Privacy Policy

Information we collect

• Account information — your email address and a password. Passwords are hashed by our authentication provider (Supabase); we never see or store them in plain text.
• Business information — the business name, address, and Google Place ID you save, plus optional profile details such as cuisine type and dietary options.
• Review data — publicly available Google reviews of the businesses you ask us to analyze, retrieved through SerpAPI. We do not collect private customer data from your point of sale, reservations, or similar systems.
• Usage data — analyses you run, features you use, and per-day request counts we keep to prevent abuse.
• Payment information — handled entirely by Stripe. Your card details go directly to Stripe and never touch our servers; we store only your subscription status and Stripe customer reference.
• Preferences — settings such as email digest frequency and notification choices.

How we use it

• To run review analyses and generate action items, summaries, and reports for you.
• To send transactional email (welcome, password reset, weekly digest if you opt in) and occasional product updates, each of which includes a one-click unsubscribe.
• To operate billing and manage your subscription.
• To secure the service — spam prevention, rate limiting, and abuse detection.
• To understand aggregate usage and improve the product.

We do not sell your personal information, and we do not use third-party advertising or cross-site tracking.

AI processing

Review text and the questions you ask are sent to our AI provider (currently DeepSeek) to generate summaries and recommendations. Only review content and analysis context is sent — not your account credentials or payment details. AI output is generated automatically and may contain mistakes; use your judgment before acting on it.

Service providers

We rely on a small set of providers to run BizBuddy. Each receives only what it needs:

• Supabase — authentication and database hosting.
• Netlify — application hosting.
• Stripe — payment processing.
• Resend — email delivery.
• SerpAPI — retrieval of public Google review data.
• DeepSeek — AI analysis of review text.
• Cloudflare Turnstile — bot protection on signup forms.

Cookies and local storage

We use cookies and browser local storage only to keep you signed in and to remember interface preferences (like theme). We do not use advertising cookies.

Data retention and deletion

We keep your data while your account is active. You can delete your account and all associated data at any time from Settings → Danger zone, or by emailing sales@biz-buddy-ai.com (processed within 30 days). Deleting your account also cancels any active subscription. You can unsubscribe from marketing email at any time via the link in any message.

Security

All traffic is encrypted in transit (HTTPS). Database access is scoped per user with row-level security, and administrative access is restricted. No system is perfectly secure, but we design for least privilege.

Children

BizBuddy is a business tool and is not directed at children under 13. We do not knowingly collect information from children.

Changes

If we make material changes to this policy, we will update the effective date above and, for significant changes, notify you by email.

Contact

Questions about this policy or your data: sales@biz-buddy-ai.com.