Introduction
Welcome to BiznessBook. We respect your confidentiality and are strictly committed to safeguarding your personal and commercial data. This Privacy Policy outlines how BiznessBook Inc. ("BiznessBook", "we", "us", or "our") collects, uses, encrypts, and protects your information across our website, mobile applications (iOS and Android), and connected cloud services.
By registering for or utilizing BiznessBook services, you acknowledge the data handling practices described in this policy.
We do not sell, rent, or monetize your inventory records, customer contact lists, or sales logs to third-party data brokers or advertisers. Your commercial records are stored exclusively to power your business management system.
Information We Collect
We collect only the minimum required information to provide fast, reliable, and secure business management capabilities:
Information You Explicitly Provide
- Account Profile: Owner name, verified email address, telephone number, and registered business name.
- Business Operating Data: Stock lists, SKUs, sales invoices, credit balances, customer names, expense tags, and cashier logs.
- Payment Credentials: Billing addresses and card authorization tokens (securely processed via PCI-DSS certified partners like Stripe and PayPal; BiznessBook never stores raw credit card CVV numbers).
- Support Communications: In-app customer support chats, emails, and diagnostic bug reports submitted voluntarily.
Automatically Collected Technical Data
- Device Diagnostics: Device model, OS version, application build number, and hardware identifiers used to optimize POS offline performance.
- Session & Usage Telemetry: Feature interaction metrics, error crash logs, and load speeds used to troubleshoot synchronization.
- Network IP: Approximate geographic region derived from IP to automatically suggest correct local currency and regional tax parameters.
How We Use Your Information
We process your data strictly under legal bases including contract fulfillment, legitimate business operations, and compliance obligations:
Core Service Operations
Process POS checkouts, track stock replenishment, and compute daily profit and loss balances.
Security & Fraud Defense
Detect unauthorized login attempts, prevent session hijacking, and protect against credit ledger tampering.
Platform Reliability
Monitor database latency, optimize offline caching synchronization, and prevent application crashes.
Customer Support
Assist with account recovery, billing inquiries, and feature walkthroughs requested by your team.
Data Security Standards
We apply defense-in-depth principles to secure all commercial records:
End-to-End Transit Security
All client-server communications are forced over TLS 1.3 with Perfect Forward Secrecy.
Military-Grade At-Rest Encryption
Databases and file archives are encrypted with AES-256 with separate customer key management.
Role-Based Access Control
Internal staff access is governed by strict principle of least privilege, requiring hardware MFA and audit logs.
Continuous Audits
Automated vulnerability scanning, quarterly penetration testing, and third-party compliance verification.
Read our dedicated Data Safety Page for complete server specifications, automated backup timelines, and disaster recovery SLA metrics.
Your Rights & Choices
Regardless of your geographic location, BiznessBook extends full control over your business records:
Request an electronic copy of all personal and store data connected to your profile.
Update inaccurate contact, billing, or company information instantly in settings.
Export your full inventory, customer balances, and transaction history in CSV/JSON format.
Request complete deletion of your account and related records from active databases.
To execute any statutory request, email privacy@bizness-book.com. We process verified privacy requests within 30 days without charge.
Data Retention Schedule
We retain operational data only as long as necessary to fulfill business services and statutory accounting regulations:
| Category | Retention Duration | Purpose |
|---|---|---|
| Account Profiles | Duration of active subscription + 90 days grace period | Account restoration & data export availability |
| Sales & Tax Ledgers | Up to 7 years | Statutory commercial tax & audit compliance |
| Operational Telemetry | 14 to 26 months | Performance optimization and system debugging |
| Customer Support Tickets | 3 years | Quality assurance and dispute resolution history |
International Data Transfers
BiznessBook operates cloud infrastructure distributed globally. If you access our services outside the United States, your records may be transferred and processed in US and European data facilities.
All cross-border transfers comply with international transfer frameworks, including the EU Standard Contractual Clauses (SCCs) and UK International Data Transfer Addendum.
Children's Privacy
BiznessBook is commercial business software intended solely for entrepreneurs, operators, and individuals aged 18 and older (or at least 16 where local law permits). We never knowingly collect information from minors. If you believe a minor has registered an account, contact us immediately for immediate investigation and data purging.
California Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents are entitled to specific statutory disclosures:
- No Sale of Data: BiznessBook does not sell or share personal information for cross-context behavioral advertising.
- Right to Know & Delete: You have the right to request what categories of data we collect and request full deletion.
- Non-Discrimination: We will never deny service, charge different prices, or degrade performance if you exercise statutory privacy rights.
European Privacy Rights (GDPR & UK GDPR)
For users residing within the European Economic Area (EEA), United Kingdom, or Switzerland, BiznessBook Inc. serves as the Data Controller for your account information, and as a Data Processor for customer records you enter into your POS:
- Legal Grounds: Processing is justified under Article 6 of the GDPR (Contract Performance, Legal Compliance, and Legitimate Interests).
- Supervisory Authority: You maintain the statutory right to lodge an inquiry with your local national Data Protection Authority (DPA).
- Data Protection Officer (DPO): Inquiries can be directed directly to our designated DPO at dpo@bizness-book.com.
Changes to This Policy
We may update our privacy practices to adapt to software updates, new regulatory requirements, or security enhancements. When material changes take effect, we will revise the "Last Updated" timestamp at the top of this document and notify you via registered email or prominent app notification.
Privacy Office & Contact
For questions, formal notices, or data requests, connect directly with our dedicated privacy team:
Privacy Office
Data Protection Officer
Mailing Address
BiznessBook Legal & Privacy
123 Business Ave, Suite 500
San Francisco, CA 94102