Privacy Policy
Last Updated: March 12, 2026 • Effective Date: March 12, 2026
GokaBiz (formally known as GokaBiz) is a product of Goka AiTech Systems.
This Privacy Policy explains how Goka AiTech Systems ("we", "us", or "our"), a sole proprietorship registered in Maharashtra, India, collects, processes, and protects your information when you access or use our multi-tenant business operating system, GokaBiz, hosted at gokabiz.in and its dedicated subdomains.
1. Data Controller & Legal Identity
The data controller responsible for your personal data is:
Legal Entity: Goka AiTech Systems (Sole Proprietorship)
Registered Jurisdiction: Maharashtra, India
Registered Office Address: Maharashtra, India
Telephone / Contact: +91-8600996584
Compliance & Grievance Email: [email protected]
Public Verification Domain: gokabiz.in
2. Information We Collect
We collect information necessary to operate our business operating suite for Indian MSMEs:
- Tenant Business Information: Trade name, business category, GSTIN, branch addresses, contact email, staff names, and phone numbers.
- Operational & Transactional Data: Service packages, retail inventory, equipment rental logs, driving school student schedules, invoices, and customer receipt records created by tenants.
- Authentication & Security Data: Passwords (hashed via bcrypt), session cookies, IP addresses, and user-agent details for audit and security logging.
- Customer Engagement & Review Proofs: Customer reviews, ratings, and business progress stories explicitly approved by tenants for publication.
3. Google Business Profile & Google API Data Disclosures
GokaBiz connects with Google APIs (including Google Business Profile APIs and Places API) to provide automated profile optimization, review monitoring, and response management for tenant businesses.
Data Accessed via Google OAuth: When a tenant connects their Google Account, GokaBiz accesses the Google Business Profile account and its locations (name, address, opening hours, phone number, website, categories and attributes), photos and posts, customer reviews (star ratings, review text, reviewer display names and the business's replies), and profile performance metrics (views, calls, direction requests and website visits).
Purpose of Use: We use Google user data exclusively to:
- Display and calculate tenant Google Business Profile health and completeness scores.
- Notify business owners of new customer reviews in real time.
- Keep the business's Google profile up to date when its owner asks us to: update opening hours, phone number, website and attributes, and publish or remove posts and photos. GokaBiz never deletes the business listing itself.
- Enable business owners to compose and post replies directly to Google Reviews.
- Provide aggregated local SEO search and impression insights.
Limited Use Compliance: GokaBiz's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
No Transfer or Sale: We strictly do NOT sell Google user data, nor do we transfer Google data to third parties for advertising or profiling. Google data is never used to train generalized artificial intelligence models without explicit tenant consent.
Revoking Google Permissions: A business can withdraw GokaBiz's access to its Google data at any time through Google Security Account Permissions. Once access is withdrawn, GokaBiz can no longer read or change that business's Google data.
Storage, Retention & Deletion of Google Data: Google access tokens are stored encrypted at rest. To show reviews and results in the dashboard we keep a copy of the business's reviews, replies, posts and performance numbers for as long as the business uses GokaBiz. A business can delete the Google data we hold for it itself, at any time and straight away, in Settings → Google connection → Delete my Google data (owner only): this withdraws our access at Google and erases the Google access tokens and the data we received from Google (reviews, performance numbers, search terms, profile checks, keyword and review-theme reports, and the Google figures shown on its branches). A business may instead ask us by emailing [email protected] with the subject line "Google Data Deletion Request" and its business name; we handle such a request promptly and confirm by reply. Posts and photos the business wrote itself stay unless it asks us to remove those too. A business can also disconnect Google itself at any time in Settings → Google connection.
4. Meta Platforms & WhatsApp Cloud API (Tech Provider)
Goka AiTech Systems operates as a SaaS platform and Meta Tech Provider enabling multi-channel marketing, social media syndication, and transactional messaging for Indian MSMEs:
Meta & Instagram Permissions: When connected, we request scoped permissions (such as pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish) strictly to publish tenant-authorized promotional posts, festive updates, and view engagement metrics.
WhatsApp Cloud API: As a Tech Provider, GokaBiz facilitates Embedded Signup for tenant WhatsApp Business Accounts (WABA). We handle transactional notifications (such as digital fee receipts, student timetable reminders, and order confirmations) in compliance with the Meta WhatsApp Business Messaging Policy.
Meta Data Deletion Callback & Instructions: In compliance with Meta Platform Terms, users may request the deletion of their Meta platform data associated with GokaBiz at any time:
How to request data deletion:
- Go to your Facebook Profile > Settings & Privacy > Settings > Apps and Websites.
- Find GokaBiz and click Remove.
- Alternatively, send an email to [email protected] with the subject line "Meta Data Deletion Request" including your Business Name and connected Page ID. We will erase all cached access tokens and platform-derived records within 48 hours and provide a confirmation code.
5. Data Retention & Security
We implement industry-standard encryption in transit (HTTPS / TLS 1.3) and at rest (AES-256 for private documents and credentials). We retain tenant operational data for as long as the tenant maintains an active subscription or as mandated by Indian statutory laws (e.g. GST invoice retention requirements).
6. Grievance Officer & Inquiries
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act (DPDP Act, 2023), the Grievance Officer details are provided below:
Attention: Compliance & Grievance Officer
Entity: Goka AiTech Systems
Address: Maharashtra, India
Email: [email protected]
Phone: +91-8600996584