Privacy Policy

The App is published under the brand Business Associate and is powered by Extraaaz. For privacy-related requests, contact us at support@businessassociate.app.

We collect information you provide directly, information generated through your use of the App, and limited device information needed to operate core features.

2.1 Account and profile information

• Full name, username, email address, and mobile phone number
• State, city, address, pincode, and date of birth (when provided)
• Password (transmitted securely; not stored in plain text on your device)
• Referral code used during registration or shared with invitees

2.2 Identity verification (KYC)

To comply with onboarding and payout requirements, you may upload government-issued identity documents and a live photograph.

2.3 Business and lead data

When you use CRM features, you may enter information about business leads and contacts — company name, contact person, phone numbers, email, addresses, GST numbers, industry, notes, follow-ups, and file attachments. You are responsible for ensuring you have a lawful basis to collect third-party contact information.

2.4 Wallet and payout information

• Wallet balance, transaction history, and reward activity
• Bank account details (holder name, bank name, account number, IFSC)
• UPI ID for payouts

2.5 Support tickets and communications

Messages, descriptions, and attachments submitted through the in-app support ticket system.

2.6 Device and technical information

• Firebase Cloud Messaging (FCM) device token for push notifications
• Device name, platform (Android/iOS), and session activity
• Authentication tokens in encrypted secure storage on your device
• Network connectivity status (used locally; not sold to third parties)

2.7 Information we do not collect

• Precise GPS or continuous location tracking
• Your device contacts address book
• Microphone or audio recordings
• Advertising identifiers for targeted ads

• Create and manage your business associate account
• Verify your identity and comply with applicable KYC requirements
• Provide lead management, ticketing, referral, and wallet features
• Process reward payouts to your nominated bank or UPI account
• Send transactional and service-related push notifications
• Maintain security, prevent fraud, and enforce our terms
• Respond to support requests and account deletion requests
• Improve the App when you opt in to analytics (see Section 8)

You can revoke permissions in your device settings. Some features may not work without the relevant permission.

We do not sell your personal information. We may share information only in these circumstances:

• Service providers — hosting, cloud infrastructure, and push notification delivery (e.g., Google Firebase Cloud Messaging) under contractual safeguards
• Legal requirements — when required by law, regulation, court order, or government request
• Business transfers — in connection with a merger, acquisition, or sale of assets
• With your direction — when you use share features (e.g., referral links via WhatsApp or SMS)

Your data is transmitted over encrypted connections (HTTPS) and stored on servers operated or contracted by us. Authentication tokens are kept in encrypted secure storage on your device. Sensitive identity documents are not persisted in local app preferences.

While we implement reasonable technical and organisational measures, no method of transmission or storage is completely secure. Please use a strong password and keep your device secure.

We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. KYC records may be retained for longer periods where required by applicable law. Account deletion requests are processed per our internal review procedures and applicable law.

Depending on applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to:

• Access and review personal information associated with your account
• Correct inaccurate profile information through the App or by contacting support
• Withdraw consent for optional processing such as analytics
• Request deletion of your account via Settings → Delete account request
• Manage notification preferences in Settings
• Revoke device permissions through your operating system settings

To exercise these rights, email support@businessassociate.app. We may need to verify your identity before fulfilling certain requests.

The App is intended for adults (18 years or older) who are registered business associates. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps.

Your information may be processed on servers located in India or other countries where our service providers operate. We take steps to ensure appropriate safeguards when data is transferred across borders.

The App may open external applications or websites (phone dialer, email, WhatsApp, or our corporate website at extraaaz.com). This policy does not apply to third-party services governed by their own privacy policies.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes may be communicated through the App or by other reasonable means. Continued use after changes constitutes acceptance of the updated policy.

For questions, concerns, or complaints about this Privacy Policy or our data practices: