BifrostX
Sign in

Privacy Policy

This policy explains what Bengal Web Solution collects when you use BifrostX, why, who it is shared with, how long we keep it, and the choices you have. We have tried to write it plainly and to describe what the service really does.

Effective from
Last updated

BifrostX is maintained by Bengal Web Solution.

1Who we are

BifrostX is a video meeting service maintained by Bengal Web Solution and operated by Bengal Web Solution, 48/B/5 S P Mukherjee Sarani Serampore, Hooghly West Bengal, India - 712201. For this policy, Bengal Web Solution is the party that decides how your personal data is used.

2What we collect

Your account.

  • Your name and your mobile number (every account has its own number), and your email address if you sign up with one.
  • Your password, stored only as a salted hash, never in readable form. If you add a passkey we store its public key; if you turn on an authenticator app we store its secret.
  • Sign-in records: when you signed in, and the device type and IP address used.

Your meetings.

  • Meeting titles, codes, schedules, and the email addresses of people you invite.
  • Who was in a meeting and when: display name, whether signed in or a guest, and their role. Hosts can see this in the meeting history.
  • Chat messages, poll questions and votes, shared notes and whiteboards. These are stored so late joiners and the host can see them.
  • Files you share with everyone in a meeting, held on our servers for up to 24 hours. Files sent directly to one person travel between your browsers and are not stored by us.
  • Recordings, only when the host starts one (everyone in the meeting is told). They are kept for up to 30 days and only the host can open them.
  • Captions are shown live and are saved only if the host chooses to save them.

Technical data. Our servers log requests (including IP addresses) to keep the service secure and to fix faults, and keep short-lived counters to stop abuse such as password guessing.

3What we cannot see

  • In an end-to-end encrypted meeting, the audio and video are encrypted on your device and we cannot read them. Chat, files, notes, polls and the whiteboard in those meetings are not end-to-end encrypted.
  • If you turn on live captions, your browser's speech recognition may send your audio to the browser's maker (for example Chrome sends it to Google). We only receive the resulting text. Captions are never available in encrypted meetings.
  • To set up direct file transfers your browser contacts a public STUN server, which sees your IP address.

4How we use it

  • To run meetings and your account, and to send sign-in codes and meeting invitations.
  • To keep the service secure and prevent abuse and fraud.
  • To give support, and to handle payments (through Razorpay) and invoices once paid plans are available.
  • To meet legal obligations.

We do not sell your personal data, we do not show advertising, and we do not use advertising or third-party tracking cookies.

5Who we share it with

  • Our text-message provider (textmsg.in) receives your mobile number and the code when we send you a sign-in code.
  • Cloudflare protects and delivers our website, so web traffic passes through its network.
  • Razorpay, our payment gateway, processes payments for paid plans and verified profiles. When you pay, Razorpay receives your name, contact details and payment details on its own secure checkout, under its own privacy policy. We receive the payment status and a reference, never your card number, UPI PIN or bank details.
  • Authorities, when the law requires it.

Our video servers are run by us, not by a third party.

6Cookies

We use only the cookies the service needs: a sign-in cookie and short-lived security cookies. There are no advertising or analytics cookies.

7How long we keep it

  • Account details: until you ask us to delete your account.
  • Meeting history (attendance, chat, notes, polls): kept so hosts can review their meetings, until the meeting or account is deleted at your request.
  • Shared files: up to 24 hours. Recordings: up to 30 days.
  • Server logs: for a limited period for security and troubleshooting.
  • Payment and invoice records: as long as tax law requires.

8Your rights and choices

You can ask us to show you the personal data we hold about you, to correct it, to delete it, or to stop using it where you had given consent. You can also complain if you think we have mishandled your data. Write to [email protected] from the email address or mobile number on your account. We will confirm who you are and respond within the time the law allows. These are rights under India's Digital Personal Data Protection Act, 2023, and we apply them to everyone who uses BifrostX.

9Security

Connections are encrypted with HTTPS. Passwords are stored as salted hashes. Our staff sign in to a separate console with an authenticator app, and everything they do there is logged. No system is perfectly secure, so please use a strong password or a passkey.

10Children

BifrostX is not directed at children under 18. If you believe a child has created an account, tell us and we will deal with it.

11Changes to this policy

If we change this policy in a way that matters, we will update the "Last updated" date at the top and tell signed-in users.

12Contact and grievances

For any privacy question or complaint, write to [email protected]. See also Terms and Conditions and Support.