Legal & Compliance

Privacy Policy

Last updated: August 30, 2026

1. Introduction

Welcome to BusinessOS (“we,” “our,” or “us”). We are committed to protecting the privacy, confidentiality, and security of your business and personal information. This Privacy Policy outlines how we collect, process, store, and safeguard your data when you use the BusinessOS platform at businessos.rauhansheikh.com.

2. Information We Collect

We collect only the information necessary to provide and operate our multi-tenant business operating system:

  • Account & Identity Information: Name, work email address, password hashes (salted and encrypted), and OAuth credentials (when using Google Sign-In).
  • Business Profile Data: Company name, legal entity name, GSTIN (Goods and Services Tax Identification Number), PAN (Permanent Account Number), registered address, phone number, and base operational currency.
  • Operational & Financial Records: Customer and vendor details, ledger transactions (sales, purchases, payments, adjustments), transaction notes, reference numbers, and snapshot balance calculations.
  • Technical & Audit Metadata: IP addresses, browser user-agents, authentication timestamps, and session logs for security auditability.

3. Multi-Tenant Data Isolation

BusinessOS enforces strict multi-tenant boundaries. All queries, transactions, and customer balances are strictly scoped to your authenticated Business ID. Users belonging to other business workspaces cannot access, view, or query your records under any circumstances.

4. How We Use Your Data

  • To operate, compute, and present your company financial ledger and party statements.
  • To authenticate users and verify role-based permissions (Owner, Admin, Accountant).
  • To dispatch account verification emails, password reset links, and critical security notices.
  • To detect, prevent, and log suspicious authentication attempts and security anomalies.

5. Data Sharing & Third-Party Processors

We do not sell, rent, or monetize your business records or contact databases. We share data only with essential infrastructure service providers bound by strict confidentiality:

  • Database Hosting: Neon PostgreSQL (encrypted at rest and in transit).
  • Transactional Email: Resend for automated transactional notices and verification links.
  • Application Hosting: Vercel for serverless edge execution.

6. Data Retention & Your Rights

You retain ownership of all data entered into BusinessOS. You have the right to access, rectify, or request the export and deletion of your business and personal records at any time.

7. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact our legal team at support@mail.businessos.rauhansheikh.com.