Privacy Policy

Legal Entity: ServiceBandhu LLP

Website: servicebandhusaas.online

Privacy Contact: info@servicebandhusaas.online

ServiceBandhu LLP is incorporated and operated in India. This policy is subject to applicable Indian data protection laws including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We collect the following categories of information:

Account Information:

• Full name and email address (collected via Google OAuth sign-in or direct registration)
• Profile photo (provided by Google if you sign in with Google)
• Phone number (optional, for WhatsApp features and account recovery)
• Business type, industry, and goals shared during onboarding

Payment Information:

• Subscription plan (Free, Gold at $19/month, Pro at $99/month, or Lifetime at $999 one-time)
• PayPal subscription ID and transaction references
• We do not store credit card numbers or full PayPal credentials — all payment data is handled securely by PayPal, Inc.

Usage Data:

• Features and pages you access within the platform
• Time and frequency of use, session duration
• IP address, browser type, and device information
• CRM leads, funnels, and other data you create within the platform

• To create and manage your account on servicebandhusaas.online
• To provide access to platform features appropriate to your subscription tier (Free, Gold, or Pro)
• To process subscription payments via PayPal and manage billing cycles
• To authenticate your identity via Google OAuth when you choose to sign in with Google
• To send transactional emails (account confirmation, payment receipts, expiry notices)
• To send platform updates, feature announcements, and marketing communications (you may opt out at any time)
• To personalise your dashboard, recommendations, and learning content
• To improve the platform through aggregated, anonymised usage analytics
• To enforce our Terms of Service and prevent fraud or abuse
• To comply with applicable legal obligations

We offer sign-in via Google OAuth 2.0. When you choose this option, Google shares the following with us:

• Your name and email address as registered with Google
• Your profile picture URL
• A unique Google ID used for authentication

We do not access your Google Drive, Gmail, Contacts, or any other Google services. We only use the data Google provides to create and authenticate your ServiceBandhu account. Google's use of data is governed by Google's Privacy Policy.

Subscription payments for Gold ($19/month) and Pro ($99/month) plans, and one-time payments for the Lifetime plan ($999), are processed by PayPal, Inc. We integrate with PayPal's Hosted Buttons and Subscription APIs. When you make a payment:

• You are redirected to PayPal's secure checkout environment
• PayPal processes and stores your payment method details — we never see your card number or PayPal password
• PayPal sends us webhook notifications confirming subscription activation, renewal, cancellation, or expiry
• We store only your PayPal subscription ID and transaction status to manage your membership

PayPal's data practices are governed by PayPal's Privacy Statement.

We do not sell, rent, or trade your personal data to any third party for marketing purposes. We may share data with:

• PayPal: For payment processing (subscription management only)
• Google: For OAuth-based authentication
• Infrastructure Providers: Secure cloud hosting and database services bound by confidentiality agreements
• Email Service Providers: For transactional and marketing emails
• Analytics Tools: Aggregated, anonymised data only — no personally identifiable information
• Law Enforcement: Only when legally required by a valid court order or applicable Indian law

We retain your account data for as long as your account is active. If you delete your account:

• Personal data is permanently deleted within 30 days of your deletion request
• Payment records may be retained for up to 7 years for legal and tax compliance purposes
• Anonymised, aggregated usage data may be retained indefinitely for analytics

ServiceBandhu LLP is committed to protecting your data through layered technical and organisational security controls. Below is a transparent overview of how we handle data security:

Encryption

• Data in transit: All communication between your browser and our platform is encrypted using TLS 1.2 or higher (HTTPS). We enforce HTTPS site-wide and do not serve any content over unencrypted HTTP.
• Data at rest: All data stored in our databases is encrypted using AES-256 encryption. Backups are also encrypted before storage.
• Passwords: Passwords are hashed using industry-standard bcrypt with appropriate salt rounds. We never store passwords in plain text.
• Payment data: No payment card or PayPal credential data is stored on our servers. All payment processing occurs within PayPal's PCI-DSS compliant environment. PayPal webhook events are verified using cryptographic HMAC signature validation before any action is taken.

Access Controls

• Access to production systems and personal data is strictly limited to authorised ServiceBandhu LLP personnel on a need-to-know basis
• Role-based access controls (RBAC) are enforced across all internal systems
• All administrative access requires multi-factor authentication (MFA)
• Access logs are maintained and reviewed regularly for suspicious activity
• When team members leave or change roles, access is revoked immediately

Backups

• Automated daily backups of all platform data are performed
• Backups are encrypted and stored in geographically redundant secure cloud storage
• Backup integrity is tested periodically to ensure successful restoration
• Backup retention follows our data retention policy — active account data is retained for the account's lifetime; deleted account data is purged within 30 days

Incident Response

• We maintain an internal incident response procedure for data breaches and security events
• In the event of a data breach that affects your personal data, we will notify you by email within 72 hours of becoming aware of the breach
• Breach notifications will include: the nature of the breach, categories of data affected, likely consequences, and steps taken to address it
• We will also notify applicable authorities as required by Indian law (IT Act, 2000 and applicable CERT-In guidelines)
• To report a security vulnerability, email info@servicebandhusaas.online with the subject "Security Disclosure"

Third-Party Processors

We engage the following categories of third-party data processors who may process your personal data on our behalf. All processors are bound by data processing agreements and are required to maintain appropriate security standards:

• PayPal, Inc. — Payment processing and subscription management. Processes: subscription ID, transaction status, billing email. Governed by PayPal's Data Processing Agreement.
• Google LLC — OAuth 2.0 authentication. Processes: name, email, profile picture for sign-in only. Governed by Google's Terms and Data Processing Amendment.
• Cloud Infrastructure Provider — Hosting, database, and file storage. Processes: all platform data at rest. Bound by confidentiality and DPA obligations.
• Email Delivery Provider — Transactional and marketing emails. Processes: name and email address for communication delivery.
• Analytics Provider — Platform usage analytics. Processes: anonymised, aggregated behavioural data only — no PII is shared.

We do not engage any third-party processor without a written agreement requiring them to protect your data to standards equivalent to or higher than our own. We review and update our processor list periodically.

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security against all threats.

You have the following rights regarding your personal data. To exercise any of these rights, email info@servicebandhusaas.online with the subject line "Data Rights Request". We will acknowledge within 5 business days and respond fully within 30 days.

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences and settings
• Understand how the platform is used (analytics)

You can disable cookies in your browser settings, though this may affect platform functionality. We do not use advertising cookies or track you across third-party websites.

ServiceBandhu SaaS is not intended for children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly. If you believe a minor has registered, contact us at info@servicebandhusaas.online.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email. Continued use of the platform after changes constitutes your acceptance of the updated policy.

For any privacy-related questions, requests, or concerns:

ServiceBandhu LLP

Website: servicebandhusaas.online

Email: info@servicebandhusaas.online