Privacy Policy

Version 1.2 · effective 9 October 2026

Who this covers

WotBusiness is business software. A workspace owner signs up, and the people they record — tenants, staff, students, customers — do not.

That split matters for your rights under this policy. For the account holder we decide what is collected and why, and we answer to you for it directly. For the people recorded inside a workspace, the business that entered the record decides what is held and for how long; we hold it on their instructions. If you are a tenant, an employee, a student or a customer and you want your details changed or removed, the business you dealt with can do that themselves, and asking them is faster than asking us. If they will not, contact us and we will help.

What we hold about an account holder

• Your name, email address and, if you give one, a phone number.
• Your password, stored only as a bcrypt hash. We cannot read it, and nobody at WotBusiness can tell you what it is.
• If you sign in with Google: your Google account ID, email address, name and profile picture URL, taken from Google at sign-in. We do not receive your Google password and we ask for no access to your Gmail, Drive or Calendar.
• Your workspace name, currency and timezone.
• Sign-in sessions, each recorded with the IP address and browser user agent that created it, so you can tell your own sessions apart from one you do not recognise.
• Which plan your workspace is on and how many records it has added, to apply the free plan’s limits.

A profile photo you add is kept only on the phone or in the browser where you chose it. It is never sent to us.

What each module holds

A workspace only holds data for the modules it uses. Nothing below is collected until someone enters it.

• Rent Tracker — buildings with their address and city, units, and for each tenancy the tenant’s name, phone number and optionally email, along with rent, deposit, dates, invoices and payments.
• Staff & Salaries — the company, and for each worker their name, role, phone number, optionally email, joining date, salary, advances, payslips and payments made.
• School & College Fees — the institution with its address, and for each student or staff member their name, class or subject, phone number, optionally email and gender, fees or salary, and what has been paid.
• Sales, Stock & Tax Invoicing Hub — your items with their prices, codes and stock, your customers and suppliers with their tax number and contact details, and the invoices and payments between you.
• Cash & Expenses — the money in and out you record, with its category and a note.
• E-Commerce & D2C Orders Hub — for each order the customer’s name, phone number, full delivery address, any note they left, what they ordered and the amount due on delivery.

Orders placed through a public link

An order link can be opened by anyone who has it — there is no account and no sign-in. When a customer fills that form, the name, phone number and delivery address they enter go straight into the seller’s workspace so the seller can pack and send the parcel. That is the only thing those details are used for. We do not market to them, we do not build a profile, and their details are not visible to any other workspace.

The link contains a random token. Anyone holding the token can see the product, its price and the shop name, and can place an order. It shows nothing else about the business and gives no access to any existing order. A seller can close a link at any time.

The mobile app and your phone

The WotBusiness app for Android and iOS asks for a permission only when you use the feature that needs it, and works without any of them. You can turn each one off in your phone’s settings.

• Camera — to scan a barcode, photograph a paper bill, or take a profile photo.
• Photos — to choose a bill or a profile photo from your gallery. Only the photo you pick is read.
• Bluetooth and nearby devices — to find and connect to a receipt printer. Not used to find your location.
• USB — to print to a receipt printer on a cable.
• Internet — to reach your workspace.

Some work happens on the phone and never leaves it. A bill you photograph is read on the device by Google ML Kit, and only the items you confirm are saved; the photo itself is not uploaded. Barcodes are read on the device the same way. ML Kit may send Google basic diagnostic information about how the library is performing, but never the photo or its text.

Sharing a bill on WhatsApp or as a PDF happens only when you press the button, and goes wherever you choose in your phone’s share sheet; from there it is handled by that app.

The app contains no advertising, and collects no location, contacts, call logs, microphone recordings or health data.

Measuring our own ads (Android app)

We advertise WotBusiness on Facebook and Instagram. To learn which of those ads lead to people installing the app and signing up, the Android app includes Meta’s App Events SDK and reads Google Play’s install referrer.

• Meta receives: that the app was installed and opened; that a new account was created and whether by email or Google; that a paid plan was bought, with its amount and currency; and what Meta’s SDK reads from the phone to match these to its ads — the advertising ID (where your phone allows it), device model, Android version, app version, language and IP address.
• Meta does not receive your name, email address, phone number, or anything kept in your workspace: no customers, bills, stock, tenants, staff or students.
• Google Play’s install referrer tells us which link or ad the app was installed from (for example a Facebook ad, one of our own links, or a search in the Play Store). We keep it with your workspace to count which of our campaigns work.

Meta handles what it receives under its own Data Policy (facebook.com/privacy/policy). You can reset or delete your advertising ID, or opt out of personalised ads, in your phone’s settings (Settings → Google → Ads, or Privacy → Ads). The website does not use Meta’s tools.

How we use it

To run the features you are using, and for nothing else. Specifically: to show your registers and dashboards, to raise each month’s rent, salaries and fees automatically, to alert you to what is overdue, to produce the shipping labels and invoices you print, and to keep you signed in.

We do not sell personal data. We do not share anything kept in a workspace with advertisers (Meta receives only the app events described under “Measuring our own ads”), we do not use it to train machine-learning models, and we do not profile anyone recorded in a workspace.

Keeping one business’s data away from another

Every table carries the workspace that owns the row, and the database enforces that separation itself through row-level security rather than relying on application code to remember. The application connects under a role that cannot bypass those policies, and a check runs at start-up that writes two rows as two different workspaces and confirms neither can see the other.

Where it is stored, and how it is protected

Data is held in a managed PostgreSQL database provided by CloudWot. Passwords are stored only as bcrypt hashes; session refresh tokens are stored only as SHA-256 hashes, so a copy of the database does not yield a usable password or a usable session.

We should be straight with you about one thing rather than claim otherwise: the database server this deployment connects to does not currently accept encrypted connections, so traffic between the application and the database is not encrypted in transit. It travels between the application host and the database host only, and never over the public web to your browser, but it is not protected by TLS on that hop and we are not going to describe it as though it is. We are working to move to a database endpoint that accepts TLS, and this section will be updated when that is done.

Access to the production database is limited to the people who operate the service.

CloudWot operates the infrastructure this database runs on, which may be located outside India. Where personal data is processed outside India it is processed for the purposes set out in this policy and nothing else.

Payments

Payments in India are handled by PayU Payments Private Limited, an RBI-authorised payment aggregator. When you pay for a WotBusiness plan, your card, UPI, net-banking or wallet details are entered on PayU's own checkout page and go to PayU, not to us. We never see them, we never receive them, and we do not store card numbers or bank credentials anywhere in this product.

What we keep is the outcome: which plan you chose, the amount, the date, whether the payment succeeded, and the reference PayU gives us so a payment can be traced if you query it. PayU handles your payment details under its own privacy policy and its obligations as a regulated payment aggregator.

Who else sees it

• CloudWot, which hosts the database the data sits in.
• Google, if you choose to sign in with Google, and only to the extent of verifying that sign-in.
• PayU, and only for the payment details you enter on its checkout page.
• Our email provider, which delivers the password-reset and account-deletion codes we send you, and sees only your address and that message.
• Google, for the on-device bill and barcode reading described above, and only its diagnostics.
• Meta Platforms, for the Android app’s ad measurement described above, and only those events.
• Anyone you invite into your own workspace.
• A public authority, where we are required by law to produce something and have satisfied ourselves that the requirement is valid.

That is the complete list. Apart from Meta’s ad measurement in the Android app, there are no advertising networks, analytics trackers or data brokers in this product, and we sell no data.

Cookies and what is stored on your device

The website uses no advertising or analytics cookies. Your browser, or the app on your phone, stores your sign-in session so you are not asked to sign in every time, a copy of the app’s own files so it opens quickly, and small preferences such as light or dark mode. Clearing that storage signs you out and loses nothing kept in your workspace.

How long it is kept

Records stay until they are deleted. A workspace can delete any record it holds — a tenancy, a worker, a student, an order — and deleting one removes it and everything hanging off it from the database rather than hiding it from a list. There is no soft-deleted copy left behind.

The Orders module can be set to clear delivered orders automatically after a chosen number of days, either by archiving them or by deleting them permanently. That choice is the workspace’s and is off unless someone turns it on.

You can delete your account at any time, from inside the app or the website (Settings, then Delete account), or without signing in at wotbusiness.com/delete-account. We email a code to confirm it is you, then schedule the closure: for 14 days you can sign in and call it off, and after that the workspace and every record in it are deleted permanently. Backups may hold a copy for a short period after that before they are rotated out.

Records about payments may be kept longer where the law requires it (for example for tax), and only for that purpose.

Your rights

Under India’s Digital Personal Data Protection Act 2023, the EU and UK GDPR, California’s privacy laws and equivalent rights elsewhere, you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, withdraw a consent you gave, and complain about how we have handled it.

Most of this you can do yourself and immediately: your workspace data is exportable and editable from inside the product. For anything you cannot do from the screen, contact us and we will answer within 30 days.

If you are recorded inside someone else’s workspace, please see "Who this covers" above — the business holding your record can act on it faster than we can.

Children

WotBusiness is not for children, and nobody under 18 should create an account. We do not knowingly collect personal data from a child using the product; if we learn we have, we delete it. The School module is a different matter: a school records its pupils, some of whom are children, and it does so as the school’s own record-keeping. We hold a pupil’s name, class, a contact number and what is owed, on the school’s instructions. We do not contact pupils, profile them, or use their details for anything but showing the school its own register.

If something goes wrong

If personal data is exposed or lost in a way that puts anyone at risk, we will tell the affected account holders and the relevant authority without undue delay, and we will tell you what happened rather than the least we can get away with saying.

Changes to this policy

When this policy changes materially we will raise the version at the top and tell account holders in the product. Continuing to use WotBusiness after that means the new version applies.

Contact

WotBusiness is a registered product of WotPan, owned by Mohd Arif (Owner & CEO), of 95 Longi Kalan, Thakurdwara, Moradabad, Uttar Pradesh, India.

For any question about this policy, or to exercise any right in it, write to support@wotpan.com. Mohd Arif is the Grievance Officer for the purposes of India's Digital Personal Data Protection Act 2023 and can be reached at the same address; put "Grievance" in the subject. We acknowledge within 48 hours and respond substantively within 30 days.