Privacy Policy

BizBrainX is operated by Enerzyzone Vertex Innovations LLP, Pune, India ("BizBrainX," "we," "us"). This policy explains what personal data we collect, why, how it's stored and protected, and what rights you have over it.

For your own account data (name, email, phone, billing details), BizBrainX is the data fiduciary— we decide why and how it's processed, and this policy governs it directly.

For the leads, customers, and business data you bring into BizBrainX as a business owner, you (your business) are the data fiduciary and BizBrainX acts as your data processor — we process that data only on your instructions, to run the product for you. Your own privacy notice to your customers governs that data; our role is to keep it secure and process it only as you direct.

Account data: name, email, phone, business details, billing information.

Business-operational data you enter or connect: leads, customers, deals, documents, messages, and similar records needed to run the modules you use.

Usage data: pages visited, actions taken, and AI-agent activity logs, used to run and improve the product and to meter usage-based billing.

We do not knowingly collect data from anyone under the age of majority acting without appropriate authority, and BizBrainX is not directed at children.

To provide the product and features you've activated, to bill your subscription, to respond to support requests, to secure your account, and to meet legal and regulatory obligations. We do not sell your data, and we do not use your business data to train AI models.

Business data is stored in Supabase, hosted in the Mumbai (India) region, with row-level tenant isolation — your data is never visible to another organization on the platform.

Some processing necessarily crosses borders: AI requests are sent to Anthropic's Claude API for agent responses, and WhatsApp messages are sent via Meta's WhatsApp Cloud API. Both are processors we've selected specifically for this purpose and only receive the data needed to perform that function — neither is permitted to use your data for their own purposes. We transfer personal data outside India only to countries not restricted by the Government of India for such transfers, and only under contractual terms that limit each provider to the agreed processing purpose, consistent with the DPDP Act, 2023.

Clerk (authentication only — never your business/customer data), Supabase (database hosting), Razorpay (subscription payment processing only — we never route customer/lead-level payments through Razorpay), Anthropic (AI processing), OpenRouter (AI processing for select lower-cost/classification tasks — a routing layer that forwards the request to the selected underlying model provider; we use OpenRouter's Zero Data Retention setting), Meta (WhatsApp messaging, where you've connected it), Resend (transactional email), Vercel (application hosting). Each receives only what it needs to perform its specific function.

Encryption in transit (HTTPS) and at rest (Supabase-managed). Tenant isolation via row-level security on every table. Least-privilege access — production data access is restricted and audited. Secrets and API keys are never stored in application code.

You can request access to, correction of, or erasure of your personal data at any time. Where you are the data fiduciary for data you've entered about your own customers, you are responsible for honoring their rights requests — BizBrainX will support you with the tools and data access needed to do so (export and delete capability in your account).

To make a request or raise a grievance, contact our Grievance Officer, Abhishek Potare, at info@enerzyzone.com. Full details and response timelines are on our Grievance Redressal page.

We retain account and business data for as long as your account is active, and for up to 90 days after account closure so you can reactivate and so we can meet legal, tax, and dispute-resolution obligations, after which it is deleted or anonymized — unless a longer retention period is required by law.

If we become aware of a data breach affecting your personal data, we will notify you and, where required, the relevant regulatory authority, without undue delay.

We may update this policy as the product evolves. Material changes will be communicated to active account holders.

Questions about this policy or how your data is handled: info@enerzyzone.com