Privacy Policy

Bizlio ("we", "us") is operated by Bizlio, a sole proprietorship owned by Gaurav Srivastava and registered as an MSME in India (Udyam Registration No. UDYAM-UP-28-0244415), based in Noida, Uttar Pradesh, India. This policy explains what personal data we collect when you use Bizlio, why, who we share it with, and the choices and rights you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the requirements of the platforms we connect to, including Meta (Instagram, WhatsApp, Facebook) and Google (YouTube).

Data we collect

Your account

• Your name and email address, and your password, which we store only as a one-way hash.

What you create in Bizlio

• The details you give us about your business or niche, content calendars, ideas, captions, hashtags, images, website content, community answers and settings.

Accounts you connect

• Instagram: your username, account ID and an access token that lets Bizlio publish posts you schedule.
• WhatsApp Business: your phone number ID, WhatsApp Business Account ID and access token.
• Meta ad accounts: the ad account ID, Facebook Page ID and access token you provide.
• Access tokens are encrypted (AES-256-GCM) before they are stored and are never shown back to you or anyone else.

Your customers' data, handled on your behalf

• When you connect WhatsApp, messages your customers send to your business number (their name as shown on WhatsApp, phone number and message text) are stored in your inbox, along with replies. Reviews you log yourself are stored the same way.
• For this data, you are responsible for it as the business (the Data Fiduciary under the DPDP Act) and we process it only on your instructions to provide the service. Please make sure your own customers know how you use their messages.

Technical data

• Our hosting provider keeps standard server logs (such as IP address, browser type and the pages requested) for security and troubleshooting.
• We use only essential cookies: one to keep you signed in and, for site editors, one for previewing unpublished changes. We do not use advertising or analytics cookies, and we do not track you across other websites.

How we use your data

• To run Bizlio: generate content calendars, images and reply drafts; publish the posts you schedule; send the replies you approve; create the ad campaigns you request (always created paused); and build your website.
• To keep your account secure and the service reliable.
• To contact you about your account or important changes to the service.

We do not sell your personal data, and we do not use it to build advertising profiles. Data received from Instagram, WhatsApp or other Meta products is used only to provide the features you turn on, and is not shared for any other purpose.

AI processing

To generate content and reply drafts, we send the relevant text (for example your niche, or a customer's message) to AI providers. We use Google Gemini, and may use Anthropic Claude as a backup. Images are generated through Pollinations from a text description. These providers process the data to return a result; we do not send them your passwords or access tokens.

Who we share data with

We use these service providers, only as needed to run Bizlio:

• Vercel (USA): website hosting and storage of images.
• Neon (USA): database.
• Google: Gemini AI, and the YouTube Data API to research public YouTube videos.
• Anthropic (USA): AI, when used as a backup.
• Apify: researching public Instagram posts in your niche.
• Pollinations: AI image generation.
• Meta Platforms: Instagram publishing, WhatsApp messaging and ad campaigns, when you connect those accounts.

Bizlio uses YouTube API Services. By using Bizlio you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy (https://policies.google.com/privacy) applies to that data.

We may also disclose data if the law requires it.

Where your data is stored

Our database and files are hosted in the United States. By using Bizlio, your data will be transferred to and processed there, with the protections described in this policy.

How long we keep it

We keep your data while your account is open. When you delete your account, it is deleted from our database immediately; any remaining copies in short-term backups expire within 30 days. If you disconnect a social account, its access token is deleted straight away.

Your rights

Under the DPDP Act you can:

• Ask for a summary of the personal data we hold about you.
• Ask us to correct, complete or update it.
• Delete your account and data yourself at any time from Settings > Account & privacy, or ask us to do it.
• Withdraw consent, for example by disconnecting a connected account.
• Nominate someone to exercise these rights for you if you are unable to.
• Raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.

Grievance Officer and contact

Gaurav Srivastava, Grievance Officer Bizlio (Udyam Registration No. UDYAM-UP-28-0244415), Noida, Uttar Pradesh, India Email: privacy@bizlio.in

We aim to respond within 30 days.

Security

Connections to Bizlio are encrypted (HTTPS), passwords are hashed, and platform access tokens are encrypted at rest. No system is perfectly secure, but we work to protect your data and will tell you without undue delay if a breach affects you.

Children

Bizlio is for people aged 18 and over. We do not knowingly collect data from children.

Changes to this policy

If we make important changes, we will update this page and the "Last updated" date, and tell you by email or in the app when the change matters to you.