Privacy Policy

Last Updated: July 1, 2026. Fully compliant with the Digital Personal Data Protection (DPDP) Act, 2023 of India.

At BizLocalPilot (referred to as "we", "us", or "the Platform"), we are committed to safeguarding your personal and business data. Under the Digital Personal Data Protection Act (DPDP Act 2023) of India, we act as a Data Fiduciary, and you are the Data Principal. This policy details the consent-driven collection, storage, and processing of your details.

1. What Personal Data We Collect

We collect the minimum amount of personal data necessary to provide and optimize our local business dashboard services:

User Identity Data: Your name, email address, and avatar photo retrieved during Google Sign-In.
Google API OAuth Tokens: Access tokens and refresh tokens granted during authentication to interface with the Google Business Profile APIs on your behalf.
Business Profile Data: Location IDs, storefront address, phone number, categories, reviews, star ratings, and owner response logs synced from your Google Maps listings.
Payment Data: Payment details (order ID, transactions, amount) processed securely via Razorpay. We do not store raw credit card numbers or UPI PINs on our servers.

2. Purpose of Data Processing (Lawful Basis)

We process your personal and business data solely for the following explicit purposes:

To allow you to draft, schedule, and publish posts and local updates to Google Maps.
To fetch, analyze, and enable owner replies on GMB customer reviews (either manually or via Gemini AI generator).
To generate automated Weekly Performance Reports and local SEO audits.
To manage your premium billing subscriptions securely via Razorpay.

3. Data Security & Storage

All data is stored securely in encrypted cloud databases. Access tokens are transmitted over TLS (HTTPS) and refreshed securely. We do not sell, rent, or trade your personal information or GMB profile details to third-party brokers or advertisers under any circumstances.

4. Right to Erasure (DPDP Compliance)

Under the DPDP Act 2023, you have the absolute **Right to Erasure and Permanent Removal**. You can trigger this at any time:

Go to **Settings** inside your Dashboard, click on **Delete Account**, and confirm. The system will immediately execute a permanent wipe of your user profile, billing details, GMB OAuth credentials, saved locations, AI audits, drafts, and reviews database logs from our MongoDB servers instantly.

For any privacy questions or to contact our Data Protection Officer, please email [email protected].