Privacy Policy

Introduction

Welcome to Bombay Softwares ("Company", "we", "our", or "us"). We are a software product company registered and operating from Shop No. 8, City Center Mall, Andheri West, Mumbai, Maharashtra 400058, India.

This Privacy Policy describes how we collect, use, process, disclose, and safeguard your personal information when you visit our website bombaysoftwares.shop, use our software products, or engage with any of our services.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you disagree with any part of this policy, please do not use our services.

Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide to us when you:

• Fill out an enquiry or contact form on our website
• Register for an account or product demo
• Purchase or license one of our software products
• Subscribe to our newsletter or marketing communications
• Communicate with our support team via email, phone, or chat
• Participate in surveys, feedback forms, or promotional activities

This information may include: full name, email address, phone number, company name, business address, GST number, billing information, and any messages or content you submit to us.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location
• Browser type, version, and language preferences
• Device type, operating system, and screen resolution
• Pages visited, time spent, and click paths on our website
• Referring URL and search queries that led you to our site
• Session duration, bounce rate, and other engagement metrics

2.3 Information from Third Parties

We may receive information about you from third-party sources such as business partners, social media platforms, analytics providers, and publicly available sources. This information is used to supplement our existing records and improve the relevance of our communications.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To process enquiries, deliver purchased software, manage licenses, and provide customer support.
• Account Management: To create and manage your user account, authenticate your identity, and maintain account security.
• Communication: To respond to your queries, send service updates, receipts, and product-related notifications.
• Marketing: To send promotional offers, newsletters, and information about new products (subject to your consent and opt-out rights).
• Product Improvement: To analyze usage patterns, conduct A/B testing, and improve the functionality and user experience of our software products.
• Legal Compliance: To comply with applicable Indian laws, respond to legal requests, and enforce our terms and agreements.
• Fraud Prevention: To detect, prevent, and investigate fraudulent transactions, abuse, and security incidents.
• Analytics: To generate aggregate, anonymized reports on website performance and product usage trends.

Notification and Communication Consent

By accepting this policy, you acknowledge and consent to receive notifications and promotional communications from us through various channels, including but not limited to email, mobile push notifications, SMS, RCS (Rich Communication Services), WhatsApp, OBD (Outbound Dialing), Google RCS, or any other digital communication platforms.

These communications may include:

• Service updates, feature announcements, and product launch notifications
• Promotional offers, discounts, and limited-time deals on our software products
• Educational content, tutorials, and tips to maximize your use of our software
• Industry news, webinar invitations, and event announcements
• Transactional messages including receipts, invoices, and account alerts
• Renewal reminders, subscription alerts, and support follow-ups

4.1 Your Consent

When you submit an enquiry or contact form on our website and check the consent checkbox, you expressly consent to receive communications from Bombay Softwares via SMS, email, OBD calls, Google RCS, and WhatsApp regarding your services, offers, and updates.

4.2 Opting Out of Communications

If you prefer not to receive such updates or marketing communications, you may opt out at any time by:

• Clicking the "Unsubscribe" link in any marketing email we send you
• Replying "STOP" to any SMS message from us
• Contacting us directly at info@bombaysoftwares.shop
• Calling our support number at +91 97800 70299

4.3 TRAI Compliance

All SMS and voice-based communications from Bombay Softwares are sent in compliance with the Telecom Regulatory Authority of India (TRAI) guidelines and the applicable Do Not Disturb (DND) regulations. Commercial communications are sent only through registered Sender IDs and approved message templates.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who perform services on our behalf (e.g., payment processing, email delivery, cloud hosting, analytics). These providers are contractually bound to protect your data.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that business transaction. We will notify you via email and/or prominent website notice.
• Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, property, and safety and that of our users.
• Consent: With any third party when you have given us explicit consent to do so.

Data Security

We implement industry-standard technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, disclosure, alteration, or destruction. Our security practices include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• AES-256 encryption for sensitive data stored in our databases
• Role-based access controls (RBAC) limiting employee access to personal data on a need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Secure, geo-redundant cloud infrastructure hosted in India (compliant with data residency requirements)
• Two-factor authentication (2FA) for all administrative access to systems containing personal data
• Regular employee training on data protection and cybersecurity best practices

While we take every reasonable precaution, no method of data transmission or electronic storage is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately if you suspect any unauthorized access to your account.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your browsing experience and analyze site usage. Cookies are small text files stored on your device.

Types of Cookies We Use

• Essential Cookies: Required for the basic functionality of our website. These cannot be disabled.
• Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). All data is anonymized.
• Functional Cookies: Remember your preferences (e.g., language settings, form data) to improve your experience.
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. You may opt out via your browser settings.

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of our website.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account data is retained for the duration of your relationship with us and for 3 years thereafter
• Transaction and billing records are retained for 7 years to comply with Indian tax laws
• Communication records (emails, support tickets) are retained for 2 years
• Website analytics data (anonymized) is retained for up to 26 months
• Marketing consent records are retained for the duration of the consent plus 2 years

Upon request, we will delete or anonymize your personal data, subject to any legal obligations requiring retention.

Your Privacy Rights

As a data subject, you have the following rights under applicable Indian data protection laws (including the Digital Personal Data Protection Act, 2023):

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restrict Processing: Ask us to limit how we use your personal data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent for communication at any time, without affecting the lawfulness of processing based on consent before withdrawal.
• Right to Nominate: Nominate an individual to exercise rights on your behalf in case of death or incapacity.

To exercise any of these rights, please contact us at info@bombaysoftwares.shop. We will respond to your request within 30 days.

Third-Party Services and Links

Our website may contain links to third-party websites, payment gateways, and integrated services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you interact with through our platform.

Third-party services we may integrate with include:

• Payment gateways (Razorpay, PayU, HDFC Payment Gateway)
• Communication platforms (WhatsApp Business API, SMS gateways)
• Analytics tools (Google Analytics, Hotjar)
• Cloud infrastructure providers (AWS, Google Cloud, Azure India regions)

Children's Privacy

Our services are not directed at, and we do not knowingly collect personal information from, children under the age of 18. If we become aware that we have collected personal information from a minor without parental consent, we will take prompt steps to delete such information from our systems. If you believe we may have inadvertently collected information from a minor, please contact us at info@bombaysoftwares.shop.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post a prominent notice on our website
• Send an email notification to registered users where the changes materially affect how we process their data

Your continued use of our services after any changes to this policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed.

Contact Us — Privacy Queries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to our Data Protection Officer: