Privacy Policy
Last updated: October 2026 · OpenSoz, India
How OpenSoz collects, uses, protects and shares personal data under Indian law, including the DPDP Act 2023.
1. Introduction
This Privacy Policy explains what personal data OpenSoz collects, why it collects it, how it is used and protected, and what rights you have over it. OpenSoz is an India-focused developer platform, and this policy is written to comply with Indian law, including the Information Technology Act 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and the Digital Personal Data Protection Act 2023 (DPDP Act). Personal data means information that identifies you or can reasonably be used to identify you. If you do not agree with this policy, please do not use OpenSoz services, and contact support@opensoz.com with any question before proceeding.
2. Data we collect
OpenSoz collects data you provide directly, such as your name, email, phone or WhatsApp number, business name, project description, reference links and any file or brief you share through the Start Your Project form. Product accounts collect the data needed to run the product, such as business details, customer records you enter for billing or reviews, and account settings. OpenSoz also collects limited technical data automatically, such as pages visited, device and browser type, and approximate location from IP address, for security, performance and analytics. Payment card details are handled by payment providers and are not stored by OpenSoz as raw card data.
3. How we use your data
Your data is used to provide the services you requested: reviewing and quoting projects, building and delivering websites and apps, running OpenBill Pro and ReviewMitra, sending project updates and product messages, and providing support. It is also used to keep services secure, to detect misuse, to improve products, and to comply with legal obligations such as tax and accounting. Marketing messages, where sent, are limited to OpenSoz products and services, and you can opt out of marketing at any time. OpenSoz does not sell your personal data to data brokers or advertisers, and it does not use your customer billing or review data to advertise to your customers.
4. Legal basis under Indian law
Under the DPDP Act 2023, personal data is processed on the basis of your consent, or where processing is necessary to perform a contract with you, to comply with a legal obligation, or for another lawful purpose recognised by the Act. When you submit a project form or create a product account, you consent to the processing described in this policy for the purpose of providing that service. You may withdraw consent for optional processing, such as marketing or optional analytics cookies, without affecting the lawfulness of processing that happened before withdrawal. Where a purpose changes materially, OpenSoz will seek fresh consent where the law requires it.
5. Cookies and similar technologies
OpenSoz uses cookies and similar technologies as described in the Cookie Policy. Necessary cookies keep the site working, such as remembering your theme choice and cookie preferences. Analytics cookies, where enabled with your consent, help OpenSoz understand which pages are useful and where the site can be improved. Marketing cookies are optional and are only used with your consent. You can accept all cookies, reject optional cookies, or manage preferences at any time through the cookie banner or the Cookie Policy page. Blocking necessary cookies may affect how parts of the site work, but the main content remains accessible.
6. Third-party processors
OpenSoz uses third-party processors to run its services, and each processor handles data only for the purpose OpenSoz instructs. Categories include hosting and infrastructure, email delivery for project notifications and confirmations, payment processing for product subscriptions, analytics where you have consented, and AI services for the OpenSoz Assistant and for ReviewMitra's Gemini-powered replies. Processors are expected to protect data with reasonable security practices consistent with the IT Rules 2011. A full list of processor categories, and the purpose of each, is maintained in this section and updated when a processor changes. If you need details of a specific processor, contact support@opensoz.com.
7. Sharing and disclosure
OpenSoz does not share your personal data with third parties except as described in this policy: with processors who run the service, with your consent, or where disclosure is required by Indian law or by a lawful order of a court or authority. If OpenSoz is involved in a business reorganisation, data may transfer as part of that transaction, subject to the same protections. OpenSoz will not disclose your data to a third party for that party's own marketing without your consent. Where the law permits, OpenSoz will inform you of a legal disclosure request relating to your data, unless it is prohibited from doing so.
8. Data retention
OpenSoz keeps personal data only for as long as needed for the purpose it was collected, or as required by law. Project request data is kept while the project is being handled and for a reasonable period afterwards for support, accounting and legal records. Product account data is kept while the account is active, and for a limited period after cancellation to allow recovery and to meet tax and legal obligations. After that period, data is deleted or anonymised. Backups may retain data for a short additional period before being overwritten, and OpenSoz will not use backup data for any purpose other than restoration.
9. Security
OpenSoz uses reasonable security practices to protect personal data, consistent with the IT Rules 2011, including encrypted connections in transit, access controls so only authorised staff can access account data, and regular updates to its systems. Product data benefits from measures such as AES-256 security and email verification in ReviewMitra, and careful handling of billing data in OpenBill Pro. No system is completely secure, however, and you should keep your passwords private, use a unique password for each service, and never share OTPs, UPI PINs or passwords with anyone claiming to be support. If you suspect unauthorised access, contact support@opensoz.com immediately.
10. Your rights
Under the DPDP Act 2023, you have rights over your personal data, including the right to access a summary of your data, to correct inaccurate or incomplete data, to erase data where the law allows, and to raise a grievance about processing. You can exercise these rights by emailing support@opensoz.com with your account or project details, and OpenSoz will respond within a reasonable time and in line with the Act. Where a request cannot be met in full — for example, because data must be kept for tax records — OpenSoz will explain why. You also have the right to approach the Data Protection Board of India or another competent authority if you believe your rights have not been respected.
11. Children's data
OpenSoz services are intended for businesses and adults, and OpenSoz does not knowingly collect personal data from children. If you are a parent or guardian and believe a child's data has been submitted to OpenSoz, please contact support@opensoz.com so it can be reviewed and removed where appropriate. Businesses that use OpenSoz products or websites should avoid collecting children's data through their own forms unless they have a lawful basis and parental consent where required by law. This section will be updated if OpenSoz ever offers a service specifically designed for younger users, which it does not do today.
12. International transfers and grievance
Some processors used by OpenSoz may store or process data outside India, for example for hosting or email delivery. Where data is transferred internationally, OpenSoz relies on the safeguards permitted under Indian law, including contractual protections with processors. For any privacy grievance, contact OpenSoz at support@opensoz.com in the first instance, and see the Grievance Redressal page for the Grievance Officer process under the IT Rules. OpenSoz aims to acknowledge grievances promptly and to resolve them within the timelines required by applicable law, and will keep you informed of progress where the law requires it.
13. Changes to this policy
OpenSoz may update this Privacy Policy to reflect changes in services, processors or law. Material changes will be notified on the website or by email where you have provided one, and the updated policy will apply from the stated effective date. The last-updated date is shown at the top of this page. If you continue to use the services after a change takes effect, you accept the updated policy. If you do not accept a material change, you may stop using the services and cancel a product subscription at the end of the current billing period, subject to the retention rules above.
Questions about this page? Email support@opensoz.com.