At BR Business Mart , we take the handling of personal information seriously. This policy describes the currently reported practices of our retailer, distributor and master distributor platform, including Aadhaar OTP-based KYC, recharge/PAN workflows and the service wallet. Where technical or legal details are not yet verified, we identify the limitation rather than claiming a process or safeguard that has not been established.
01 Information We Collect
Account and contact details
BR Business Mart is a proprietorship-based digital services platform for retailers, distributors and master distributors in India. When you register or use the platform, we collect your name, mobile number, email address and account-related information. Accounts may be created by you, an administrator, a master distributor or a distributor.
Identity verification (KYC)
For KYC we collect your name, date of birth, father's name, full address, Aadhaar number, PAN number, and the photograph and other identity details obtained through the Aadhaar OTP verification process. You have informed us that a physical Aadhaar or PAN document upload is not required in your standard process. We store the KYC details we receive in our own system. An OTP is sent to the Aadhaar-linked mobile number as part of the verification flow.
Aadhaar and PAN details are sensitive personal information. We collect and process this information for onboarding, identity verification and related permitted services. We do not claim that BR Business Mart directly operates a biometric authentication facility: where a PAN service requires biometrics, that process takes place on the relevant external provider's site, and we do not collect or store biometric data on our own platform.
Login and transactions
Account login uses a mobile number and password. If a user enables additional OTP verification in their profile, an OTP may also be required. We record mobile and DTH recharges, NSDL/UTI PAN service requests, wallet additions, transaction amounts, statuses, references, refunds and wallet history.
Technical information
Our platform records IP addresses and uses session information to keep users signed in and operate account features. The app may request device permissions described in Section 5; permission access must be limited to the actual features in use.
02 How Information Is Collected
We collect information when you register, when an administrator or authorized distributor creates an account, when you submit KYC details, when you verify an Aadhaar-linked OTP, when you use recharge, PAN or wallet services, and when you contact support.
We also receive identity information through the Aadhaar OTP verification workflow and transaction responses from service providers involved in delivering your requests. Our servers may record your IP address and maintain session cookies or similar session identifiers.
03 How We Use Information
- To onboard and verify retailers, distributors and master distributors and maintain their accounts.
- To authenticate logins and provide optional OTP-based sign-in verification.
- To process mobile and DTH recharge, PAN service and wallet requests and maintain reports.
- To investigate failed transactions and credit eligible refunds to the platform wallet.
- To communicate service notices, respond to support requests, and investigate misuse and fraud.
- To send promotional SMS, WhatsApp messages or push notifications, with an available marketing opt-out.
- To maintain records and respond to applicable legal obligations and lawful requests.
BR Business Mart is intended for users aged 18 or older and operates for users in India.
04 Service Providers and Disclosures
BR Business Mart has identified Ezytm Pvt Ltd as a recharge-related API/service vendor and Hostinger (India) as its hosting provider. Its service offering also includes NSDL and UTI PAN-related workflows. Providing a service can require sending the necessary transaction or identity fields to the relevant verification operator or service provider, or receiving responses from them. The specific KYC verification provider and exact data fields exchanged have not yet been confirmed for this policy.
We do not claim that no data ever leaves our system: service requests, Aadhaar OTP verification, recharge processing and hosting can involve external parties. We do not state that customer data is sold for third-party marketing. Data may also be disclosed where legally required or in response to a valid lawful request.
Our support correspondence uses our hosting/email services. Details about additional SMS and notification delivery providers will be added when verified.
05 App Permissions
Depending on the features used and the installed app version, the app may request Camera, Location, SMS/OTP, Contacts, Microphone, Photos/Storage and Notifications permissions. The exact technical purpose and whether each permission accesses or transmits data has not yet been confirmed. This list is a disclosure of permissions reported by the operator, not a claim that all permissions are necessary for every feature.
Users can review permissions through Android settings. Where a permission is optional, refusing it may limit only the feature that requires it. We will update this section with the exact purpose of each permission after review of the final Android manifest and application behavior.
For OTP verification, the app's use of SMS permissions must be separately checked against Google Play's restrictions. This policy does not grant permission to read message content beyond what applicable platform policies and user consent permit.
06 Wallet, Payments and Refunds
BR Business Mart offers an internal service wallet. Users add funds through a UPI/QR payment flow managed by the business. The operator reports that it does not store users' bank account numbers or UPI account credentials. Transaction and wallet records, including payment statuses and references, are maintained in the platform.
The wallet cannot be used to transfer funds from the platform to a user's bank account through a settlement or cash-out function. According to the current operating process, failed service transactions are normally refunded to the user's platform wallet within 24 hours . Actual timing may depend on the transaction and its status; contact support if the credit is delayed.
No third-party payment gateway name was provided. Before publication, the technical payment flow and UPI provider details should be checked against the production integration.
07 Sessions, Cookies and Communications
We use session-related mechanisms to support sign-in and access to logged-in services. You may be able to control cookies through your browser settings, but disabling required session cookies can affect login functionality.
BR Business Mart reports that it does not use Firebase, Google Analytics, Crashlytics or AdMob. We may send operational and promotional communications by SMS, WhatsApp and push notifications. You may opt out of promotional communications using available controls or by contacting us; essential transactional and security communications may still be sent.
08 Security Practices
BR Business Mart reports using HTTPS for its website/app connections, hashed passwords and administrator-controlled database access. These measures are intended to reduce the risk of unauthorized access. The precise encryption arrangements for stored KYC data, key management and security audit practices have not been confirmed and are not represented as completed measures.
No online service can promise absolute security. Please protect your password and OTP and contact us promptly if you suspect unauthorized access.
09 Retention, Deactivation and Deletion
According to the current operating practice, KYC records, account information and recharge, PAN and wallet transaction histories are retained on a long-term or indefinite basis. Account deactivation presently restricts account use but does not itself remove stored KYC or transaction records .
Users can initiate a deletion-related request using the option available in the app or by emailing support. We will review the request and communicate the outcome, including what information can be deleted and what must be retained where a legal obligation applies. The exact legal retention periods, deletion workflow and timeframes have not yet been finalized. Until these are implemented and confirmed, we cannot represent account deactivation as complete deletion.
10 Your Choices and Privacy Requests
Users can update their email address and mobile number through the profile tools made available to them. For requests to access or correct other KYC information, ask about the handling of information, withdraw marketing preferences or request account/data deletion, contact support@brbusinessmart.com or use the in-app request option where available.
We may need to verify that a request comes from the account holder before acting on it. Requests are handled subject to applicable legal requirements and any verified record-retention obligations. Deactivation and deletion may have different consequences for account access and records.
11 Age and Geographic Scope
BR Business Mart's app is intended for adults aged 18 years and above , serving users in India . It is not intended for children. If you believe an underage person has submitted information, please notify the privacy contact so that the matter can be reviewed.
12 Hosting and Data Location
BR Business Mart reports using Hostinger hosting infrastructure located in India. Other service providers involved in PAN verification, recharge processing, communication or payments may operate their own infrastructure. We have not established a complete list of their server locations or international transfers, so we do not guarantee that every technical processing operation takes place solely within India.
13 Changes to This Policy
This policy is effective from 1 October 2026 . We may revise it to reflect actual app behavior, new services, new providers or changes in legal requirements. Updates will be published on this page with an updated effective/revision date where appropriate. We encourage users to review it from time to time.
14 Contact and Privacy Grievances
Business:
BR Business Mart (Proprietorship)
Address:
Balangir, Odisha, India – 767001
Privacy / grievance email:
support@brbusinessmart.com
Phone:
+91 8144276263
Privacy and grievance enquiries are handled by the business administrator. If you are requesting account deletion, use the subject line Account Deletion Request and provide your registered mobile number through a safe communication channel. Do not email passwords, OTPs, full Aadhaar numbers or copies of sensitive identity documents unless a secure process is specifically provided.