Last updated 31 August 2026
Template — have a lawyer review this
Account data you give us (name, email, mobile number, company name, GSTIN); the search terms you submit for verification; the results returned; and technical logs such as IP address and timestamps.
To operate your account, authenticate you, bill credits accurately, keep an audit trail of checks, prevent abuse, and meet legal obligations.
Identifiers you submit (a GSTIN, PAN, CIN, DIN or account number) are sent to the relevant data source to answer your query. We retain the query and its result against your account so you have a record of what was checked and when.
You must have a lawful reason to verify a third party. By submitting a check you confirm you do. We act as a processor for the query you initiate.
We share data with the registry or data provider needed to answer a query, our payment gateway to take payment, and our SMS and email providers to reach you. We do not sell personal data.
Verification records are retained for seven years to support audit and dispute resolution, unless you ask us to delete earlier and no legal hold applies.
Passwords are hashed. One-time codes are stored hashed and expire in minutes. Access to production data is limited to staff who need it.
You can access, correct, or request deletion of your account data, and withdraw consent for non-essential processing. Deleting your account removes your profile; anonymised billing records may be retained where the law requires.
Write to privacy@businesskyc.com. Name your Grievance Officer and their response timeline here before going live.