Privacy Policy
How Rebitto Business OS protects account credentials, organization operations, and payment gateway metadata.
1. Information We Collect
During registration and workspace operation, we collect account owner name, verified work email address, hashed password credentials, one-time verification hashes (stored with HMAC-SHA256 digests rather than plaintext), optional phone number, business legal details (company name, billing state, optional GSTIN), and operational data you enter into CRM, Invoicing, Inventory, POS, and HR modules.
2. Payment Gateway & UPI AutoPay Data Boundaries
Recurring subscription billing and AutoPay mandates are processed by Razorpay Software Private Limited. Rebitto stores only non-sensitive gateway reference identifiers (Razorpay Customer ID, Subscription ID, Mandate Token ID, Payment ID, payment status, and consent audit logs). We never access or store your UPI PIN, bank login passwords, or raw card numbers.
3. How We Use Information
Collected information is used strictly to operate Rebitto Business OS, verify identity via transactional email OTP, calculate intra/inter-state Indian GST tax invoices, enforce subscription quotas, troubleshoot webhook failures, and deliver requested transactional notifications. We do not sell personal or tenant data to third parties or ad networks.
4. Tenant Scoping & Offline Storage
Application queries validate authenticated session context and organization membership before accessing tenant records. When offline POS features are enabled, catalog data and signed entitlement payloads are stored in local browser storage under standard browser origin sandboxing.
5. Sub-Processors & Communications
We rely on managed cloud database hosting, transactional email delivery providers (such as Resend) for email OTP & billing notices, and Razorpay for INR payment processing. All public HTTP traffic uses TLS encryption in transit. For details on strictly essential cookies, review our Cookie & Storage Disclosure.
6. Data Access, Export & Grievance Rights
You may export CRM contacts, products, and GST invoice histories via CSV directly from your workspace, or submit privacy, correction, or deletion requests to our Grievance / Privacy contact listed above.