Privacy Policy

1. Who controls your data

Biznopsy is the controller of personal data processed for this service. The operator's complete legal identity and direct privacy contact must be added before paid subscriptions are activated. Until then, avoid submitting sensitive personal data that is not necessary to use the service.

2. Data we collect

• Account data, such as your name, email address, account identifier and authentication status.
• Business profile data, checkup answers, scores, goals, weekly check-ins, experiments and profit scenarios.
• Advisor content, including your questions, recent conversation context and compact conversation memory.
• Usage and security data, including timestamps, plan, request counts, model used, token counts, estimated AI cost, IP-derived and device or log information.
• Product-funnel events such as landing visits, checkups started or completed, reports viewed and plan interest. Anonymous events use a random identifier stored only for the active browser session; Biznopsy does not use it for advertising or cross-site tracking.
• Subscription and transaction details when payments are enabled. Full payment-card information is handled by the payment provider rather than Biznopsy.

3. Why we use data

• To create and secure your account and provide the features you request.
• To save diagnoses, personalize reports and give context-aware Advisor responses.
• To administer plans, enforce allowances, prevent abuse and maintain service reliability.
• To process subscriptions and comply with accounting, tax and legal obligations when payments are enabled.
• To diagnose errors, understand aggregate product usage and improve Biznopsy.

4. Legal bases

Depending on the activity, processing is based on performing our contract with you, taking steps at your request before entering a contract, complying with legal obligations, and Biznopsy's legitimate interests in securing and improving the service. Where consent is legally required, we will request it separately and you may withdraw it prospectively.

5. AI processing

Advisor questions, relevant business context, recent conversation messages and saved conversation memory may be transmitted through Vercel AI Gateway to the selected AI model provider to generate a response. Do not include special-category data, secrets or personal information about other people unless it is necessary and you have a lawful basis to do so. AI responses may be inaccurate.

6. Service providers

Biznopsy currently uses providers including Clerk for authentication, Vercel for hosting and AI Gateway services, Neon for database infrastructure and AI model providers selected through the Gateway. Stripe processes test subscription checkouts and will process payments when live billing is enabled. We share your account email and an account reference with Stripe, and store Stripe customer and subscription references, membership status and billing period. Card details are entered on Stripe-hosted pages and are not stored in the Biznopsy database. These providers process data for their specified functions under their own contractual and security commitments.

7. International transfers

Some providers may process data outside the European Economic Area. Where GDPR applies, Biznopsy will rely on an adequacy decision, approved contractual safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.

8. Retention

We keep account and workspace data while your account is active and for as long as needed to provide the service. Usage, security, transaction and support records are retained only for the period reasonably required for security, dispute resolution and legal obligations. When data is no longer needed, it will be deleted or anonymized, subject to lawful retention requirements.

9. Security

We use reasonable technical and organizational measures designed to protect personal data, including managed authentication, access controls and hosted infrastructure. No internet service can guarantee absolute security, so you should use a strong account password and protect your sign-in methods.

10. Your rights

Where GDPR applies, you may have rights to access, correct, erase or restrict processing of your data, receive portable data, object to processing based on legitimate interests, withdraw consent and lodge a complaint with the competent data-protection authority. Requests will be handled within the timeframe required by applicable law.

11. Cookies and similar technologies

Biznopsy and its authentication and hosting providers use cookies or browser storage necessary for sign-in, security and core service operation. Biznopsy also places a random identifier in session storage to measure the product funnel during the active browser session. It expires when the browser session ends and is not used for advertising, fingerprinting or tracking across websites. Where applicable law requires consent for additional non-essential technologies, they will not be activated before consent is obtained.

12. Children

Biznopsy is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children through the service.

13. Changes and contact

We may update this Policy as the service and legal requirements change. The effective date above will be revised and material changes will be communicated where appropriate. The service is currently identified by the trade name Biznopsy; a direct privacy address and complete operator details will be published before paid checkout becomes available.