Privacy Policy

BharatDrive ("we", "us", or "our") is a business operating platform for professional practices — Chartered Accountants, Tax Consultants, and allied professionals. The platform is owned by Bipin Bihari Singh Consultants Private Limited and developed and managed by Calcutta Technologies Private Limited.

This Privacy Policy explains what personal data we collect when you use our website (www.bharatdrive.in) and our web application, why we collect it, how we use it, and what rights you have in relation to that data. By accessing or using BharatDrive you agree to the practices described in this policy.

We collect information in the following categories:

• To create and manage your account and authenticate you when you sign in.
• To deliver the features of the BharatDrive platform — Financial Statement & ITR preparation, Task Management, Client Directory, Employee management, and Compliance & Tasks.
• To process subscription payments and generate invoices.
• To send transactional emails (account confirmation, password reset, payment receipts). We do not send marketing emails without your explicit opt-in.
• To monitor the health, security, and performance of the platform.
• To comply with applicable Indian laws and regulations, including the Income Tax Act and the IT Act.
• To respond to your support requests and feedback.

• Performance of a contract — processing necessary to provide you the services you have subscribed to.
• Legitimate interests — security monitoring, fraud prevention, and improving the platform.
• Legal obligation — retaining financial records as required by Indian law.
• Consent — where you have given us specific consent (e.g. marketing communications).

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Service providers: Razorpay (payment processing), Amazon Web Services / S3 (file and logo storage), and our hosting infrastructure providers. These processors are bound by data-processing agreements.
• Meta Platforms (WhatsApp Business Platform): when a firm uses BharatDrive's WhatsApp features, the messages, calls and templates it sends are transmitted to its recipients through Meta's WhatsApp Cloud API. See section 10 below.
• Legal requirements: If required by law, court order, or government authority, we may disclose information to the extent required.
• Business transfer: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity, which will be bound by this policy.

We retain your account and practice data for as long as your account is active or as needed to provide the service. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it to comply with legal obligations (e.g. payment records retained for 7 years under Indian accounting standards).

• All data in transit is encrypted with TLS 1.2 or higher.
• Database data is encrypted at rest using AES-256.
• Access to production systems is restricted to authorised personnel and protected by multi-factor authentication.
• Passwords are hashed using bcrypt and never stored in plain text.
• We conduct periodic security reviews of our codebase and infrastructure.

If you become aware of any security vulnerability, please notify us at support@calcuttatech.com.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request erasure of your data, subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — withdraw any consent you have given at any time.

To exercise any of these rights, email support@calcuttatech.com with the subject "Privacy Request". We will respond within 30 days.

BharatDrive is intended for adults aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

BharatDrive lets professional firms communicate with their own clients on WhatsApp through the WhatsApp Business Platform (Cloud API) operated by Meta Platforms, Inc. and WhatsApp LLC ("Meta"). Calcutta Technologies Private Limited acts as a Meta Tech Provider: firms connect their own WhatsApp Business Account (WABA) to BharatDrive through Meta's Embedded Signup, or send from BharatDrive's shared business number. This section explains what WhatsApp-related data we handle and how.

How to request deletion of your WhatsApp data

• Firms: email support@calcuttatech.com from your registered email address with the subject "WhatsApp Data Deletion" and your registered WhatsApp business number. You can also remove BharatDrive's access at any time in Meta Business Settings → Accounts → WhatsApp Accounts / Integrations.
• People who received a message from a firm on BharatDrive: reply STOP to the firm to opt out, or email support@calcuttatech.com with your phone number and the firm's name. We will pass the request to the firm and delete the data we hold for that number within 30 days, unless the law requires us to keep it.
• We confirm by email once the deletion is complete.

Questions about WhatsApp data or this section: email support@calcuttatech.com.

Relevant Meta policies: Meta Privacy Policy, WhatsApp Business Messaging Policy, WhatsApp Business Terms of Service and WhatsApp Privacy Policy.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you by email or an in-app notice. Continued use of BharatDrive after any change constitutes your acceptance of the updated policy.