BizMagnet ERP Privacy Policy

BizMagnet ERP is a business management and enterprise resource planning platform provided by AIN Technologies ("AIN Technologies", "we", "us", or "our").

This Privacy Policy explains how we collect, use, store, disclose, protect, and otherwise process personal information when you access or use the BizMagnet ERP platform, website, applications, integrations, and related services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

BizMagnet ERP is operated and provided by:

• AIN Technologies
• [Registered Office Address]
• [City, State, Country]
• Website: https://bizmagneterp.com
• Email: support@bizmagneterp.com

Depending on how you use BizMagnet ERP, we may collect different categories of information.

2.1 Account Information

When you create or manage an account, we may collect:

• Name
• Business or organization name
• Email address
• Mobile or telephone number
• Job title or role
• Username
• Login credentials
• Account preferences
• Subscription and plan information

2.2 Business Information

BizMagnet ERP is designed to manage business operations. Customers may enter or upload business information such as:

• Customer and supplier information
• Product and inventory information
• Sales and purchase records
• Invoices and quotations
• Payment and transaction records
• Employee and HR information
• Attendance and payroll-related information
• Rental or vehicle information
• Legal and contract information
• Accounting information
• Tax and invoicing information
• Documents and files
• Business reports and operational records

The information entered into BizMagnet by a customer may contain personal information relating to the customer's employees, customers, suppliers, contractors, or other individuals.

2.3 Payment Information

Where applicable, we may collect information relating to subscriptions, invoices, and payments. Payment card information may be processed directly by third-party payment service providers. We do not store complete payment-card information on our own systems.

2.4 Technical and Usage Information

When you access the Services, we may automatically collect information such as:

• IP address
• Browser type and version
• Operating system
• Device type
• Device identifiers
• Login timestamps
• Session information
• Pages or features accessed
• Approximate usage information
• Error logs
• Performance and diagnostic information
• Security-related events

2.5 Communication Information

If you contact us through email, support channels, contact forms, chat, telephone, or other communication methods, we may retain information necessary to respond to your request and maintain support records.

We use information collected through the Services for legitimate business and service-related purposes, including:

3.1 Providing the Services

• Creating and managing accounts
• Providing access to BizMagnet ERP
• Processing transactions and business operations
• Providing requested features
• Maintaining customer environments
• Providing customer support
• Processing subscriptions and payments

3.2 Security

We may process information to:

• Authenticate users
• Protect accounts
• Detect unauthorized access
• Detect fraud or abuse
• Investigate security incidents
• Maintain system security
• Prevent misuse of the Services

3.3 Service Improvement

We may use technical and aggregated information to:

• Monitor system performance
• Identify errors
• Improve functionality
• Develop new features
• Analyze product usage
• Improve user experience
• Maintain service reliability

3.4 Communications

We may use contact information to send:

• Service notifications
• Security alerts
• Account-related communications
• Billing notifications
• Support communications
• Important changes to the Services or policies

Where required by applicable law, we will obtain consent before sending promotional communications.

BizMagnet customers may upload, enter, generate, or otherwise process business information through the Services ("Customer Data").

Customer Data may include personal information belonging to the customer's employees, customers, suppliers, contractors, or other individuals.

4.1 Customer Ownership

Subject to applicable law and the contractual relationship between the parties, customers retain their rights and ownership interests in their Customer Data. We do not sell Customer Data.

4.2 Our Role

Where a customer uses BizMagnet to process personal information relating to individuals, the customer is generally responsible for determining:

• What information is collected
• Why the information is collected
• The appropriate legal basis or consent where required
• How long information should be retained
• Who should have access to the information

AIN Technologies processes Customer Data primarily to provide, maintain, secure, and support the Services in accordance with the customer's instructions and applicable agreements.

Customers should ensure that they have the appropriate authority and permissions to provide personal information to BizMagnet.

We process personal information in accordance with applicable data protection and privacy laws.

For users and customers in India, this may include the Digital Personal Data Protection Act, 2023 and applicable rules and regulations. The Act establishes a framework for processing digital personal data and recognizes individuals' rights concerning their personal data.

Depending on the circumstances, information may be processed:

• To provide requested Services
• To perform contractual obligations
• With consent
• To comply with legal obligations
• For legitimate and lawful business purposes
• To protect the security and integrity of our Services
• For other purposes permitted by applicable law

The exact legal basis may depend on the nature of the information, the Services involved, the customer relationship, and the applicable jurisdiction.

Where consent is required, we may request consent before collecting or processing personal information for the relevant purpose.

Where applicable law provides a right to withdraw consent, individuals may request withdrawal using the contact information provided in this Privacy Policy.

Withdrawal of consent may not affect processing that occurred before withdrawal or processing that is otherwise permitted or required by law.

The Digital Personal Data Protection Rules, 2025 contemplate clear, standalone notices describing the personal data involved and the purposes of processing, as well as mechanisms for consent withdrawal and rights requests.

Our website and Services may use cookies and similar technologies.

Cookies may be used for purposes such as:

• Maintaining sessions
• Authentication
• Remembering preferences
• Security
• Website performance
• Analytics
• Understanding how visitors use our website
• Improving user experience

Where required, we will provide appropriate choices regarding non-essential cookies. Users may also be able to control cookies through their browser settings. Disabling certain cookies may affect website or Service functionality.

We may use analytics and monitoring technologies to understand how our website and Services are used.

These technologies may collect information such as:

• Device information
• Browser information
• Usage patterns
• Performance data
• Error information
• Feature interaction data

We may use aggregated or de-identified information for analytics, reporting, service improvement, and product development.

We may disclose information in the following circumstances:

9.1 Service Providers

We may use trusted third-party providers for services such as:

• Cloud hosting
• Database infrastructure
• Email delivery
• Payment processing
• Analytics
• Customer support
• Security monitoring
• Backup services
• Communications
• Technical infrastructure

These providers may process information only as necessary to provide services to us or as otherwise permitted by applicable law and contractual arrangements.

9.2 Business Transfers

If AIN Technologies or a relevant business division is involved in a merger, acquisition, restructuring, financing, sale, or similar transaction, information may be transferred as part of that transaction, subject to applicable legal requirements.

9.3 Legal Requirements

We may disclose information where reasonably necessary to:

• Comply with applicable law
• Respond to lawful requests
• Protect our legal rights
• Prevent fraud
• Investigate security incidents
• Protect users or the public
• Enforce agreements

9.4 With Customer Authorization

We may disclose information where the customer or authorized user specifically instructs or authorizes us to do so.

BizMagnet may integrate with third-party services, platforms, APIs, payment providers, government-related systems, communication services, cloud platforms, or other external systems.

Examples may include integrations for:

• Tax and e-invoicing services
• Payment processing
• Email and communication
• Cloud storage
• Accounting
• Business applications
• Authentication
• Analytics

When you use a third-party integration, information may be exchanged between BizMagnet and that third party as necessary to provide the integration.

Third-party services are governed by their own privacy policies and terms. We recommend reviewing the applicable third-party privacy documentation before enabling an integration.

BizMagnet may provide features that assist businesses with invoicing, tax records, e-invoicing, and integrations related to applicable tax requirements, including ZATCA-related functionality where offered.

Information processed through such features may include:

• Business identification information
• Customer information
• Supplier information
• Invoice information
• Tax information
• Transaction information
• Electronic invoice data

Customers remain responsible for ensuring that the information they enter into BizMagnet is accurate and that their use of tax and e-invoicing functionality complies with applicable requirements.

BizMagnet does not replace the customer's responsibility to obtain appropriate tax, accounting, or legal advice.

We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, destruction, or loss.

Depending on the Services and environment, security measures may include:

• Access controls
• Authentication mechanisms
• Encryption where appropriate
• Network security controls
• Monitoring and logging
• Security updates
• Backup procedures
• Infrastructure security
• Role-based access controls
• Incident monitoring

No method of transmission or storage can be guaranteed to be completely secure. Customers are also responsible for protecting their account credentials and controlling access to their BizMagnet environment.

We retain information for as long as reasonably necessary to:

• Provide the Services
• Maintain customer accounts
• Fulfil contractual obligations
• Meet legal or regulatory requirements
• Resolve disputes
• Enforce agreements
• Maintain security
• Prevent fraud and abuse
• Maintain legitimate business records

Customer Data may be retained for a limited period following account termination where necessary for backup, security, legal, regulatory, dispute-resolution, or legitimate operational purposes.

Specific retention periods may vary depending on the type of information and the applicable service agreement.

Customers may request deletion of personal information or Customer Data where applicable.

Deletion may be subject to:

• Legal retention requirements
• Active contractual obligations
• Outstanding disputes
• Security requirements
• Backup retention cycles
• Regulatory obligations

Where deletion is requested and legally permissible, we will take reasonable steps to delete or anonymize the applicable information.

Depending on the infrastructure and third-party services used, information may be processed or stored in countries other than the country where the customer or user is located.

Where information is transferred across borders, we will take measures required by applicable law and relevant contractual arrangements.

Customers with specific data-residency or localization requirements should discuss those requirements with AIN Technologies before purchasing or configuring the relevant Services.

Depending on the applicable law and your relationship with BizMagnet, you may have rights relating to your personal information.

These may include rights to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion where legally available
• Withdraw consent where applicable
• Request information about processing
• Raise a privacy complaint
• Exercise other rights provided by applicable law

For Customer Data processed on behalf of a business customer, requests may need to be directed first to the relevant customer because that organization may determine the purpose and means of processing.

BizMagnet is intended for businesses and professional users.

Our Services are not directed toward children, and we do not knowingly collect personal information from children for purposes unrelated to providing legitimate business services.

If you believe that a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.

Customers may use BizMagnet to manage employee information, including information relating to:

• Employee identity
• Contact details
• Attendance
• Payroll
• Leave
• Employment information
• Documents
• Organizational roles

Customers are responsible for ensuring that they have the appropriate legal basis, notices, permissions, and internal controls required to process employee information.

BizMagnet should be configured with appropriate role-based access so that employee information is available only to authorized users.

Users must:

• Keep usernames and passwords confidential
• Use strong authentication credentials
• Avoid sharing account credentials
• Restrict access to authorized personnel
• Notify us promptly of suspected unauthorized access
• Log out from shared or public devices

Customers are responsible for managing their organization's users and access permissions.

We maintain security processes designed to identify, investigate, contain, and respond to security incidents.

If we determine that a security incident involving personal information requires notification under applicable law or contractual obligations, we will provide notifications as required.

Customers should promptly notify us if they become aware of unauthorized access to their BizMagnet account or Customer Data.

We may occasionally send information about:

• Product updates
• New features
• Service announcements
• Events
• Offers
• Other business communications

Where required by law, promotional communications will be sent only with appropriate consent.

You may opt out of promotional communications by using the unsubscribe mechanism included in the communication or by contacting us.

Service-related communications may continue where necessary to operate your account or provide the Services.

We may update this Privacy Policy from time to time to reflect:

• Changes to our Services
• Changes to our data practices
• Legal or regulatory developments
• Security improvements
• Business requirements

When we make material changes, we may provide notice through the website, Services, email, or another appropriate method.

The "Last Updated" date at the beginning of this Privacy Policy indicates when it was most recently revised.

This Privacy Policy should be read together with:

• BizMagnet ERP Terms of Service
• Applicable subscription or service agreements
• Data Processing Agreement, where applicable
• Cookie Policy, where applicable
• Other applicable policies or contractual documents

If a separate written agreement contains specific data-processing obligations, the applicable agreement may govern to the extent of any conflict.

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of personal information, please contact:

• AIN Technologies
• Privacy Contact: [Name / Privacy Team]
• Email: support@bizmagneterp.com
• Address: [Registered Office Address]
• Website: https://bizmagneterp.com

When submitting a privacy request, please provide sufficient information for us to identify the relevant account or request while avoiding unnecessary disclosure of sensitive information.

This Privacy Policy shall be interpreted in accordance with applicable laws and regulations governing AIN Technologies and the relevant Services.

Where appropriate, the Privacy Policy may be supplemented by jurisdiction-specific privacy notices for customers or users located in particular countries or regions.