Who this covers
SahajBiz is a business assistant for home makers, bakers, tiffin caterers, tailors and artisans in India. This policy covers two groups: the business owner who signs in and runs their ledger, and the customers whose names, phone numbers and orders that owner records in SahajBiz.
SahajBiz is run by Swati Bhushan Sonawane, 9, SaiGanesh Apartment, Nashik, Maharashtra, 422009. For your own account, SahajBiz is the Data Fiduciary under the Digital Personal Data Protection Act, 2023. For the customers you write into your order book, you decide why that information is kept, and SahajBiz holds it on your behalf.
What we collect, and why
Your account: email address, name, phone number, business name and type, UPI ID and language — to sign you in, run your account and put your details on your bills.
Your business records: orders and their items, customers (names, phone numbers, addresses, notes), products with their costs and photos, expenses, stock, and which WhatsApp messages were sent — to keep your order book, dues and reminders.
Only if you switch AI on: voice recordings, the sentences you speak or type for an order or expense, product photos, and your questions to the assistant with a summary of your recent orders — to turn them into records and answers. See Voice and AI below.
If you pay for a SahajBiz plan: the plan, its status and Razorpay's subscription reference — to bill you. No card numbers, bank details, UPI PINs or passwords are ever stored.
Security records: when you signed in, exported or deleted data, and every consent you gave or withdrew — to protect your account and to show what you agreed to.
Usage counts: which screens and buttons are used — for example "bill sent", "shop link shared", "order saved" — with the time, your account or a random device number, and your app language, and, if you started from a SahajBiz bill or shop link, which shop's link it was. Never customer names, phone numbers, amounts or what an order or message says. To learn which features help and to fix the ones that don't. You can switch this off in Settings → Privacy & rights.
Only if you switch on the morning brief: your browser's push address and the keys that lock the message — to send one notification each morning with today's number of deliveries, late orders and the total still to collect. It never carries a customer's name. It travels through your browser's own push service (Google, Apple, Mozilla or Microsoft), encrypted so that service cannot read it. The push address is deleted when you switch the brief off, when your browser retires it, or with your account.
Anonymous visit counts, before you agree to anything: how many visits there are each day and how many reach each step (visit, try-it opened, consent screen shown, consent agreed), with the label of the link they came from, such as an Instagram bio. Only counts, added to a daily total: no account, no device number, no cookie, nothing that says which visitor did what. Our hosting providers keep their usual server logs of requests.
Where it lives
Data is kept in the browser on the device being used, and synced to a Supabase database when signed in. Every table is protected by Row Level Security, so a signed-in account can read and write only its own rows.
With the app open, you can read records and save typed orders without internet. Dictation needs a connection; saved device records sync when the app reconnects.
Voice and AI
AI features are optional and stay off until you switch them on. You can switch them off at any time in Settings → Privacy & rights; the app keeps working and reads orders on your phone instead.
With AI on and signed in, the microphone records what you say and sends the audio to Sarvam AI, in India, to turn it into text. Order and expense sentences, product notes and product photos are sent to OpenAI, in the United States, to pull out the customer, items, quantities, dates and amounts. When you ask the assistant a question, the question and a summary of your recent orders — customer names, items, amounts and dates, never phone numbers — are sent to OpenAI to answer it. Nothing is sent unless you use one of these features.
With AI off, or when not signed in, speech is turned into text by your browser's own speech recognition (in Chrome, this is provided by Google), and orders are read by a rule-based parser on your phone. SahajBiz does not keep voice recordings.
Most messages are not sent by SahajBiz at all: the app prepares the text and opens WhatsApp, and the owner presses send from their own account.
A business that has connected the WhatsApp Business Platform can also receive orders as messages and have replies sent through Meta. In that case the message content and phone number pass through Meta under Meta's own privacy policy, and an incoming message becomes an order in that owner's ledger.
Payments
Bills carry a UPI QR code and a payment link built on the device from the owner's UPI ID and the amount due. Money moves directly from the customer's bank to the owner's, through their own UPI app.
SahajBiz is not a payment processor, takes no commission, and has no access to either party's bank account. Razorpay is used only for a SahajBiz subscriber's payment for a SahajBiz subscription; we never accept or process that subscriber's customer payments.
Bill and shop links
A shop link is a public page with your price list. It is off until you switch it on in Catalog, and shows only what you choose to publish there: your business name, tagline, phone number, and your items with their photos, descriptions and prices. Costs and margins never appear on it. Anyone with the link can open it. It is listed on Google and other search engines only if you also switch on "Show on Google". You can make a new link at any time; the old one then stops working.
A bill link lets a customer see their bill in a browser. It is made for one order and cannot be guessed. It shows your business name, phone number and UPI ID, the customer's name, the items, amounts, what is paid and what is due. It never shows the customer's phone number or address. It is never listed on search engines, and stops working when you delete the order or 90 days after its delivery date.
Bill and shop pages carry a small "Made with SahajBiz" link, and owners can share an invite link. People who open these pages are not tracked or counted. If someone arrives from one of these links, their phone remembers which shop's link it was. If they create an account within 7 days, we record that account against the shop that referred it, so both can earn referral rewards (see our Terms): only which account referred which, when, and whether the reward was earned — counted from the number and dates of orders, never what they say. The shop that referred them sees only how many owners joined, never who. This record is kept while both accounts exist and is deleted with the new owner's account.
Who we share it with
No advertising. No third-party analytics or tracking scripts: usage counts (see What we collect) stay in SahajBiz's own database and go to nobody else. No selling, renting or sharing of data with anyone. No profiling of customers across businesses.
We share data only with the service providers that run the app, and each gets only what it needs: Supabase (database and storage), Vercel (hosting), Sarvam AI (speech to text, India), OpenAI (AI features, United States), Razorpay (SahajBiz subscriptions), Sentry (error reports, European Union: the error message only, with phone numbers and email addresses removed), and Meta if WhatsApp messaging is connected. OpenAI, Sentry and Vercel may process data outside India. If you switch on the morning brief, your browser's push service carries it, encrypted (see What we collect).
How long we keep it
Your account and business records are kept while your account exists, and erased — photos included — when you delete it. The copy on your phone stays until you clear it.
Records of your consent and of the account's deletion are kept for up to one year after the account is gone, as proof. Security records are kept for one year. A question or complaint is kept for three years after it is closed.
Usage counts are deleted after 12 months, straight away when you switch them off, and with everything else when you delete your account.
Getting your data out, and deleting it
Settings has a backup export that downloads everything — orders, customers, products, expenses — as a file you keep.
Settings has a Delete this account button: it erases everything belonging to the account at once — orders, customers, products, expenses, photos and message logs — with no archived copy left behind. You can also write from the email address on the account, using the Contact section at the end of this page, and ask for deletion; a request made that way is completed within 30 days.
A customer who wants their details removed should ask the business they ordered from, since the record belongs to that owner's ledger. Owners can delete a customer and their orders from the Customers tab at any time.
Your rights
You can see a summary of what SahajBiz holds about you and who else handles it, and download all of it, in Settings → Privacy & rights.
You can correct or update your details at any time, and erase everything by deleting your account.
You can name a nominee in Settings → Privacy & rights, who may exercise these rights for you if you die or cannot act yourself.
To make a request or a complaint, use the form in Settings → Privacy & rights, or email contact@sahajbiz.com from the address on your account (that address is how we identify you). We answer within 90 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Your consent
When you start, you are asked to agree to this notice and to confirm you are 18 or older. AI features are a separate choice, off unless you tick them.
You can withdraw consent as easily as you gave it: switch AI off in Settings, or delete your account to withdraw everything. Once withdrawn, we stop that processing; what was done before stays lawful.
Usage counts are on when you agree to this notice. Switching them off in Settings → Privacy & rights stops them and deletes what was kept; the app works the same either way.
Children
SahajBiz is for business owners aged 18 or older. We do not knowingly process a child's data for any purpose of our own, do not track children, and do not show advertising.
Customers of a business
Customers never sign up. The business they order from writes down what it needs to take the order — usually a name, phone number, address, the items and the amount — and decides how long to keep it.
A customer who wants their details removed should ask the business they ordered from, since the record belongs to that owner's ledger. Owners can delete a customer and their orders from the Customers tab at any time.
If a business sends you a bill link, it shows your name and your order to anyone you or the business share it with, and nothing else about you — not your phone number or address. Ask the business to delete the order if you want the link to stop working sooner.
Contact and Grievance Officer
Grievance Officer: Swati Sonawane, contact@sahajbiz.com, 9, SaiGanesh Apartment, Nashik, Maharashtra, 422009. Write here with any question about this notice, a request about your data, or a complaint. If you reached this page from a bill, contact the business that sent it about your order.
Payments and billing
Razorpay handles only the payment a SahajBiz subscriber makes to SahajBiz for that subscription. It does not handle a merchant's customer payments. Your card, UPI or bank details go to Razorpay directly and are never seen or stored by SahajBiz.
SahajBiz keeps only what it needs to run your plan: which plan you are on, its status and renewal date, and Razorpay's reference ids for your subscription. No payment instrument details are stored.