Subject Access Requests (SAR)

BizLiveGo Data Access Request Policy

Official procedures, submission channels, authentication safeguards, information disclosure parameters, and statutory timelines for exercising the Right to Access under global privacy legislation.

Platform: BizLiveGo | Operator: MD Joshim Biswas | Malda, WB, India - 732206 | Version: 2026.1

1. Statutory Foundation

The Right of Access (SAR)

Under India's Digital Personal Data Protection (DPDP) Act, the GDPR (Article 15), and the CCPA/CPRA, every Data Principal possesses the fundamental right to obtain confirmation of whether their personal data is being processed.

BizLiveGo ensures verified individuals can request an exhaustive disclosure of their personal records, categories of data retained, processing purposes, and downstream sub-processors.

2. Transparency Scope

Transparency Obligations

Upon receiving a verified Subject Access Request, BizLiveGo provides an unbundled summary disclosing:

  • All categories of personal, commercial, and technical telemetry collected.
  • The precise lawful basis supporting each active data processing stream.
  • Identities of authorized third-party sub-processors with whom data has been shared.
  • Prescribed retention timelines and automated sanitization schedules.
3. Disclosure Boundaries

Information Disclosed vs. Excluded Operational Data

Understanding what information is furnished in an access package and what is legally restricted:

Included in Access Package

Comprehensive personal profile disclosure:

  • Account registration details, email address, and linked mobile number.
  • Full text and layout entries of Business Pages, Resumes, CVs, and Biodata.
  • Uploaded image gallery links, logo assets, and dynamic QR configuration mapping.
  • Commercial billing invoices, payment transaction IDs, and plan tier statuses.
  • Logged consent records, acceptance timestamps, and active privacy preference flags.

Excluded Operational Records

Protected platform intelligence not subject to disclosure:

  • Proprietary software algorithms, template engine code, and styling frameworks.
  • Internal anti-fraud risk scoring flags, abuse detection models, or security heuristics.
  • Third-party personal information that cannot be disclosed without violating their privacy.
  • Privileged legal communications and active statutory law enforcement holds.
Authentication & Redaction

4. Identity Authentication & Zero-Exposure of Prohibited Identifiers

Data Access packages package comprehensive personal records. To prevent data harvesting and account takeovers, strict authentication and redaction rules apply:

Prohibited Credentials (Never Disclosed)

BizLiveGo maintains an absolute non-retention policy for high-risk identifiers:

  • No national ID numbers, social security digits, or passport numbers will ever be output.
  • Account login passwords, salted password hashes, and encryption keys are strictly omitted.
  • Raw payment card CVVs and PINs are excluded (never seen or stored on our servers).

Mandatory Verification Handshake

Before releasing any data access archive, applicants must complete:

  • Two-factor authentication or cryptographic email challenge verification.
  • Verification of profile ownership where third-party agency creation was utilized.
  • Delivery via password-protected, encrypted ZIP downloads expiring in 7 days.
5. Request Workflow

How to Submit a Subject Data Access Request (SAR)

Users can access their information via direct self-service or authenticated administrative tickets:

Step 1: Initiation

Log into your account dashboard and navigate to Account Settings > Privacy Center to generate an on-demand summary, or submit a request via our official Contact Us Desk.

Step 2: Identity Validation

Our privacy office sends an authentication handshake to the registered account email. You must confirm the verification link to authorize data extraction.

Step 3: Compilation & Delivery

Our data fiduciary engine compiles your structured disclosure package in secure machine-readable (JSON/CSV) and human-readable (PDF) formats, issued via encrypted link.

6. Delivery Timelines

7 to 15 Working Days SLA

BizLiveGo fulfills verified Data Access Requests within 7 to 15 working days following successful identity authentication.

Where requests involve complex archival searches or multi-profile agency structures, we may extend the window by up to an additional 15 days upon formal statutory notice.

7. Fair Use & Costs

Zero Processing Fees

Subject Access Requests are fulfilled completely free of charge under standard consumer rights frameworks.

  • Users may request up to two full access disclosures per calendar year without cost.
  • BizLiveGo reserves the right to charge reasonable administrative fees solely for repetitive or manifestly unfounded filings.
8. Vendor Disclosures

Disclosed Downstream Sub-Processors & Data Recipients

Every data access disclosure report specifies downstream vendors processing user records:

Cloud Infrastructure

Cloudflare (edge caching & security), AWS, DigitalOcean, and Hostinger (database clusters and encrypted media storage buckets).

Payment Processors

Razorpay, Cashfree, Stripe, and PayPal (tokenized payment transaction logs and billing subscription records).

Analytics & Pixels

Google Analytics 4 (telemetry event streams) and Meta Pixel (aggregated marketing audience discovery data).

Quick Summary

Data Access Request Quick Reference

Consolidated review of subject access rights, requirements, and fulfillment standards:

Access Parameter Platform Provision Compliance Standard
Statutory Foundation Right to Access under DPDP Act 2023, GDPR (Art. 15), and CCPA/CPRA. Universal user entitlement
Fulfillment Timeline (SLA) Delivered within 7 to 15 working days post-identity validation. Enforced SLA
Delivery Formats Structured machine-readable (JSON/CSV) and human-readable PDF archives. Dual format export
Service Fees Zero fees for standard filings (up to 2 comprehensive requests per year). Free access
Authentication Mandate Registered email handshake and two-factor challenge before archive release. Mandatory anti-takeover control
Excluded Records Proprietary algorithms, internal fraud scoring, and third-party personal records. Protected IP & privacy
Download Security Encrypted, password-protected ZIP archive delivered via secure link. Expires in 7 days

Submit a Formal Subject Access Request

To inspect the personal records associated with your account, obtain an authorized processing summary, or consult our Data Protection Officer, reach out to our privacy office.

Data Protection Officer: Joshim Biswas | Location: Masimpur, Kaliachak, Malda, West Bengal, India - 732206