected persons or authorities where applicable law requires.
15. Children and minor users
BizVitals is primarily intended for business users and is not directed to children for independent contracting.
For users in India, a person below 18 years of age may use an appropriate Service only through a parent or lawful guardian who creates or manages the account, provides any legally required verifiable consent and accepts responsibility for the account. BizVitals may require reasonable evidence of age, adult identity or parental/guardian authority.
We do not knowingly use children's personal data for targeted behavioural advertising or processing that is likely to cause a detrimental effect on the child's well-being.
If you believe a minor has independently provided personal data without the required authority or consent, please contact support@bizvitals.io so that we can review and take appropriate action.
16. Business transfers
If BizVitals or Ameerang Enterprise Private Limited is involved in a merger, acquisition, financing, reorganisation, insolvency, sale of assets or transfer of all or part of the business, personal data may be reviewed or transferred as part of that transaction.
Where required, we will take reasonable steps to ensure continued protection of personal data and provide notice of a material change in the entity responsible for it.
17. Lawful disclosure and protection of rights
BizVitals may disclose personal data where it reasonably and lawfully believes disclosure is necessary to:
Where legally permitted and reasonably practical, we seek to limit disclosures to information relevant to the request.
18. Automated reports and consequential decisions
BizVitals may use automated scoring and AI to produce business guidance. BizVitals itself does not use such outputs to make legally binding decisions about a User's employment, credit, insurance, medical treatment or access to essential services.
Reports are not designed as formal eligibility benchmarks or certifications for those purposes. Users and third parties remain responsible for independent verification and compliance with applicable law.
19. Policy changes
We may update this Privacy Policy from time to time because of changes in law, products, vendors, technology or business practices.
The latest version will be posted on BizVitals.io with an updated date. Where a change is material, we may also provide notice through email, account notification or a prominent website notice. If a new processing purpose requires fresh consent or another legal step, we will take that step rather than relying only on an updated Policy.
20. Contact, privacy requests and grievances
For privacy questions, access/correction/deletion requests, complaints or other concerns, you may raise a ticket through the BizVitals support system or contact:
BizVitals will maintain a grievance and privacy-response mechanism and will publish on the Platform any additional grievance-officer, privacy-contact or other details that applicable law requires. Requests and complaints will be handled within the timelines required by applicable law.