Privacy & Data Protection Policy

1. Introduction

Welcome to Business Start Karo, an automated legal-tech and compliance platform operated by AIKAAA Technologies Pvt. Ltd. ("we", "us", or "our"). We are committed to upholding the highest standards of data security, confidentiality, and integrity for every individual and corporate client utilizing our online business registration services.

2. Information We Collect

To prepare, verify, and submit official business filings with the Ministry of Corporate Affairs (MCA), Goods and Services Tax (GST) Portal, Directorate General of Foreign Trade (DGFT), and MSME Udyam Portal, we collect:

• Personal Identity Data: Full name, date of birth, mobile number, email address, PAN card, Aadhaar card number, Voter ID, or passport details.
• Commercial Entity Details: Proposed corporate names, registered business addresses, electricity bills, rent agreements, landlord NOCs, and bank statements/cancelled cheques.
• Digital Access Information: IP address, browser metadata, and device identifiers collected automatically for transaction security and fraud prevention.

3. Purpose of Data Processing

Client information is processed solely for the following legitimate purposes:

• Drafting statutory corporate instruments including MOA, AOA, SPICe+ dossiers, and Form TM-A.
• Filing governmental license and registration applications on authorized central and state portals.
• Providing real-time milestone status tracking via our client tracking desk and automated email receipts.
• Enabling our verified Chartered Accountants (CAs), Company Secretaries (CS), and legal advocates to execute compliance tasks.

4. Document Vault & 256-Bit Encryption

All KYC documents, affidavits, and proof files uploaded to our Document Vault are stored on isolated, encrypted storage volumes with strict role-based access control. Documents are never sold, rented, or commercialized to third-party telemarketers or advertisers.

5. Payment Gateway Security

All financial transactions on Business Start Karo are routed through PCI-DSS Level 1 certified payment aggregators (Razorpay / Cashfree / Banking UPI). We do not store full credit card numbers, CVVs, or bank netbanking passwords on our application servers.

6. Data Retention & Erasure

Statutory records are retained in compliance with applicable Indian tax and corporate laws for mandatory audit periods (minimum 5-8 years). Clients may request export or deletion of draft records by contacting our Data Grievance Desk at support@businessstartkaro.com.

7. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of our Grievance Officer are: