B2Bangalore Legal
Privacy Policy
Last updated: 30 May 2026
This Privacy Policy explains how B2Bangalore (“we”, “us”) collects, uses, stores, shares, and protects your personal data when you use the B2Bangalore service at b2bangalore.com. It is published in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Data Fiduciary
For the purposes of the DPDP Act, B2Bangalore is the Data Fiduciary in respect of personal data you provide directly. You can reach our Grievance Officer (Anupam Jain, founder) at contact@b2bangalore.com.
2. Personal Data We Collect
| Category | Examples | Source |
|---|---|---|
| Account identity | First name, last name, email, phone number | You, at signup |
| Authentication | Hashed password, session tokens | You, at signup/login |
| Subscription | Plan tier, billing dates, Razorpay subscription ID | Generated when you upgrade |
| Product input | Your target accounts list (company domains/names you upload) | You, while using the Service |
| Saved events | List of events you star or save | You, while using the Service |
| Usage telemetry | Page views, device type, country, anonymous performance metrics | Vercel Analytics + Speed Insights (cookie-less) |
| Meeting requests & leads | Email + context when you book a meeting or request a demo | You, via in-product forms |
We do not collect individual contact information for the third-party speakers, attendees, or sponsors listed in our catalog. Those records are built from explicit public signals (sponsor lists, speaker rosters, public registrations, public ad-library data) — not by scraping personal contact details.
3. How We Use Your Data
- Provide the Service — authenticate your account, deliver Pro features, store your saved events and target accounts.
- Billing — process subscription payments via Razorpay and email receipts.
- Communication — send transactional emails (signup confirmation, password reset, billing) and product update emails. You may opt out of non-essential communications anytime.
- Service improvement — analyze aggregate usage patterns to fix bugs and prioritize features. We do not attempt to identify individual users from analytics data.
- Compliance & security — investigate suspicious account activity, prevent fraud, comply with legal obligations.
4. Legal Basis for Processing
Under the DPDP Act, we process your personal data on the following grounds:
- Consent — for marketing communications and analytics.
- Contract performance — to deliver the Service you have subscribed to.
- Legitimate interest — for security, fraud prevention, and internal record-keeping.
- Legal obligation — when required to retain data under Indian tax, accounting, or other applicable law.
5. Third-Party Processors
We share your data with a small number of trusted infrastructure providers strictly to deliver the Service:
| Processor | Purpose | Data residency |
|---|---|---|
| Supabase | Database, authentication, file storage | Mumbai, India (ap-south-1) |
| Vercel | Web hosting, edge network, CDN | Global (closest edge to user) |
| Razorpay | Subscription billing, payment processing | India |
| Zoho Mail | Outgoing transactional email (SMTP) | India |
| Vercel Analytics | Cookieless aggregate analytics | EU / US |
Each processor is contractually bound to handle data only on our instructions and to maintain appropriate security safeguards. We do not sell your personal data to anyone, ever.
6. International Data Transfers
Some processors (Vercel, Vercel Analytics) operate globally, which means your data may transit through servers outside India. Where this occurs, the transfer is governed by industry-standard contractual protections and is limited to what is strictly necessary to deliver the Service.
7. Data Retention
- Active accounts — we retain your data as long as your account is active.
- Closed accounts — we delete account-identifiable data within 90 days of account closure, except where retention is required by law (e.g. tax records under the Income Tax Act, retained for 8 years).
- Backups — encrypted backups are purged on a rolling 30-day window.
8. Your Rights Under the DPDP Act
You have the right to:
- Access the personal data we hold about you.
- Correct or update inaccurate or outdated information.
- Erase your personal data (subject to legal retention requirements).
- Withdraw consent for processing that relies on consent.
- Nominate another person to exercise your rights in case of your death or incapacity.
- Grievance redressal by emailing our Grievance Officer.
To exercise any of these rights, email contact@b2bangalore.com with your registered email address and the request. We will respond within 30 days as required by the DPDP Act.
9. Cookies & Tracking
- We use essential cookies for authentication (signed sessions). These cannot be disabled if you want to use the Service.
- We use Vercel Analytics for traffic measurement; it is cookie-less and stores only aggregate metrics.
- We do not use third-party advertising trackers, retargeting pixels, or social-media share trackers.
10. Security
We use TLS/HTTPS for all data in transit, encrypted database storage at Supabase, hashed passwords (Argon2id), HMAC-signed webhook requests, role-based access controls on the database (row-level security), and Vercel's edge firewall for DDoS protection. No system is perfectly secure; if we ever experience a data breach affecting your personal data, we will notify you and the relevant regulator without undue delay.
11. Children
The Service is for B2B users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, please contact us and we will delete it.
12. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes are communicated by email and a prominent notice on the site. The “Last updated” date at the top reflects the most recent revision.