1. Who we are
B J Solutions is a sole-proprietorship MSME software development business based in India, with its office at Dhuri, Punjab 148024. We are the data controller for the personal information described in this policy. You can contact us at [email protected].
2. Information we collect
2.1 Information you provide
- Contact details — name, email address, phone number, company name and message content when you use our contact form, email us, or request a quote.
- Account information — name, email, password (stored hashed), organisation and role when you create an account for one of our products.
- Billing information — billing name, address, tax identifiers and the last four digits / card brand of your payment method. Full card numbers, UPI credentials and bank details are collected and processed directly by our payment processors (Razorpay and PayPal) and never stored on our servers.
- Project information — documents, specifications, credentials and data you share with us for the purpose of delivering a custom software engagement.
- Audit inputs — website URLs, mobile application binaries (APK/AAB/IPA) and related metadata you submit to our audit tools.
2.2 Information collected automatically
- Device and browser type, operating system, IP address, approximate location derived from IP, referring URLs, pages viewed and time on page.
- Product usage data such as features used, scans run and error logs, used to operate and improve our products.
- Cookies and similar technologies as described in our Cookie Policy.
3. How we use information
- To respond to enquiries, prepare proposals and deliver the services you request.
- To create and manage your account, process subscriptions and payments, and send invoices and receipts.
- To operate, secure, maintain and improve our website and products.
- To send service communications (account notices, billing reminders, security alerts, policy changes).
- To send marketing communications where you have opted in; you can unsubscribe at any time.
- To detect, prevent and investigate fraud, abuse and security incidents.
- To comply with legal obligations, including tax and accounting requirements.
4. Legal bases
Where applicable law (including India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR) requires a legal basis, we rely on: performance of a contract; your consent; our legitimate interests in running and protecting our business; and compliance with legal obligations.
5. Payments
Payments are processed by Razorpay Software Private Limited (for customers paying in INR) and PayPal (for international customers). When you pay, your payment details are transmitted directly to the processor over an encrypted connection and are subject to their privacy policies. We receive a confirmation of payment, a transaction identifier and limited billing details needed to issue your invoice.
6. Sharing of information
We do not sell personal information. We share it only with:
- Service providers who help us run our business — hosting and infrastructure providers, payment processors, email delivery, analytics and customer-support tools — under contracts that restrict their use of the data.
- Professional advisers such as accountants, auditors and lawyers where necessary.
- Authorities where required by law, court order or to protect our rights, users or the public.
- A successor in the event of a merger, acquisition or sale of assets, subject to this policy.
7. International transfers
Our infrastructure providers may store or process data in countries other than your own, including the United States and the European Union. Where required we use appropriate safeguards such as standard contractual clauses.
8. Data retention
- Enquiry data: up to 24 months after our last contact, unless an engagement follows.
- Account and billing records: for the life of the account and thereafter as required by tax and accounting law (typically 8 years in India).
- Audit inputs (URLs, app binaries, reports): for the duration of your subscription plus 90 days, unless you delete them earlier from your account.
- Client project data: returned or deleted at the end of the engagement unless retention is agreed in writing.
9. Security
We use encryption in transit (TLS), encryption at rest for stored data, access controls, logging and regular security reviews — including audits using our own tools — to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your rights
Depending on where you live you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct inaccurate or incomplete information.
- Delete your information, subject to legal retention requirements.
- Object to or restrict certain processing, and withdraw consent where processing is based on consent.
- Nominate a person to exercise your rights in case of death or incapacity (India DPDP Act).
- Lodge a complaint with your local data protection authority (for India, the Data Protection Board of India).
To exercise these rights, email [email protected]. We will respond within 30 days.
11. Children
Our website and products are intended for business use by adults. We do not knowingly collect personal information from anyone under 18.
12. Third-party links
Our website may link to third-party sites. We are not responsible for their privacy practices and encourage you to read their policies.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest revision. Material changes will be notified by email to account holders or by a prominent notice on our website.
14. Grievance Officer & contact
In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of our Grievance Officer are:
Grievance Officer, B J Solutions
Dhuri, Punjab 148024, India
Email: [email protected]