Privacy Policy
This policy explains what data the Brozap app and the website brozap.com collect, why, where it is kept and what your rights are. Brozap is a brand of Devwipe IT Solutions Private Limited, India (“Brozap”, “we”, “us”). If you have questions, write to support@brozap.com.
1. Who is responsible for what
- Your account data (your phone number and shop details): we decide how it is used, so we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
- Your customers’ data that you enter in the app (for example a customer’s name, phone number or GSTIN on a bill): the shop decides why it is collected; we only store and process it to run the app for you, as a Data Processor on the shop’s behalf. The shop is responsible for having a lawful reason to record it.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Phone number | Your mobile number | To log you in with a one-time password (OTP) and identify your account |
| Shop and business details | Shop name, address, state, GSTIN, GST type, invoice settings | To print correct bills and set up your account |
| Product and stock data | Product names, prices, units, GST rate, HSN, barcodes, product photos, stock counts | To make bills and keep stock |
| Sales and bill data | Bills, items, amounts, tax, payment method, optional customer name / phone / GSTIN, notes | To keep your bill history, reports and backup |
| Device and technical data | Device model, operating system, app version, a device identifier for invoice series, error and crash logs, IP address in server logs | To keep the app working, fix problems, prevent misuse and meet legal log-keeping rules (CERT-In) |
| Messages you send us | Emails, WhatsApp messages, pilot form details | To answer you and run the pilot |
We do not collect your contacts, SMS messages, call logs or precise location. We do not store card numbers, CVV or card expiry dates.
3. App permissions
- Camera — to scan barcodes and, if you choose, to take product photos. Barcode images are processed on the device and not uploaded. Product photos you save are stored with your product data.
- Bluetooth / Nearby devices — to find and connect to your receipt printer (and Bluetooth barcode scanner). We do not collect information about other Bluetooth devices around you.
- USB — to print on a USB printer connected with an OTG cable.
- Internet / network state — to log in, back up your data and know when you are offline.
- Photos / files (only if you pick an image) — to choose a product picture from your gallery.
You can turn permissions off in your phone settings. Billing still works; only the related feature stops.
4. How we use data
- To provide the app: log-in, billing, stock, printing, sharing and backup.
- To restore your data on a new device.
- To give support and tell you about important changes (for example to the app, pricing or this policy).
- To keep the service secure, find errors and improve it, using technical data and aggregated statistics.
- To meet legal duties (for example tax, CERT-In log rules, or a lawful request from authorities).
We do not sell your data or your customers’ data, and we do not use it for advertising. We process your personal data on the basis of your consent and for the legitimate uses allowed under the DPDP Act. You can withdraw consent at any time (see section 10); this does not affect processing already done.
4a. Optional: help improve Brozap (research)
After you log in, the app asks you once whether you want to help improve Brozap. It stays off unless you tap “Agree”: nothing is pre-selected, and “Not now” changes nothing else in the app. Only the shop owner can choose. You can change your answer any time in the app under Account → Privacy.
- Why: research on how shops buy and sell, to train and improve our AI features (for example product suggestions and sales insights) and to plan new features. Not for advertising, and never sold.
- What is shared: your shop’s own business data — products, categories, brands, prices, GST rates, stock in and out, bills (items, quantities, amounts, tax, time, payment method), estimates, dealer orders and goods received (items and amounts), and the words you search for products.
- What is never shared: your customers’ names, phone numbers, GSTINs and addresses; dealers’ names, phone numbers and addresses; signatures, logos and photos; notes; payment references; invoice numbers. The app removes them on your phone before anything is sent, and our server refuses words that look like a phone number, GSTIN, PAN, Aadhaar or e-mail. To count repeat customers, the app replaces a customer with a code made with a secret key that never leaves your phone, so we cannot tell who the customer is.
- Free plan: the app sends this data in small parts in the background (more on Wi-Fi), separately from backup. It is not a backup: it cannot be restored to your phone and does not give you sync, more devices or the web panel — those come with a paid plan.
- Paid plans: nothing extra is sent. If you agree, we may also use the data already in your cloud backup for the same research, without your customers’ personal data.
- Where: on our servers in India, in separate research tables that shops cannot see. Only authorised staff and our analysis programs read them.
- Stop anytime: Account → Privacy → Stop sharing. Sending stops at once on your phone, and we delete what was shared for research as soon as your phone is online. Results already made from many shops together (statistics, trained AI models) that do not contain your data are not affected.
- How long: up to 3 years from when we received it, then deleted.
5. Where data is stored
Your data is first stored on your device, so the app works offline. When you are online, it is backed up to servers we operate in India. We do not transfer your shop data outside India, except for the limited service-provider processing described below.
6. Who we share data with
- Google Firebase Authentication (Google) — receives your phone number to send and verify the OTP for log-in.
- Google Workspace (Google) — our email; receives what you send to support@brozap.com.
- WhatsApp — only when you choose to share a bill or message us; WhatsApp’s own privacy policy applies.
- Payment gateway (later, for example Razorpay) — only if you switch on online payments in the future; we will update this policy and ask you first.
- Authorities — when the law requires it.
- A buyer of our business — if Brozap is merged or sold, under the same protections, after informing you.
7. How long we keep data
- Account, shop, product and bill data: while your account is active. After you delete your account, we delete it within 30 days, except what the law requires us to keep.
- Bills are tax records: shops usually must keep them for several years under GST law. Export or print what you need before deleting your account.
- Server security logs: 180 days (CERT-In rules), then deleted.
- Research data (only if you agreed, section 4a): up to 3 years, then deleted; at once when you stop sharing.
- Backups: removed in the normal backup cycle (about 30 days).
8. Security
Data travels over encrypted connections (HTTPS). Access to servers is restricted to authorised staff. We keep backups and logs as required by law. No system is perfectly secure; if a personal data breach happens, we will inform affected users and the Data Protection Board of India as the DPDP Act requires.
9. Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and how it is used;
- correct, complete or update it;
- erase it (see section 10);
- name another person to use these rights if you die or cannot act;
- handle your complaint (grievance redressal).
Write to support@brozap.com from your registered email or mention your registered phone number. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Grievance Officer: Ritawik Raj, Devwipe IT Solutions Private Limited (CIN U62013JH2026PTC029177), C/O Alla Harkha Siddiqui, 504, Sukbana, Garhwa – 822114, Jharkhand, India. Phone +91 82949 62478, email support@brozap.com (subject “Grievance”).
10. Deleting your account and data
- Send an email to support@brozap.com with the subject “Delete my Brozap account” and your registered phone number.
- We confirm it is you (for example with an OTP or a call to that number).
- We delete your account and shop data from our servers within 30 days and confirm by email. Data on your own phone is removed when you uninstall the app or clear its data.
If your shop’s customers ask you to delete their details, you can edit or remove them in the app, or contact us for help.
11. The website
brozap.com does not use advertising or analytics cookies. Our servers keep standard access logs (IP address, page, time, browser) for security. Pages load fonts from Google Fonts, which receives your IP address. The pilot form does not send data to our servers: it opens your own email or WhatsApp app with the details filled in.
12. Children
Brozap is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect children’s data.
13. Changes and contact
We will post any change on this page and change the date above. For important changes we will also tell you in the app or by email before they apply.
Devwipe IT Solutions Private Limited (Brozap) · India · support@brozap.com