Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

1. INTRODUCTION

Welcome to Biz365.ai ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

This policy applies to all users of the Biz365.ai platform, including business owners, authorized users, and their customers. By using our services, you agree to the collection and use of information in accordance with this policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide to Us:

  • Account Information: Name, email address, phone number, business name, business address, payment information
  • Customer Data: Customer names, contact information, purchase history, loyalty program data
  • Communications: Emails, messages, support tickets, feedback
  • Marketing Content: Campaign data, email templates, SMS messages, review responses

2.2 Information Collected Automatically:

  • Usage Data: IP address, browser type, device information, pages visited, time spent, click data
  • QR/NFC Data: Scan timestamps, locations, device types, conversion data
  • Analytics Data: Campaign performance, engagement metrics, conversion rates
  • Cookies and Tracking: Session data, preferences, authentication tokens

2.3 Information from Third Parties:

  • Google Business Profile: Business information, reviews, ratings, photos
  • Payment Processors: Transaction data, payment status
  • SMS/Email Providers: Delivery status, engagement metrics

3. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

  • Service Delivery: Provide, maintain, and improve our platform and features
  • Communication: Send campaigns, manage reviews, facilitate customer engagement
  • Analytics: Generate insights, performance reports, and business intelligence
  • Account Management: Process registrations, manage subscriptions, handle billing
  • Customer Support: Respond to inquiries, troubleshoot issues, provide assistance
  • Security: Detect and prevent fraud, abuse, and security threats
  • AI Features: Generate content, provide recommendations, enhance automation
  • Legal Compliance: Meet regulatory requirements, respond to legal requests
  • Product Improvement: Develop new features, optimize performance, enhance user experience

4. DATA SHARING AND DISCLOSURE

We may share your information with:

Service Providers:

Cloud hosting (AWS/Azure/Google Cloud), email services, SMS providers (Twilio), payment processors (Stripe), analytics tools

Business Partners:

Google Business Profile API, third-party integrations you authorize

Legal Requirements:

Law enforcement, regulatory authorities, courts when required by law

Business Transfers:

In connection with mergers, acquisitions, or sale of assets

We do not sell your personal information to third parties. All data sharing is governed by appropriate data processing agreements and security measures.

5. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights:

CCPA Rights (California Residents):

  • Right to Know: What personal information we collect and how we use it
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Update inaccurate personal information
  • Right to Opt-Out: Opt-out of sale/sharing (we don't sell your data)
  • Non-Discrimination: Equal service regardless of privacy choices

GDPR Rights (EU Residents):

  • Right of Access: Obtain a copy of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Request deletion ("right to be forgotten")
  • Right to Data Portability: Receive data in a structured format
  • Right to Object: Object to processing of your personal data
  • Right to Lodge a Complaint: File complaint with supervisory authority

Other State Privacy Rights:

Residents of Virginia, Colorado, Connecticut, and Utah have similar rights to access, correct, delete, and obtain a copy of their personal information.

Global Privacy Control (GPC):

We automatically recognize and process Global Privacy Control signals from your browser.

Exercise Your Rights

To exercise any of these rights, please contact us at:

6. DATA SECURITY

We implement industry-standard security measures to protect your information:

🔐 Encryption

Data encrypted in transit (TLS/SSL) and at rest (AES-256)

🛡️ Access Controls

Multi-factor authentication and role-based access

📊 Monitoring

24/7 security monitoring and intrusion detection

🔍 Audits

Regular security assessments and vulnerability testing

💾 Backups

Automated backups with geographic redundancy

🚨 Incident Response

24-hour breach notification procedures

SOC 2 Type II Compliance: We maintain SOC 2 Type II compliance with comprehensive security controls and regular third-party audits.

7. DATA RETENTION

We retain your information for as long as necessary to provide services and comply with legal obligations:

  • Active Accounts: Data retained for duration of subscription plus 90 days
  • Closed Accounts: 90-day data export window, then secure deletion
  • Financial Records: Retained for 7 years per legal requirements
  • Analytics Data: Aggregated and anonymized data may be retained indefinitely
  • Legal Hold: Data preserved when required by law or litigation

8. INTERNATIONAL DATA TRANSFERS

Your information may be processed in the United States and other countries. We ensure appropriate safeguards:

  • Standard Contractual Clauses: EU Commission-approved data transfer agreements
  • Supplementary Measures: Additional technical and organizational safeguards
  • Data Processing Agreements: Binding agreements with all processors

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance your experience:

Essential Cookies:

Required for platform functionality, authentication, and security

Performance Cookies:

Help us understand how you use the platform and improve performance

Analytics Cookies:

Collect information about visitor behavior and usage patterns

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

10. CHILDREN'S PRIVACY

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@biz365.ai.

11. THIRD-PARTY SERVICES

Our platform integrates with third-party services including:

  • Google Business Profile (reviews and business information)
  • Twilio (SMS messaging)
  • Stripe (payment processing)
  • Email service providers
  • Cloud hosting providers (AWS/Azure/Google Cloud)

These services have their own privacy policies. We maintain a current Subprocessor List and require appropriate data protection agreements.

12. MARKETING COMMUNICATIONS

We may send you marketing communications about our services. You can opt-out anytime:

  • Click "unsubscribe" in any marketing email
  • Update preferences in your account settings
  • Contact us at support@biz365.ai

Note: You cannot opt-out of transactional emails (account notifications, service updates, security alerts).

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our platform at least 30 days in advance. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

14. CONTACT US

Questions about this Privacy Policy? Contact our Privacy Team:

Privacy Matters

support@biz365.ai

Data Security

support@biz365.ai

Mailing Address

5001 Pendleton Way
Cranberry Twp, PA 16066

For Terms of Service, visit: Terms and Conditions

© 2025 Biz365.ai. All rights reserved.