Privacy Policy

About people: name, work email or mobile number (team members without email sign in with their mobile number), job title, and the company and role they belong to. We store passwords only in a protected, scrambled form; we can’t read them.

About companies: company name, addresses, GSTIN or PAN, contact details, and the details used to verify that the company is genuine.

Business records you create: RFQs, quotations, purchase orders, dispatches, goods receipts, invoices, payments, work plans, work orders, tasks, messages, comments and the files you upload.

Details of outside companies you deal with: when you send a document to a vendor or customer who isn’t on ConfluxB2B, you give us their company name and email so we can deliver it.

Usage information: sign-in times, actions taken in the app (shown as the activity history on each document), and technical logs and error reports used to keep the service secure and working.

To run the service for you: create and share documents, send the notifications and emails you’d expect (invitations, approvals, status changes), verify that a company is genuine, keep the service secure, fix problems, and understand which features are used so we can improve them.

We do not sell your information, and we do not use your business records for advertising.

Your company: people in your company see what their role allows. Your company’s admins decide those roles.

Companies you work with: when you send a document to a vendor or customer (for example a purchase order or a shared work plan), that company sees that document, its updates and the messages on it. Nothing else about your company is shared with them.

Service providers we rely on: cloud hosting, email delivery, GST verification, error tracking and product analytics providers process information only to provide those services to us, under their own security and confidentiality obligations.

We may disclose information when the law requires it, for example in response to a valid order from a court or government authority.

Your business records, files and account details are stored in India (Mumbai).

Our error-tracking and product-analytics providers may process limited technical information — such as which page was open when an error happened, browser type and anonymous usage events — on servers outside India. We don’t send your business records to them.

Access is protected by sign-in, roles and permissions. Connections to the service are encrypted, and stored data and backups are encrypted. Uploaded files are scanned for viruses. Only the people who run ConfluxB2B can reach the servers, and only to operate and support the service.

If a security incident affects your information, we will tell the affected companies without undue delay, explain what happened and what we are doing about it, and report it to the authorities where the law requires.

We keep your records while your company uses ConfluxB2B. If your company stops using it, your company can still sign in and download its data for 30 days. After that, we delete your company’s data within the next 30 days, except records the law requires us to keep longer. Deleted data also disappears from our backups within 7 days after that.

Documents you sent to another company (for example a purchase order sent to a vendor) are also that company’s records, and stay in their account.

We use cookies and similar browser storage to keep you signed in, remember your preferences (such as filters and unsent drafts) and measure how the product is used. We don’t use advertising cookies. If you block cookies, you won’t be able to sign in.

You can ask to see the personal information we hold about you, correct it, or have it deleted, and you can withdraw your consent where we rely on it. Your company’s admins can export the company’s data at any time from Settings.

Some requests may affect your company’s records (for example, deleting the person who approved a purchase order); in those cases we keep what the company needs for its records and remove the rest.

To make a request, ask a question or raise a complaint about how your information is handled, email support@confluxb2b.com. We will acknowledge it within 2 working days and aim to resolve it within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

ConfluxB2B is a business service for people aged 18 or over. We don’t knowingly collect information about children.

If we change how we handle information, we’ll update this page, change the date at the top, and tell active companies before the change takes effect.