1. Who we are
BOQ+ (“we”, “us”) operates the BOQ+ mobile application for Android and iOS and the website boq.co.in. For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described below, and you are the Data Principal. You can reach us for anything in this policy at support@boq.co.in.
2. What we collect, and why
| Data | Where it comes from | Why we process it |
|---|---|---|
| Account details — email address, sign-in identifier | You, at sign-up | Creating and securing your account; support |
| Firm profile — firm name and any registration details you choose to add | You, in the app | Matching your firm in comparative statements you upload, to build your private track record (win rate, margin vs L1) |
| BOQ files and the rates you enter | You, when you upload a tender BOQ and fill rates | Providing the core service — parsing the BOQ, computing totals, generating BidIQ analysis for you |
| Comparative statements you upload | You, when you upload tender results | Building your track record, and improving the market-intelligence index (bidder names, bid amounts, and results as published by the procuring department) |
| Tender preferences — departments, locations, value ranges, keywords | You, in tender search and filters | Showing you relevant tenders and closing-date alerts |
| Purchase data — plan, price, purchase and expiry dates, store order ID | Google Play / Apple App Store | Activating your subscription or credits, honouring the 12-month credit validity, handling refunds and disputes |
| Device and usage data — device model, OS version, crash logs, feature-usage events | Automatically, from the app | Fixing bugs, keeping the app working on your device |
We do not collect your card or bank details — payments happen entirely inside the Play Store or App Store. We do not collect your contacts, SMS, call logs, or precise location. We do not use your data for advertising, and we do not sell it to anyone.
A note on comparative statements
Comparative statements are documents published by government departments after a tender opens. They contain firm names and bid amounts of the bidders — information the department has already made public through the procurement process. When you upload one, we extract those already-published figures into our market index so every user (including you) sees accurate rate bands and competition data. Other users can see the market data, never who uploaded it, and never your own BOQs, rates, or track record.
3. Consent and legal basis
We process your personal data on the basis of the consent you give when you create an account and accept this policy, for the purposes listed above and no others. Where the DPDP Act permits processing for certain legitimate uses (Section 7) — for example, data you voluntarily provide for a specified purpose, or compliance with law — we rely on that. You may withdraw consent at any time by deleting your account (Section 6 below); withdrawal does not affect processing already done, and some records (e.g., purchase records) may be retained where law requires.
4. Who we share data with
- Service providers (Data Processors): cloud hosting and database providers, crash-reporting and analytics tooling — bound by contract to process data only on our instructions.
- Google / Apple: purchase processing and app distribution, under their own privacy policies.
- Authorities: where required by Indian law, court order, or a lawful government request.
We never share your BOQs, your entered rates, or your firm's track record with other users or with third parties for their own use.
5. Storage, security, and retention
Data is stored on cloud infrastructure with encryption in transit and at rest, access controls, and logging. We maintain reasonable security safeguards as required by Section 8 of the DPDP Act; in the event of a personal data breach we will notify the Data Protection Board of India and affected users as the Act and its rules require.
We keep your data while your account is active. After account deletion, personal data is erased or anonymised within 90 days, except records we must keep under law (e.g., tax and purchase records). Market-index data extracted from government-published comparative statements is retained in de-identified form and is not linked to your account.
6. Your rights under the DPDP Act
- Access: ask for a summary of the personal data we hold about you and how it is processed.
- Correction and erasure: correct inaccurate data or ask us to delete it. You can edit your firm profile in-app and delete any uploaded BOQ yourself.
- Account deletion: delete your account from the app's settings or by emailing us; this removes your BOQs, rates, preferences, and profile as described in Section 5.
- Grievance redressal: write to support@boq.co.in; we aim to respond within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India.
- Nomination: you may nominate a person to exercise these rights on your behalf in case of death or incapacity.
7. Children
BOQ+ is a business tool for contractors and is not directed at children. We do not knowingly process the data of anyone under 18.
8. Changes to this policy
If we materially change this policy, we will notify you in the app before the change takes effect and update the date above. Continued use after notice means acceptance; if you disagree, you can delete your account.
Questions? Write to support@boq.co.in.