Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to our multi-tenant SaaS platform, including web and mobile access (the “Service”). It covers how we handle personal data for customers, users, and visitors.

2. Information We Collect

• Account information: name, work email, phone, organization details, role and permissions.
• Usage data: pages and actions, device and browser type, IP address, timestamps, performance metrics.
• AI interaction data: prompts, outputs, and quality signals used to improve AI Features.

3. How We Use Information

• Provide and operate the Service, including authentication and core workflows.
• Secure the platform through monitoring, audit logs, and abuse prevention.
• Improve product quality, AI accuracy, and user experience.
• Support customers and communicate service updates.
• Manage billing and account administration where applicable.

4. Legal Basis for Processing (GDPR-ready)

• Performance of a contract to deliver the Service.
• Legitimate interests such as security, reliability, and improvement.
• Consent where required (for certain cookies or marketing).
• Compliance with legal obligations.

5. Data Sharing & Disclosure

• Service providers supporting hosting, analytics, communications, and payments.
• Security and fraud-prevention partners.
• Legal disclosures when required by valid requests.
• Business transfers as part of a merger or acquisition, with appropriate safeguards.

We do not sell personal data.

6. Cookies & Tracking Technologies

• Essential cookies: login, security, and core functionality.
• Analytics cookies: help us understand usage and improve performance.
• Preference cookies: save settings like language and layout.

You can manage cookies in your browser. Disabling essential cookies may limit functionality.

7. Data Storage & Security

• Encryption in transit, access controls, and continuous monitoring.
• Least-privilege access and secure development practices.
• No system is 100% secure; we work to reduce risk and respond quickly.

8. Data Retention Policy

We keep data only for as long as needed to provide the Service, meet legal obligations, and maintain security. When no longer required, we delete or anonymize it.

9. User Rights

• GDPR: access, correction, deletion, portability, and objection where applicable.
• CCPA/CPRA: right to know, delete, and non-discrimination.
• Other global rights: similar requests may be supported based on local law.

To exercise rights, contact support@businzo.com. We may verify identity before actioning requests.

10. Cross-Border Data Transfers

We may process data in countries where we or our service providers operate. We use appropriate safeguards to protect your data during transfers.

11. Children’s Privacy

The Service is intended for business use and not directed to children. If we learn we have collected a child’s data, we will delete it.

12. Changes to This Policy

If we make material changes, we will provide notice through the Service or by email.

13. Contact & Data Protection Officer

Privacy and data protection contact: support@businzo.com.