Enterprise Privacy Policy

To configure automated workflows, CRM workspaces, and telecommunication conduits, we process structured data categories:

• Identity & Commercial Details: Authorized representative name, enterprise legal identity, email coordinates, contact numbers, GSTIN, and statutory tax parameters.
• Operational & Payload Data: Destination numbers uploaded for Bulk SMS or RCS dispatches, candidate resumes ingested via ATS, workforce registers managed under HRMS, and input documents processed through dynamic utilities.
• Telemetry & Network Parameters: Public IP addresses, browser specifications, access timestamps, TLS handshakes, and diagnostic session records.

Collected parameters are strictly allocated toward infrastructure maintenance and provisioning:

• Provisioning, maintaining, and scaling isolated SaaS environments and tenant databases.
• Transmitting authenticated transactional OTPs, operational notifications, and support tickets.
• Generating statutory GST invoices and ensuring compliance under Indian commercial law.
• Monitoring network health, mitigating brute-force vectors, and ensuring high-availability uptime.

When dispatching communications via our WhatsApp API, RCS, or SMS rails:

• Explicit Recipient Consent: Tenants must hold verifiable opt-in consent from all end-recipients prior to dispatching broadcast payloads.
• DLT Registry scrub: Traffic must strictly match registered Entity IDs, approved sender headers, and verified templates. Unsolicited marketing, deceptive phishing, or unsolicited spam results in immediate node termination without refund liability.

All API transfers are secured with 256-bit SSL/TLS encryption, and database nodes are isolated behind zero-trust firewalls. Bhumi Marketing does not sell, rent, monetize, or lease your private contact books or customer databases to external advertising entities.

Commercial settlements, subscription renewals, and UPI transactions are executed via PCI-DSS certified payment institutions. Bhumi Marketing does not capture or retain raw cardholder numbers, expiration dates, or bank verification pins on primary compute hosts.

We collaborate with enterprise cloud carriers, telecommunication switches, and CDN networks to route data. These upstream entities access telemetry solely to execute processing instructions under strict non-disclosure covenants.

We deploy lightweight authentication tokens and session cookies to sustain your logged-in state across dashboards. Disabling cookies in client browsers may impede workspace access to authenticated modules.

• Access & Deletion: You retain the right to audit, extract, or request total purging of uploaded database records by raising an authorized compliance ticket.
• Credential Custody: Tenants are solely responsible for securing API keys, webhook secrets, and administrator login credentials.