Privacy Policy

Last updated 21 October 2026

This policy explains how Ranjan Kumar ("we") handles personal data in IBO. It is written to meet India's Digital Personal Data Protection Act, 2023 and, for users in the EU/UK, the GDPR.

1. What we collect

• Account data: your name, work email, password (stored only as a secure hash), language and theme preferences.
• Workspace data you enter: customers, contacts, suppliers, orders, invoices, notes and similar business records. This may include names, phone numbers and emails of your business contacts.
• Technical data: sign-in sessions, browser type and an audit log of changes made in your workspace.

We do not use advertising trackers and we do not sell personal data.

2. Why we use it

• To provide the Service you signed up for (contract).
• To keep it secure — sign-in protection, audit logs, abuse prevention (legitimate interest / legal obligation).
• To send service emails such as password resets and reminders you enabled.

3. Your business contacts' data

For data about your customers, suppliers and staff, your business is the data fiduciary (controller) and decides why it is processed; we process it only on your instructions to run the Service.

4. Who we share it with

Only service providers needed to run IBO, under contract and confidentiality:

• Cloud hosting and database backup provider (where your data is stored).
• Email delivery provider (for password resets and notifications).
• AI provider (Anthropic), only when you use AI features, without permission to train on your data.
• Payment processor, when paid plans are billed online.

Data may be processed outside your country; we use contractual safeguards where required.

5. How long we keep it

For as long as your workspace is active. After a deletion request or account closure we delete it from live systems within 30 days and from backups within 90 days, unless the law requires us to keep it longer.

6. Security

Passwords are hashed, connections use HTTPS, each company's data is separated, access is role-based, and important changes are logged.

7. Your rights

You can access, correct, export or delete your personal data, withdraw consent, and nominate someone to exercise your rights. EU/UK users may also object to processing and complain to their data-protection authority. Write to rahul.webclever@gmail.com; we reply within 30 days.

8. Grievance Officer (India)

Ranjan Kumar · rahul.webclever@gmail.com · 75/1, Raipur Khurd, Chandigarh 160003, India

9. Changes

We will notify workspace owners of material changes by email or in the app before they take effect.