Privacy Policy
Last updated: 9 October 2026 · Applies to console.be12media.com
In short: we collect only what we need to serve you, protect it with encryption and two-step verification, never sell it, and you can download, correct or erase it from Privacy & my data in your dashboard at any time.
1. Who we are
Be12 Media ("we", "us") is the Data Fiduciary for personal data processed in Be12 Console under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025. Where we handle personal data on behalf of a client (for example, leads from their ad campaigns), we act as that client's Data Processor under our service agreement.
2. What we collect and why
| Who | Data | Purpose |
|---|---|---|
| Everyone | Name, email, phone, password (hashed), sign-in and device logs | Account access, security, fraud prevention, service communication |
| Members | Business name, interests, Health Check answers, requests | Membership benefits, approval and responding to proposal requests |
| Clients | Business, GST and billing details; files and messages you share; payment records | Delivering services, GST tax invoices, payments and support |
| Team members | Personal and emergency contact details, bank account, PAN, UAN, ID and education documents | Employment records, payroll, statutory deductions and filings |
We do not collect full Aadhaar numbers. Card details are entered directly with our payment gateways (Razorpay, Stripe) and never reach our servers.
3. Legal basis and consent
We process data on the basis of your consent, given with an itemised notice when you sign up or accept an invite, and for legitimate uses permitted by Section 7 of the DPDP Act, such as employment purposes and compliance with law (for example, GST and labour law record-keeping). Optional purposes, like marketing emails, are separate and can be withdrawn as easily as they were given.
4. Who we share it with
Only with service providers that help us run the Console — hosting (Hostinger, India/EU data centres), email delivery, and payment gateways — under contracts that require them to protect it, and with authorities where the law requires. We never sell personal data.
5. How we protect it
Encrypted connections (HTTPS/HSTS); AES-256-GCM encryption at rest for bank, PAN and other sensitive details; Argon2id password hashing and breached-password checks; optional (and, for our team, mandatory) two-step verification; role-based access that separates client, HR and member data; access logs and a full audit trail; and private file storage with access checks on every download.
6. How long we keep it
For as long as your account is active and the purpose continues. After a client engagement or employment ends, the account stays read-only for a short window so you can download your records, then personal data is erased. Invoices and statutory employment records are kept for the periods required by tax and labour laws, after which they are deleted.
7. Your rights
- Access a summary of your personal data and who it is shared with, and download a copy
- Correct, complete or update it
- Erase it (subject to legal retention requirements)
- Withdraw consent for optional purposes at any time
- Nominate someone to exercise your rights if you are unable to
- Grievance redressal — we respond within 30 days (and in any case within the 90 days allowed by law)
Use Privacy & my data after signing in, or write to our Grievance Officer at privacy@be12media.com. If you are not satisfied, you may complain to the Data Protection Board of India.
8. Personal data breaches
If a breach affects your personal data, we will inform you and the Data Protection Board without delay, and within 72 hours as required by the DPDP Rules, with what happened, the likely impact and the steps we are taking.
9. Children
Be12 Console is for businesses and adults. We do not knowingly process personal data of anyone under 18.
10. Cookies
We use one strictly necessary, secure, HTTP-only session cookie to keep you signed in, and store your light/dark theme choice in your browser. We do not use advertising or tracking cookies in the Console.
11. Changes
We will notify you in the Console and by email before material changes take effect.
Contact: Be12 Media, Chennai, Tamil Nadu, India · privacy@be12media.com