Privacy Policy
Effective 2026-09-16 · Applies to www.domebox.in
- Operated by
- BISCS India ()
- Registration
- GSTIN
- Registered address
- info@biscsindia.com
- Phone
1. Who we are, and the two roles we play
BISCS India operates Domebox, a task and team management service. Our role depends on whose data it is, and the distinction matters for your rights:
- For your company's account — the person who signs up, billing details, and contact information — we are the Data Fiduciary. We decide how that data is used.
- For the employee records your company puts into Domebox — names, work emails, tasks, performance scores — we are a Data Processor acting on your company's instructions. Your employer decides what goes in and who may see it. If you are an employee with a question about your own performance data, your employer is the right first contact; we will assist them.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account | Name, work email, company name, phone, password (stored only as a salted hash) | To create and secure your workspace |
| Work content | Tasks, deadlines, comments, checklists, KRAs, delegation and performance scores | To provide the service you subscribed to |
| Billing | Plan, payment identifiers, invoices | To take payment and issue GST invoices |
| Technical | IP address, browser type, timestamps of access | Security, abuse prevention, debugging |
| WhatsApp (optional) | Mobile number and your explicit consent record | Only to send task reminders you asked for |
We do not sell your data. We do not use your work content to train any machine-learning model. We do not show third-party advertising inside the product.
3. Consent, and how to withdraw it
We process account and work data because it is necessary to provide a service you asked for. Two things are strictly opt-in and can be withdrawn at any time without affecting the rest of the service:
- WhatsApp reminders — reply STOP to any message, or clear the checkbox on your profile. It takes effect immediately.
- Product and marketing email — use the unsubscribe link. Service email about your own tasks and billing continues, because it is part of the service.
4. Where your data is stored
Domebox is built on Google Workspace infrastructure. Each customer company gets its own separate spreadsheet-backed database, so one customer's data is not mixed with another's. Google may process and store this data on servers outside India. Where that happens, the transfer relies on Google's contractual safeguards as our sub-processor. Payments are handled by Razorpay, who receive only what is needed to take the payment — we never see or store your full card details.
Sub-processors
| Provider | Purpose |
|---|---|
| Google (Workspace, Apps Script, Drive) | Application hosting, database, email delivery, backups |
| Razorpay | Payment processing and invoicing |
| Netlify | Hosting the public website |
| Meta (WhatsApp Business Platform) | Delivering reminders, only where you opted in |
5. How long we keep it
- While your account is active — for as long as you use the service.
- After cancellation — up to 12 months, so you can reactivate without losing your history. After that it is deleted from live systems.
- Backups — dated copies are retained on a rolling schedule and are overwritten in turn. A deletion request is applied to live systems immediately and works through backups as they rotate.
- Invoices and tax records — retained as long as Indian tax law requires, regardless of account status.
You can ask us to delete your workspace sooner. Write to info@biscsindia.com from the account email.
6. Your rights under the DPDP Act 2023
- Access — a copy of the personal data we hold about you.
- Correction — have inaccurate or incomplete data fixed.
- Erasure — deletion, where we are not required to keep it by law.
- Withdraw consent — for anything you opted into.
- Grievance redressal — escalate to the officer named below, and from there to the Data Protection Board of India.
- Nominate — appoint someone to exercise these rights if you are unable to.
Write to info@biscsindia.com. We respond within 30 days. If the data belongs to your employer's workspace, we will route the request to them, because it is their record to release.
7. Security
- Passwords are stored only as a salted, repeatedly-hashed digest. We cannot read your password, and neither can anyone who obtains the database.
- All traffic is served over HTTPS.
- Each customer company has a separate database rather than a shared table.
- Payment signatures are verified server-side before any account is upgraded.
- Nightly backups, with restores tested.
No system is perfectly secure. If we discover a breach affecting your data, we will notify you and the Data Protection Board of India as the DPDP Act requires.
8. Children
Domebox is a workplace tool and is not directed at anyone under 18. We do not knowingly create accounts for children.
9. Changes
If we change this policy materially we will email the account holder and update the date at the top. Continuing to use Domebox after that constitutes acceptance.
Grievance Officer
In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:
- Name
- info@biscsindia.com
- Address
- Phone
We acknowledge every complaint within 48 hours and aim to resolve it within one month of receipt.