Privacy Policy

This Privacy Policy explains how DIGITAL BIZ 360 (“Digital Biz 360”, “we”, “us”) collects, uses, stores, shares and deletes personal data through our website digitalbiz360.com and our Agency Cockpit application (together, the “Services”). We process personal data in line with India’s Digital Personal Data Protection Act, 2023 and other applicable laws.

1. Who we are

For personal data of our client users and website visitors, we act as a Data Fiduciary. For marketplace data we process on behalf of the brands we serve, including buyer details inside orders, we act on our client’s instructions as a Data Processor and follow each marketplace’s data protection rules.

2. Data we collect

• Account data: name, business email, phone number, company name and role of client users and Digital Biz 360 staff who use Agency Cockpit.
• Marketplace business data: with the seller’s authorisation, orders, shipments, returns, inventory, listings, pricing, fees, payments, settlements and advertising performance from connected marketplace accounts.
• Buyer data inside orders: marketplace order data can include a buyer’s name, delivery address and phone number. We process only the fields needed for order reconciliation, returns and tax records.
• Website data: details you submit through our contact or booking forms (name, email, phone, company, message), and basic technical data such as IP address, browser type and pages visited.
• Usage and security logs: sign-in times, actions taken in Agency Cockpit and error logs, used to keep the Services secure and working.

Agency Cockpit does not collect marketplace login passwords. Amazon and Flipkart connections use each marketplace’s official authorisation process, which gives us an access token you can revoke at any time.

3. How we use data

• To provide Agency Cockpit: dashboards, reports, alerts, restock suggestions and reconciliation.
• To send daily or weekly summaries to contacts you authorise, by email or WhatsApp.
• To generate suggested actions using automated tools, including AI. An authorised person reviews and approves each suggestion before any action is taken on a marketplace account.
• To provide support, respond to enquiries and manage our client relationship.
• To keep the Services secure, prevent misuse and meet legal and tax obligations.

We do not sell personal data. We do not use marketplace data or buyer data for advertising, and we do not contact buyers for marketing.

4. How we handle marketplace buyer data

• Used only to fulfil, reconcile or support orders for the brand that authorised us, and to meet legal or tax requirements.
• Never used to contact buyers outside the marketplace’s approved channels, and never shared with other clients.
• Hidden or masked in dashboards wherever it is not needed.
• Deleted or anonymised within 30 days after the order is delivered, unless a longer period is required by law, such as tax records. Data kept for legal reasons is stored separately and used only for that purpose.
• Handled in line with Amazon’s Data Protection Policy and Acceptable Use Policy, and Flipkart’s data protection terms for sellers and API partners.

5. Who we share data with

• Service providers that host and run our Services, under contracts requiring confidentiality and security: [hosting provider], [database provider], [email provider], [WhatsApp messaging provider] and [AI model provider].
• The marketplaces themselves, when an approved action is carried out on your seller account.
• Authorities, when required by law, court order or a lawful government request.
• A successor business, if Digital Biz 360 is merged or acquired, under the same protections set out in this policy.

6. Where and how we store data

Data is stored on servers operated by our service providers in [location]. We protect it with:

• HTTPS (TLS) encryption for data in transit, and encryption for stored data.
• Marketplace access tokens stored encrypted on our servers, never in the browser.
• Role-based access, so client users see only their own brand’s data and staff see only what their role requires.
• Access logs and regular reviews of who has access.

If a personal data breach occurs, we will inform affected users, the Data Protection Board of India and the relevant marketplace, as required by law and marketplace policy.

7. How long we keep data

Backup copies are overwritten within [30] days.

8. Your rights

Under the DPDP Act, you can:

• Ask for a summary of the personal data we hold about you and how it is used.
• Ask us to correct, complete, update or erase your personal data.
• Withdraw consent at any time, for example by disconnecting a marketplace account. This does not affect processing carried out before withdrawal.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us and, if it is not resolved, with the Data Protection Board of India.

Email [privacy contact email] to use any of these rights. We may need to verify your identity first.

9. Disconnecting a marketplace

You can revoke Agency Cockpit’s access at any time:

• Flipkart: Seller Hub > Manage Profile > Developer Access > Third Party Access.
• Amazon: the section of Seller Central where you manage authorised apps.
• Or email us and we will disconnect it for you.

Once access is revoked, we stop fetching data immediately and delete stored marketplace data as set out in section 7.

10. Cookies

Our website uses essential cookies to work properly [and analytics cookies to understand how visitors use it]. Agency Cockpit uses essential cookies to keep you signed in. You can block cookies in your browser, but parts of the Services may not work.

11. Children

Our Services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal data of children.

12. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date and notify client users of significant changes by email or in Agency Cockpit.

13. Grievance Officer

We will acknowledge your request within 2 working days and respond within the time required by law.