Privacy Policy

Last updated: 11 October 2026

Bizistic is operated by Akshat Wankhade, a sole proprietor based at 84, Vaishali Nagar, Indore, Madhya Pradesh, India. This Privacy Policy explains what information Bizistic collects, how it is used, and how personal data is handled under applicable law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data roles: Data Fiduciary and Data Processor

Under the DPDP Act and relevant data privacy regulations:

• Your Business / Shop as Data Fiduciary: When your shop or business uses Bizistic to communicate with your customers, record inquiries, issue bills, or manage udhaar ledgers, you determine the purpose and means of recording that customer data. Your business acts as the Data Fiduciary for your customers' personal data.
• Bizistic as Data Processor: Bizistic acts strictly as a Data Processor on behalf of your business, processing messages, catalog queries, customer contact details, and transactions solely to provide the automated assistant and software service as instructed by you.

2. Information we record

When you sign up and use Bizistic, we record: your account details (name, email, business name); the business content and knowledge you upload; messages exchanged between your customers and the Bizistic assistant on WhatsApp and on your website; and staff/task information you enter for your own business operations. Businesses using Bizistic's money dashboard and credit ledger may also store their customers' names, phone numbers, and amounts owed to manage payments and udhaar accounts (aligned with India's DPDP Act). To show a business which marketing sources produce customers, we also store where each lead came from: ad click identifiers (such as WhatsApp click-to-chat, Google or Facebook click IDs), campaign and source tags from the link the visitor used, the page they landed on and the referring website. The website chat widget keeps this in the visitor's browser storage for up to 30 days and sets no cookies.

3. How we use it

We use this information to operate the assistant for your business, generate the AI responses and business intelligence you see in your dashboard, send you account and billing emails, and process payments for your subscription.

4. Third-party data processors and locations

To deliver our services reliably and securely, Bizistic engages carefully selected third-party service providers (sub-processors). Each processes data strictly for the purposes described:

• OpenAI (United States) — processes customer message text and transcribed voice queries to generate the assistant's AI responses.
• Meta / WhatsApp Cloud API (United States / Global infrastructure) — used to send and receive WhatsApp messages and templates on your behalf.
• Razorpay (India) — processes subscription payments and UPI payment links. Bizistic does not store card details or payment credentials directly; these are handled securely by Razorpay.
• Resend (United States) and Google Workspace (United States / Global) — used to deliver transactional, digest, and account-related emails.
• Railway (United States) — cloud application hosting and primary infrastructure provider.
• Cloudflare R2 (Global / United States) — encrypted offsite backup storage.

5. Data storage and isolation

Each business's data is kept isolated from other businesses using Bizistic. Sensitive credentials (such as API keys you provide us) are stored encrypted, not in plain text.

6. Data retention periods

We retain information according to the following retention schedules:

• Active Business Accounts: Business profile information, uploaded catalogs, knowledge base entries, and operational records are retained as long as your account remains active.
• Customer Conversations & Message Logs: Customer chat histories on WhatsApp and the website chat are kept while the business uses Bizistic, so the business can see past conversations. The business can delete a customer and their chats at any time, and everything is deleted when the business account is deleted.
• Voice Audio & Media Files: Raw customer and owner voice audio recordings and media files are deleted after 3 days; text transcripts are retained with normal chat history so the business can review past conversations.
• Temporary Links & Queues: Signed bill and document links expire within 7 days and are pruned automatically; pending customer message queue entries are pruned within 1 day.
• Closed Accounts: When a business account is deleted (by the owner, or by Bizistic on request), its data is deleted from Bizistic straight away. Copies inside older encrypted backups are removed as those backups are deleted.

7. Customer rights and data deletion

Data principals have the right to access, correct, update, or request deletion of their personal data:

• Business Owners: You can export, update, or delete your business data directly from your dashboard or request complete account erasure at How to delete your data.
• End Customers: If you are a customer of a business using Bizistic, you may contact the shop directly (as the Data Fiduciary) or email support@bizistic.com with the business name and your phone number to request data access or deletion. We will assist in executing verified erasure requests within 7 business days.

8. No sale of personal data

We do not sell your personal data or your customers' data to third parties.

9. If you message a business that uses Bizistic

Many shops, clinics and other businesses use Bizistic to reply to their customers on WhatsApp and on their website. If you message such a business:

• Your messages, your name as shown on WhatsApp and your phone number are kept for that business, so it can reply to you and remember what you asked. Only that business (and Bizistic, to run the service) can see them.
• The assistant answers only from the information the business gave it. If it does not know, it says so and passes your chat to the business.
• If you send a voice note, it is turned into text (by OpenAI) so it can be answered; the text is kept, the audio is not.
• The business may send you automatic messages: one follow-up if you go quiet after asking something, appointment reminders and payment reminders. Reply STOP to stop all automatic messages from that business, and START to turn them back on. You can always message the business yourself.
• Payment links (bizistic.com/pay/…) open your UPI app to pay the business directly. Bizistic never receives or holds that money.
• To see or delete what the business holds about you, ask the business, or write to support@bizistic.com with the business name and your number.

10. Children's data notice

Bizistic is designed strictly for business administration and commercial communications. We do not knowingly record personal data directly from children under 18 years of age. For client businesses catering to minors (such as coaching institutes or schools), the business (as Data Fiduciary) is responsible for obtaining verifiable parental or guardian consent before initiating communications or enrolling students under applicable DPDP regulations.

11. Grievance Officer and redressal

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Rules, the details of our Grievance Redressal Officer are as follows:

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page.

13. Contact

Questions about this Privacy Policy can be sent to support@bizistic.com.

Terms & Conditions · Cancellation & Refund Policy · Shipping Policy · Contact Us