Privacy Policy

1. Introduction and Overview

Welcome to BizIntell ("we," "us," "our," or "Company"). We are committed to protecting your privacy and ensuring the security of your personal information and data. This Privacy Policy ("Policy") explains how we collect, use, disclose, store, process, and protect your information when you access or use the BizIntell platform, including but not limited to our website located at bizintell.org, our web application interface, RESTful API endpoints, mobile applications, and any related services (collectively, the "Service" or "Platform").

This Policy applies to all users of the Service, including visitors, registered users, subscribers, API users, and administrators. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Policy, you must not access or use the Service.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of material changes by posting the updated Policy on our website, sending you an email to the address associated with your account, or through other reasonable means. Your continued use of the Service after such changes constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

2. Information We Collect

2.1 Information You Provide to Us

Account Information: When you register for an account, we collect information such as your name, email address, password (which is encrypted and not accessible to us), company or organization name (if applicable), job title, phone number (optional), and any other information you choose to provide during registration or profile setup.

User Content: We collect and store the documents, files, data, text, images, and other content that you upload, submit, post, transmit, or otherwise make available through the Service ("User Content"). This includes but is not limited to PDFs, Microsoft Word documents, Excel spreadsheets, CSV files, images, and other supported file formats. User Content may contain personal information, business information, or other sensitive data depending on what you choose to upload.

Workspace and Configuration Data: We collect information about your workspaces, including workspace names, descriptions, configurations, AI prompt settings, customizations, organizational structures, and any other settings or preferences you configure within the Service.

Query and Interaction Data: We collect information about your interactions with the Service, including natural language queries, search terms, analysis requests, API calls, feature usage, and other actions you take while using the Service.

Communication Information: When you contact us for support, submit feedback, participate in surveys, or communicate with us through any channel, we collect the information you provide, including your name, email address, phone number, message content, and any attachments or files you send.

Payment Information: When you subscribe to a paid plan, payment information is collected and processed by Paddle.com Market Limited ("Paddle"), our third-party payment processor. Paddle collects information such as credit card numbers, billing addresses, payment method details, and transaction history. We do not directly collect or store your full payment card information, but we may receive limited payment information from Paddle, such as the last four digits of your card, billing address, and payment status, for account management and support purposes.

2.2 Information Automatically Collected

Usage Data: We automatically collect information about how you access and use the Service, including but not limited to: pages visited, features used, time spent on pages, clickstream data, navigation paths, document upload frequency, analysis requests, API usage patterns, error logs, performance metrics, and other usage statistics.

Device and Technical Information: We collect information about your device and how you access the Service, including but not limited to: device type, operating system, browser type and version, IP address, unique device identifiers, mobile carrier information, screen resolution, language preferences, time zone, and other technical specifications.

Log Data: Our servers automatically record information ("Log Data") when you access the Service, including but not limited to: IP address, access times, pages viewed, links clicked, searches performed, API requests, error messages, system events, and other diagnostic and usage information.

Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, local storage, session storage, and similar tracking technologies to collect information about your interactions with the Service. Cookies are small text files stored on your device that help us recognize you, remember your preferences, analyze usage patterns, and improve the Service. You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of the Service.

Location Information: We may collect approximate location information based on your IP address or other technical data. We do not collect precise GPS location data unless you explicitly grant permission and it is necessary for specific features of the Service.

2.3 Information from Third Parties

Authentication Providers: If you choose to authenticate using Google OAuth or other third-party authentication providers, we may receive information from those providers, including but not limited to your name, email address, profile picture, and other information you have authorized the provider to share with us.

Payment Processors: As mentioned above, Paddle provides us with limited payment information for account management purposes. We may also receive information about subscription status, billing history, and payment-related communications.

Cloud Storage Providers: We use third-party cloud storage providers (such as Cloudflare R2) to store your User Content. These providers may collect certain technical information related to storage operations, but we maintain control over your User Content and how it is processed.

Analytics and Service Providers: We may receive information from third-party analytics providers, service providers, and business partners that help us understand how the Service is used, improve our services, and provide better user experiences.

3. How We Use Your Information

We use the information we collect for various purposes, including but not limited to:

• Providing and Operating the Service: To provide, operate, maintain, and improve the Service, including processing your document uploads, performing AI analysis, generating insights and reports, managing your workspaces, and delivering all features and functionality of the Platform.
• Account Management: To create and manage your account, authenticate your identity, process your registration, manage your subscription, handle billing and payments, and provide customer support and technical assistance.
• AI Processing and Analysis: To process your User Content through our AI microservices, perform natural language processing, data extraction, pattern recognition, predictive analytics, and generate insights, visualizations, and reports based on your documents.
• Personalization: To personalize your experience, remember your preferences, customize your workspaces, tailor AI prompts and configurations, and provide content and features that are relevant to your needs and interests.
• Communication: To communicate with you about your account, subscription, service updates, security alerts, support requests, marketing communications (with your consent), and other important information related to the Service.
• Security and Fraud Prevention: To detect, prevent, and address security threats, fraud, abuse, unauthorized access, and other illegal or harmful activities, and to protect the rights, property, and safety of BizIntell, our users, and third parties.
• Analytics and Improvement: To analyze usage patterns, understand how the Service is used, identify trends, measure performance, conduct research, and improve the Service, including developing new features, enhancing existing features, and optimizing user experiences.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, government requests, court orders, and to enforce our Terms and Conditions, Privacy Policy, and other agreements.
• Business Operations: To manage our business operations, conduct administrative tasks, process transactions, maintain records, manage relationships with service providers, and for other legitimate business purposes.
• API and Integration Services: To provide API access, process API requests, manage API authentication and authorization, monitor API usage, and support third-party integrations and automated workflows.

We may combine information we collect from different sources for the purposes described above. We do not use your information for purposes that are incompatible with those described in this Policy without your consent, except as required or permitted by law.

4. How We Share and Disclose Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share information with third-party service providers, vendors, and business partners who perform services on our behalf, including but not limited to:

• Payment Processing: Paddle processes subscription payments and handles billing, invoicing, and payment-related customer support. Paddle's use of your information is governed by their Privacy Policy and Terms of Service.
• Cloud Storage: Cloudflare R2 and other cloud storage providers store your User Content securely. These providers implement security measures but do not have access to process or analyze your content except as necessary to provide storage services.
• Hosting and Infrastructure: Third-party hosting providers and infrastructure services that host our servers, databases, and other technical infrastructure necessary to operate the Service.
• Analytics and Monitoring: Analytics providers, monitoring services, and performance tracking tools that help us understand usage patterns, identify issues, and improve the Service.
• Customer Support: Customer support platforms and tools that help us provide technical assistance and respond to your inquiries.
• Email and Communication Services: Email service providers and communication platforms that help us send transactional emails, notifications, and marketing communications (with your consent).
• Authentication Services: Google and other authentication providers when you choose to use OAuth or similar authentication methods.

These service providers are contractually obligated to protect your information, use it only for the purposes we specify, and comply with applicable data protection laws. They are not permitted to use your information for their own purposes or to disclose it to other parties except as necessary to provide services to us.

4.2 Legal Requirements and Law Enforcement

We may disclose your information if required to do so by law, regulation, legal process, government request, court order, or to comply with applicable laws and regulations. We may also disclose information if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, subpoenas, warrants, or court orders.
• Respond to government requests, including requests from law enforcement and regulatory authorities.
• Enforce our Terms and Conditions, Privacy Policy, or other agreements.
• Protect the rights, property, or safety of BizIntell, our users, or third parties.
• Prevent or investigate fraud, security threats, abuse, or illegal activities.
• Defend against legal claims or respond to legal proceedings.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction, your information may be transferred to or acquired by a third party. We will notify you of any such change in ownership or control of your information and provide you with choices regarding your information, as required by applicable law.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when you authorize integration with third-party services, participate in partner programs, or request that we share information with specific parties.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This may include usage statistics, trends, analytics, and other insights that help us and others understand how the Service is used and improve business intelligence and document analysis technologies.

5. Data Security

We implement industry-standard technical, administrative, and physical security measures to protect your information from unauthorized access, disclosure, alteration, destruction, or loss. These measures include but are not limited to:

• Encryption: We use encryption at rest and in transit to protect your User Content and personal information. Data is encrypted using industry-standard encryption algorithms and protocols.
• Access Controls: We implement strict access controls, authentication requirements, and authorization mechanisms to ensure that only authorized personnel and systems can access your information.
• Secure Infrastructure: We use secure cloud infrastructure, firewalls, intrusion detection systems, and other security technologies to protect our systems and data.
• Regular Security Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address security issues.
• Employee Training: We provide security training to our employees and contractors and require them to follow strict security policies and procedures.
• Incident Response: We have incident response procedures in place to detect, respond to, and mitigate security incidents and data breaches.
• Data Backup and Recovery: We maintain regular backups of our systems and data to ensure service continuity and disaster recovery.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials, including your password and API keys, and for taking appropriate measures to protect your information on your end.

If we become aware of a security breach that may affect your information, we will notify you and relevant authorities as required by applicable law. We will provide information about the nature of the breach, the information that may have been affected, and the steps we are taking to address the breach.

6. Data Retention

We retain your information for as long as necessary to provide the Service to you, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period depends on the type of information and the purpose for which it was collected:

• Account Information: We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your account information within 30 days, except as required by law or for legitimate business purposes.
• User Content: We retain your User Content for as long as your account is active or as needed to provide the Service. You can delete your User Content at any time through the Service interface. Upon account deletion, we will delete your User Content within 30 days, except as required by law or for legitimate business purposes.
• Analytics Output: We retain Analytics Output generated from your User Content for as long as your account is active or as needed to provide the Service. Analytics Output may be retained for longer periods if you have exported it or if it is necessary for legal or business purposes.
• Usage and Log Data: We retain usage data, log data, and other technical information for varying periods, typically up to 12-24 months, for analytics, security, and service improvement purposes.
• Payment Information: Payment information is retained by Paddle in accordance with their data retention policies and applicable legal requirements. We retain limited payment information (such as billing address and payment status) for as long as necessary to manage your subscription and comply with legal obligations.
• Legal and Compliance: We may retain certain information for longer periods if required by law, regulation, legal process, or to protect our legal rights and interests.

After the retention period expires, we will delete or anonymize your information in a secure manner, except as required by law or for legitimate business purposes. Some information may be retained in backup systems for additional periods, but it will not be actively processed or used.

7. Your Rights and Choices

Depending on your location and applicable data protection laws, you may have certain rights regarding your personal information. These rights may include:

7.1 Access and Portability

You have the right to access your personal information and receive a copy of your data in a structured, machine-readable format. You can access much of your information through your account settings, and you can request a complete copy of your data by contacting us.

7.2 Correction and Update

You have the right to correct, update, or modify your personal information. You can update most of your account information through your account settings. If you need to update information that is not available through the interface, please contact us.

7.3 Deletion

You have the right to request deletion of your personal information and User Content. You can delete your User Content through the Service interface, and you can delete your account through your account settings. We will delete your information in accordance with our data retention policies and applicable law, except as required to retain certain information for legal, regulatory, or legitimate business purposes.

7.4 Objection and Restriction

You have the right to object to certain processing of your personal information and to request restriction of processing in certain circumstances. However, some processing may be necessary for us to provide the Service, and restricting such processing may limit your ability to use certain features.

7.5 Opt-Out of Marketing

You can opt-out of receiving marketing communications from us by clicking the unsubscribe link in our emails, adjusting your communication preferences in your account settings, or contacting us. Please note that you may still receive transactional and service-related communications even if you opt-out of marketing communications.

7.6 Cookies and Tracking

You can control cookies and tracking technologies through your browser settings. Most browsers allow you to refuse or delete cookies, but doing so may limit your ability to use certain features of the Service. You can also opt-out of certain third-party analytics and advertising cookies through industry opt-out tools.

7.7 Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another service provider, where technically feasible. You can export your Analytics Output and certain User Content through the Service interface or API.

7.8 Withdrawal of Consent

Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing consent may affect your ability to use certain features of the Service. Please note that withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing certain requests.

8. Children's Privacy

The Service is not intended for children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly. If you are under 18, you must not use the Service or provide any personal information to us without the consent and supervision of a parent or guardian.

9. International Data Transfers

The Service is operated from and may be accessed from various locations worldwide. Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

By using the Service, you consent to the transfer of your information to countries outside your country of residence, including but not limited to the United States, European Union member states, and other jurisdictions where our service providers and infrastructure are located.

We take appropriate measures to ensure that your information receives an adequate level of protection in the countries where it is processed, including implementing appropriate safeguards such as standard contractual clauses, adequacy decisions, or other mechanisms recognized by applicable data protection laws.

10. California Privacy Rights (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• The right to delete your personal information (subject to certain exceptions).
• The right to opt-out of the sale of personal information (we do not sell personal information).
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit the use and disclosure of sensitive personal information.

To exercise your California privacy rights, please contact us using the information provided in the "Contact Us" section below. We will verify your identity and respond to your request within the timeframes required by law.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and applicable data protection laws, including:

• The right of access to your personal data.
• The right to rectification of inaccurate personal data.
• The right to erasure ("right to be forgotten") of your personal data.
• The right to restrict processing of your personal data.
• The right to data portability.
• The right to object to processing of your personal data.
• The right to withdraw consent where processing is based on consent.
• The right to lodge a complaint with a supervisory authority.

Our legal basis for processing your personal data includes: (a) performance of a contract (providing the Service); (b) legitimate interests (improving the Service, security, fraud prevention); (c) consent (marketing communications, optional features); and (d) legal obligations (compliance with laws and regulations).

To exercise your GDPR rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within one month (or longer if the request is complex), as required by GDPR.

12. Third-Party Services and Links

The Service may contain links to third-party websites, services, or resources that are not owned or controlled by BizIntell. This Privacy Policy does not apply to third-party services, and we are not responsible for the privacy practices, data collection, or content of third-party services.

When you interact with third-party services (such as Paddle for payments, Google for authentication, or cloud storage providers), your information is subject to the privacy policies and terms of service of those third parties. We encourage you to review the privacy policies of third-party services before providing them with your information.

We are not responsible for the privacy, security, or practices of third-party services, and we do not endorse or assume responsibility for their content, privacy policies, or practices. Your interactions with third-party services are solely between you and the third party.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date.
• Sending you an email to the address associated with your account.
• Displaying a prominent notice on the Service.
• Other reasonable means as appropriate for the nature of the change.

Material changes will become effective 30 days after notification, unless a shorter period is required by law or for security reasons. Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you must stop using the Service and delete your account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@bizintell.org
• Support: support@bizintell.org
• Address: BizIntell, Inc., 123 Business Street, Suite 100, Wilmington, DE 19801, United States
• Website: bizintell.org

For data protection inquiries, privacy rights requests, or to exercise your rights under applicable data protection laws, please contact us using the information above. We will respond to your inquiry within a reasonable timeframe and in accordance with applicable law.

15. Data Protection Officer

If you are located in the EEA, UK, or Switzerland, and you have questions or concerns about our data processing practices, you may contact our Data Protection Officer (if applicable) or our privacy team using the contact information provided above.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe that our processing of your personal information violates applicable data protection laws. We encourage you to contact us first to resolve any concerns, but you are free to contact your supervisory authority at any time.