Privacy Policy

NetraBiz (“we”, “us”, “our”) is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and the Australian Privacy Act 1988.

For all privacy inquiries, data subject access requests, or complaints, please contact our Data Protection Officer at:

NetraBiz Privacy Team
privacy@netrabiz.com
Attn: Data Protection Officer

If you are in the EU, you have the right to lodge a complaint with your local supervisory authority. If you are in Australia, you may contact the Office of the Australian Information Commissioner (OAIC). If you are in California, you may contact the California Attorney General's office.

Account Data: When you create an account, we collect your email address and a password (stored as a salted hash using industry-standard algorithms — we never see or store your plain-text password). We use your email to authenticate you, send critical account notifications, and respond to support requests.

Business Data: During onboarding, you provide a business name and select an industry mode. This information personalizes your dashboard experience and is not shared with third parties.

Customer & Visit Data: You may enter customer names, phone numbers, mode-specific metadata (vehicle details, preferences, job addresses, dietary notes, etc.), and visit records (dates, amounts, summaries, notes). This data belongs to your business and is stored so you can retrieve it through the app.

Inventory Data: You may create item catalogs including product names, categories, prices, stock quantities, and low-stock thresholds. This data is used solely for your inventory management.

Payment Data: When you subscribe to a paid plan, payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment provider. Stripe collects and processes your card details — we never receive or store your full card number, CVV, or other sensitive payment information. We store only your Stripe customer identifier and subscription status.

Usage Data: We automatically collect technical data including IP address, browser type, device information, and interaction logs. This data is used for security, fraud prevention, and service improvement.

Under the GDPR, we process your personal data on the following legal bases:

• •Performance of a contract (Art. 6(1)(b)): Processing your account and business data to deliver the service you signed up for.
• •Legitimate interests (Art. 6(1)(f)): Using usage data for security, fraud prevention, and service improvement, balanced against your privacy rights.
• •Consent (Art. 6(1)(a)): For non-essential communications or optional features, which you can withdraw at any time.
• •Legal obligation (Art. 6(1)(c)): Retaining certain records to comply with tax, accounting, or other legal requirements.

If you are a California resident, you have the following rights under the CCPA as amended by the California Privacy Rights Act (CPRA):

• •Right to know: The categories of personal information we collect and how we use them.
• •Right to delete: Request deletion of your personal information, subject to legal exceptions.
• •Right to correct: Request correction of inaccurate personal information.
• •Right to opt-out: Opt-out of the sale or sharing of your personal information. We do not sell personal information.
• •Right to limit: Limit the use of sensitive personal information.
• •Right to non-discrimination: Equal service and pricing regardless of whether you exercise these rights.

To exercise these rights, contact us at privacy@netrabiz.com. We will verify your identity before processing your request and respond within 45 days.

If you are located in Australia, we comply with the Australian Privacy Act 1988 and the 13 Australian Privacy Principles (APPs). Our practices align with the following principles:

• •APP 1 (Open and transparent management): This Privacy Policy explains how we manage your personal information.
• •APP 3 (Collection): We only collect personal information reasonably necessary for our functions.
• •APP 5 (Notification): We notify you of the matters required by APP 5 at or before collection.
• •APP 6 (Use or disclosure): We only use or disclose your information for the primary purpose for which it was collected, or a related secondary purpose you would reasonably expect.
• •APP 11 (Security): We take reasonable steps to protect your information from misuse, interference, loss, and unauthorized access.
• •APP 12 (Access): You may request access to your personal information.
• •APP 13 (Correction): You may request correction of your personal information.

To exercise your APP rights, contact us at privacy@netrabiz.com. If you believe we have breached the Australian Privacy Principles, you may complain to the Office of the Australian Information Commissioner (OAIC) at enquiries@oaic.gov.au.

All data is transmitted over HTTPS/TLS 1.2+. Database access is protected by row-level security (RLS) policies that ensure each authenticated user can only read and modify data belonging to their own business. Passwords are hashed using industry-standard algorithms provided by our authentication provider (Supabase/Auth0-grade bcrypt).

Payment processing is handled by Stripe, which is certified as a PCI-DSS Level 1 Service Provider — the highest level of payment security certification. We never receive, store, or transmit your full card details.

While we follow industry best practices, no system is perfectly secure. We recommend using a strong, unique password and enabling any additional security features we may offer in the future.

Your data is retained for as long as your account is active. You may delete individual customers, visits, or inventory items at any time through the app. To permanently delete your account and all associated data, contact us at privacy@netrabiz.com and we will process your request within 30 days.

After account deletion, we may retain aggregated, anonymized data that cannot identify you or your customers. We may also retain certain records where required by law (e.g., tax records) for the duration specified by applicable legislation.

NetraBiz uses essential cookies and local storage to maintain your authenticated session, remember UI preferences, and ensure the application functions correctly. These are strictly necessary for the service to operate and cannot be disabled.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not sell data derived from cookie usage to any third party.

Your data may be processed and stored on servers located in countries other than your own, including the United States, European Union, and Australia. We ensure appropriate safeguards are in place for any cross-border transfer, including Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA, and binding agreements that meet the requirements of the Australian Privacy Act for transfers from Australia.

We rely on trusted infrastructure providers:

• •Supabase: Database hosting and authentication. Data processing agreement in place.
• •Stripe: Payment processing. PCI-DSS Level 1 certified. We only store your Stripe customer ID, not card details.

These providers process data on our behalf under data processing agreements and are contractually prohibited from using your data for their own purposes.

NetraBiz is designed for business owners and is not intended for use by children under 16 (under 13 in the United States, under 16 in the EU under GDPR Art. 8, and under 15 in Australia under the Online Privacy Act). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

Regardless of your location, you have the right to:

• •Access the personal data we hold about you
• •Request correction of inaccurate data
• •Request deletion of your data (right to be forgotten)
• •Export your data in a portable, machine-readable format
• •Object to or restrict certain types of processing
• •Withdraw consent for consent-based processing
• •Lodge a complaint with your local data protection authority

To exercise any of these rights, contact privacy@netrabiz.com. We respond to all requests within 30 days.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you by email or through the app at least 30 days before the changes take effect.