Privacy Policy

This Privacy Policy explains how Nidhi Retail Solution, trading as BlivoTech ("BlivoTech", "we", "us") collects, uses, stores, shares and protects information when you visit blivotech.com, contact us, or engage us to operate e-commerce, marketplace, advertising, shipping, messaging or accounting services on your behalf.

1. Who we are

BlivoTech is the trading name of Nidhi Retail Solution, a sole proprietorship registered in India with its principal place of business at 2, Ganga Enclave 1, P-Pocket, Ganga Nagar, Mawana Road, Meerut – 250001, Uttar Pradesh, India. Our GSTIN is 09CLXPS4276G1Z5. As a sole proprietorship we have no CIN. Nidhi Retail Solution is the entity verified with Meta Platforms for our use of the WhatsApp Business Platform and the Meta APIs. For any privacy question, or to exercise any right described below, write to [email protected].

2. Information we collect

• Information you give us: name, business name, email address, phone number, billing address, GSTIN and the contents of enquiries you send us.
• Client business data: where you engage us as a service provider, we process data from your own systems — product catalogues, orders, shipping addresses, invoices, advertising performance and customer messages — strictly to deliver the services you asked for.
• Website usage data: IP address, browser type, device type, pages viewed, referring page and time of visit.
• Cookies and similar technologies: see section 7.

3. Data we access through third-party APIs

To operate the services our clients ask for, we connect to third-party platforms using credentials and authorisations that the client grants. This includes, depending on the engagement:

• Amazon Advertising API and Amazon Selling Partner API — campaign, keyword, ad performance, order, inventory and settlement data belonging to the client's own seller account.
• Meta (Facebook and Instagram) Graph and Marketing APIs — page and ad account data, ad performance, catalogue data, and messages sent to the client's own business accounts.
• Google Ads, Google Merchant Center and Google Analytics — campaign, product feed and website analytics data.
• WhatsApp Business Platform — messages exchanged between the client's business number and its customers.
• eBay, other marketplaces, courier aggregators, payment gateways and accounting systems — order, shipment, payment and ledger data.

Data obtained through these APIs is used only to provide the agreed service to the client who authorised the connection. We do not sell it, we do not use it to build advertising profiles of our own, we do not share it with other clients, and we do not combine one client's data with another's. Access tokens are stored encrypted, are used only by the automated processes that need them, and are revoked and deleted when an engagement ends or when the client withdraws authorisation.

4. How we use information

• To respond to enquiries and provide quotations.
• To deliver, operate, maintain and support the services you have engaged us for.
• To create and manage advertising campaigns, product listings, shipments, invoices and customer communications on your instruction.
• To generate reports for you on performance, sales, spend and operations.
• To send service-related communications, invoices and support notices.
• To improve the security, reliability and performance of our own website and systems.
• To comply with legal, tax and accounting obligations in India.

5. Legal basis

We process personal data on the basis of your consent, the performance of a contract with you, our legitimate interest in running and securing our business, and our legal obligations. Where we act on a client's behalf, the client is the data controller and BlivoTech acts as a data processor following the client's documented instructions.

6. Sharing

We do not sell personal data. We share it only with:

• the platforms named in section 3, as necessary to carry out your instructions;
• hosting, email, payment and infrastructure providers who process data on our behalf under confidentiality obligations;
• our professional advisers, and government or judicial authorities where required by law.

7. Cookies

blivotech.com uses cookies that are strictly necessary for the site to work, and — only where you consent — analytics cookies that help us understand which pages are useful. You can refuse or delete cookies through your browser settings; the site will continue to function.

8. Retention

Enquiry data is kept for up to 24 months. Client business data is kept for the duration of the engagement and for up to 90 days after it ends, after which it is deleted or returned, unless Indian tax or company law requires a longer retention of invoices and accounting records (normally eight financial years). API access tokens are deleted immediately on termination or withdrawal of authorisation.

9. Security

We use HTTPS/TLS on our website and client portals, encrypted storage for credentials and tokens, access control limited to the personnel who need it, server firewalls, regular patching and nightly encrypted backups. No system is perfectly secure, but we take these measures seriously and review them regularly.

10. International transfers

Our servers are located in India and in the European Union. Where the platforms we integrate with process data outside India, that transfer is governed by those platforms' own terms and safeguards.

11. Your rights

You may ask us to confirm what personal data we hold about you, correct it, delete it, restrict or object to its processing, or provide it in a portable form. You may also withdraw consent at any time. Write to [email protected] and we will respond within 30 days. See our Data Deletion page for the deletion procedure.

12. Children

Our services are intended for businesses. We do not knowingly collect personal data from children under 16.

13. Changes

We may update this policy. The revision date at the top of this page always shows the current version, and material changes will be notified to active clients by email.

14. Grievance Officer (India)

Under India's Digital Personal Data Protection Act, 2023, our Grievance Officer is Vishu Gupta, reachable at [email protected] or by post at the address below. Write to the Grievance Officer if you are not satisfied with how we have handled a request or a complaint about your personal data; we will respond within 30 days. If you remain dissatisfied, you may complain to the Data Protection Board of India.

15. Contact

Questions, complaints and requests: [email protected].