Privacy Policy

1. Who we are

Bihar Directory (“we”) operates www.bihardirectory.com and the Bihar Directory Android app — a local business discovery platform for Bihar, India. We are the data fiduciary under the Digital Personal Data Protection Act, 2023 for personal data processed on the platform. General contact: info@bihardirectory.com. Privacy and complaints: grievance@bihardirectory.com.

2. What we collect and why

Account: name, mobile number (verified by OTP), optional email and location — to create and secure your account.

Business listings: business name, category, address, contact numbers, services, photos, hours — provided by the owner to create a public listing. Published by design.

Enquiries: your name, phone number and message — passed only to the business you chose. Never sold, never shared with any other business.

Payments: processed by Razorpay Software Pvt. Ltd., an RBI-authorised payment aggregator. We receive only payment status and transaction identifiers. We never see or store card numbers, UPI PINs or bank credentials. Razorpay’s own privacy policy applies to data you enter at checkout.

Technical data: standard server logs (IP address, browser type) for security and abuse prevention.

3. Consent (Section 6, DPDP Act)

You give consent at the point of collection — creating an account, submitting a listing or sending an enquiry — after being shown a link to this policy and our Terms, by ticking the consent box. Consent is free, specific, informed and unambiguous, and you may withdraw it at any time by writing to the Grievance Officer. Withdrawal is as easy as giving consent: one email. It stops future processing and triggers deletion, subject to records we must keep under Indian law (e.g. payment records under tax law).

4. Storage & security

Data is stored on servers located in India (Mumbai region). We apply reasonable security safeguards as required by Section 8 of the DPDP Act: HTTPS/TLS encryption in transit, row-level security on all database tables, least-privilege access, server-side payment verification, and audit logging. In the event of a personal data breach we will notify the Data Protection Board of India and affected users as the Act requires.

5. Your rights (Chapter III, DPDP Act)

As a Data Principal you have the right to: access a summary of your personal data and how it is processed; correction and erasure of your data; grievance redressal through our Grievance Officer and, if unresolved, the Data Protection Board of India; and to nominate another person to exercise your rights in case of death or incapacity.

To exercise any right, email grievance@bihardirectory.com from your registered number or email. We verify identity before acting and respond within statutory timelines (at most 30 days). You can also delete your account yourself at any time from the app (Profile → Delete my account) or at bihardirectory.com/delete-account.

6. Cookies

We use only essential cookies/local storage (login session, language preference). No advertising or cross-site tracking cookies. Details in our Cookie Policy.

7. Children

The service is intended for persons 18 or older. We do not knowingly process children’s data and do not undertake tracking or targeted advertising directed at children (Section 9, DPDP Act). If you believe a child’s data was submitted, write to the Grievance Officer and we will delete it.

8. Retention

Listing data stays public while the listing is active. Enquiry data: 12 months, then deleted. Server logs: up to 90 days. Payment records: as required by Indian financial law (currently 8 years). Deleted accounts are erased within 30 days of a verified request.

9. Grievance Officer (IT Rules, 2021 & DPDP Act)

Email: grievance@bihardirectory.com · Bihar Directory, Patna, Bihar, India. Complaints are acknowledged within 24 hours and resolved within 15 days, or earlier where the law prescribes a shorter timeline. See our Grievance page for the full procedure.

10. Users outside India

The service is offered only in India and directed only at users in India. If you access it from elsewhere, your data is processed in India under this policy and Indian law.