Privacy Policy

COMPANY:”VIJAY CHOPRA”. (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information collected through our ONLINE ACCOUNTING SOFTWARE (OAS platform), website, applications, and associated services (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, subscribe to or use our SAAS OAS platform, or interact with us. This policy applies to: Account Owners and Authorized Users of our CRM platform. Visitors to our marketing website and web pages. End Contacts / Customer Leads whose information is ingested, processed, or managed by our Customers through our OAS platform ("Customer Data"). PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THE PRACTICES DESCRIBED HEREIN.

1. ROLES AND RESPONSIBILITIES (CONTROLLER VS. PROCESSOR)

Under U.S. data privacy legislation (including state privacy acts such as CCPA/CPRA): Company as a Data Controller / Business: We act as a controller/business with respect to account profile information, billing details, website visitor analytics, and usage data collected directly from our Customers and Authorized Users. Company as a Data Processor / Service Provider: We act as a processor/service provider with respect to Customer Data—the contact records, emails, phone numbers, notes, and sales leads uploaded or ingested into the SAAS OAS platform by our Customers. Our processing of Customer Data is governed by our Terms of Service and Data Processing Addendum (DPA), and we process such data strictly under our Customers' instructions.

2. INFORMATION WE COLLECT

We collect information in three main ways: directly from you, automatically through your use of the Services, and from third-party sources.

2.1 Information You Provide to Us Account and Registration Information: Name, job title, company name, business email address, phone number, physical mailing address, account password, and credentials. Billing and Payment Information: Credit card numbers, bank account details, billing contact name, and billing address (processed via secure, PCI-DSS compliant third-party payment processors). Communications and Customer Support: Records of your correspondence with us, technical support tickets, feedback, survey responses, and contact requests.

2.2 Customer Data Ingested into the OAS When Customers use our SAAS OAS platform, they may upload, import, or sync data about their prospects, customers, and leads. This may include: Contact records (names, email addresses, phone numbers, postal addresses). Interaction logs, sales notes, call history, email communications, deal pipelines, and task lists.

Third-party integration data (e.g., connected email client metadata, calendar events, web forms).

2.3 Information Collected Automatically Log and Device Data: IP address, browser type and version, operating system, device identifiers, system activity, timestamp, referring URLs, and error logs. Usage and Analytics Data: Features accessed, clicks, user interactions, session duration, page views, and performance metrics within the SAAS OAS platform. Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and local storage to keep you logged in, remember preferences, analyze platform usage, and measure marketing performance.

3. HOW WE USE YOUR INFORMATION

We use the personal information we collect for the following operational and business purposes: To Provide and Maintain the Services: Authenticate accounts, process payments, operate OAS functionality, fulfill subscription orders, and deliver technical support. To Improve and Optimize the Platform: Analyze usage trends, monitor platform performance, fix bugs, enhance security, and develop new features or capabilities. To Communicate with You: Send operational notifications, system updates, security alerts, invoices, administrative messages, and respond to support requests. Marketing and Promotional Communications: Send newsletters, promotional offers, product announcements, and webinar invitations (you may opt out at any time). Security and Fraud Prevention: Detect, investigate, and prevent fraudulent transactions, unauthorized access, and violations of our Terms of Service. Legal and Regulatory Compliance: Comply with applicable state and federal laws, legal obligations, subpoenas, and governmental requests.

4. HOW WE SHARE AND DISCLOSE INFORMATION

We do not sell, rent, or trade your personal information. We share personal information only under the following circumstances:

Third-Party Service Providers (Subprocessors): We share data with vetted third-party vendors who assist us in operating our business, including cloud hosting providers (e.g., AWS, GCP), payment processors (e.g., Stripe), email delivery services, analytics tools, and customer support platforms. All such service providers are bound by strict contractual confidentiality and data security obligations. Business Transfers: If Company is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, or sale of company assets, personal information may be transferred as part of the transaction. Compliance with Laws and Legal Requests: We may disclose information if required to do so by law, court order, search warrant, subpoena, or valid legal demand from public or regulatory authorities. Protection of Rights and Safety: We may disclose information to enforce our agreements, protect the security or integrity of our Services, or protect the rights, property, or safety of Company, our customers, or the public. With Your Consent or At Your Direction: We may share personal information with third parties when you explicitly direct or authorize us to do so (e.g., when enabling third-party CRM integration(s)).

5. DATA SECURITY AND RETENTION

Security Safeguards: We employ administrative, physical, and technical safeguards designed to protect personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These include TLS/SSL encryption for data in transit, AES-256 encryption for data at rest, access controls, vulnerability scanning, and multi-factor authentication. Data Retention: We retain personal information for as long as your account is active, as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by legal, regulatory, tax, or accounting obligations. Customer Data is retained during the active subscription period and for a period of up to thirty (30) days following contract termination, after which it is permanently deleted or anonymized in accordance with our retention policy.

6. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your U.S. state of residence (e.g., California, Virginia, Colorado, Connecticut, Utah), you may have the following rights regarding your personal information:

Right to Know / Access: Request details about the categories and specific pieces of personal information we have collected about you, the sources, and the third parties with whom it has been shared. Right to Delete: Request deletion of personal information we have collected from you, subject to certain legal exceptions. Right to Correct: Request correction of inaccurate or incomplete personal information. Right to Opt-Out of Sale or Sharing: We do not sell personal information or share personal information for cross-context behavioral advertising. Right to Non-Discrimination: We will not discriminate against you for exercising any of your statutory privacy rights. Marketing Opt-Out: You may unsubscribe from marketing email communications at any time by clicking the “Unsubscribe” link included at the bottom of our emails or by updating your account communications preferences. To exercise any of these rights, please contact us at info@getbarebooks.com. If you are an end contact whose data is contained in a Customer’s CRM database, please direct your request directly to that Customer (the Data Controller).

7. CHILDREN'S PRIVACY

Our SAAS OAS platform and Services are strictly intended for USA business users and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 13 (or under 16 where required by law). If we learn that we have inadvertently collected personal data from a child without parental consent, we will promptly delete that information.

8. INTERNATIONAL DATA TRANSFERS

Our servers, infrastructure, and primary operations are located in and or out of the United States. If you access or use the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

9. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our legal obligations, technology, or business practices. We will post the revised Privacy Policy on our website and update the "Last Updated" date at the top of this document. If we make material changes to how we process personal information, we will notify you by email or through a prominent notice on our platform prior to the change becoming effective.

10. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Team at: COMPANY: VIJAY CHOPRA Address(Sales): 46 Bennetts Lane, Somerset, NJ 08873 USA Email: info@getbarebooks.com