Privacy Policy

BizSkipper is provided by [To be confirmed: registered legal name of the business], registered in [To be confirmed: country of registration], with its registered office at [To be confirmed: registered office address] (“we”, “us”). For anything in this policy, contact info@bizskipper.com.

This policy covers the BizSkipper website and app. When you connect an account on another platform, such as Google, Meta or LinkedIn, that platform’s own privacy policy also applies to it.

We collect what you give us and what the service records while you use it:

• Account: your name, email address and password. The password is stored only as a one-way hash (Argon2id), never in readable form. We also record when your email address was confirmed and when you last signed in.
• Sign-in with Google (optional, where offered): Google’s identifier for your Google account, the email address Google gives us and when you last used it. If you create your account this way, your name comes from your Google account. We never receive your Google password.
• Mobile number (optional): if you add one, the number and when you confirmed it. The one-time code we text you is stored only as a one-way hash and stops working after 10 minutes.
• Changing your email address: the new address, until you confirm it from the link we send there (the link works for 1 hour).
• Security checks: when a form shows a security check (Cloudflare Turnstile), Cloudflare receives your IP address and information about your browser and device to tell people from automated traffic. We receive only the result. These checks reduce automated abuse but cannot guarantee that every visitor is a person.
• Sign-in sessions: the IP address and browser (user agent) of each signed-in session, and when it was last used. You can see your own sessions under Account and security.
• Workspaces and teams: the workspace name and time zone, its members and their roles, and the email addresses of people invited to it.
• Business profile: what you tell us about the business, such as its name, industry, description, products or services and prices, locations and addresses, areas served, opening hours, contact phone and email, target customers, goals, advertising budget and website address.
• Website checks: the addresses of public pages read from your website (and from competitor websites you add), their titles and status, and short text extracts used as evidence for a finding. Whole pages are not stored.
• Content you create: marketing plans and their versions, notes, decisions, social media posts and images, replies to comments and scheduled posts.
• Payments: what you bought, the price, tax and currency, the payment method type (for example card or UPI), payment and refund status and Razorpay’s reference numbers. Card numbers, CVVs, UPI ids and bank details are entered only in Razorpay’s own window and never reach us.
• Notifications: the messages we send you, whether an email was delivered, and your notification preferences.
• AI usage: which feature used AI, the model, the amount of text processed and its cost. The text sent to the AI provider and its answer are not stored, except the result you keep (such as a marketing plan).
• Security records: an activity history of important actions in a workspace, with who acted, when, from which IP address and browser. Our servers also log each request’s address and IP address for security and troubleshooting; request contents and passwords are not logged.

Some of this is about other people: teammates you invite, contact details in your business profile, and the names and comments of people who comment on posts published through BizSkipper. Only add information you have the right to share.

• To provide the service: create and secure your account, run website checks, show reports from accounts you connect, generate plans you ask for, and publish or change things only after a person with permission confirms them.
• To take payments and handle refunds, through Razorpay.
• To send the emails the service needs (confirming your email address, password resets, invitations) and the notifications you choose.
• To keep the service secure: limit repeated requests, run security checks against automated sign-ups, confirm a mobile number you add, detect misuse and keep a record of important actions.
• To meet legal obligations, such as keeping payment records.

We do not sell your information, and the website and app contain no advertising or third-party analytics trackers.

AI is used only when someone in your workspace asks for it, only while AI is switched on, and only within the monthly AI spending cap the workspace sets. Website checks use fixed rules, not AI.

• Generating a marketing plan sends the AI provider your business profile (without contact details or street addresses), your website address and website findings, an earlier plan when you revise one, and your instructions.
• Explaining a recommendation sends the recommendation and the evidence behind it, such as advertising figures, search terms and keywords from your connected account.

The service uses one AI provider at a time: Anthropic or OpenAI. Requests to OpenAI are sent with its option to keep them for later retrieval turned off. Each provider’s own terms govern how long it keeps requests. AI output can be wrong or incomplete; review it before relying on it.

Connecting another platform is optional. Owners and admins choose what to connect, and can disconnect it at any time.

• Google Search Console and Google Analytics: read-only. We store summary reports for up to 7 days.
• Google Ads: read-only. We read campaign, keyword, search term and conversion reports to rank recommendations, and keep each analysis for 90 days. Nothing in your ad account is changed.
• Google Business Profile: we read your listing and send changes (description, phone, website, opening hours, photos) only after you confirm them.
• Facebook Pages, Instagram and LinkedIn pages: we publish the posts you approve, read comments on those posts so you can answer the ones you choose, and read post statistics. Promoting a post on Meta creates an ad only after you confirm its budget.
• ChatGPT Ads: you add your own Advertiser API key; campaign changes are made only after you confirm them.

Access tokens and API keys for these accounts are encrypted by the application before they are stored. Disconnecting deletes the stored access and the reports kept for that connection; posts you already published stay on the platform. Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

If you remove BizSkipper in Facebook or ask Meta to delete your data, Meta tells us and we delete the Facebook access and ad account information we stored for you; you can check the request on our data deletion status page.

We share information only with providers that run parts of the service for us, with the platforms you connect, and where the law requires it:

• Hosting and database: [To be confirmed: hosting and database provider].
• Email delivery: Resend, which sends our emails.
• AI: Anthropic or OpenAI, whichever the service is configured to use (see “How AI is used”).
• Payments: Razorpay, which processes payments and refunds. Your name and email are filled in for you in Razorpay’s checkout window.
• Local search measurement: DataForSEO, which receives the searches and map locations you choose to measure.
• Security checks: Cloudflare (Turnstile), on forms that show a check.
• Text messages: Twilio, which receives your mobile number and the one-time code when you confirm a number.
• Sign-in with Google: Google, when you choose to sign in with it. Google’s privacy policy covers your Google account.
• Platforms you connect (Google, Meta, LinkedIn, OpenAI for ChatGPT Ads): they receive what you ask the service to publish or change there.

• Session cookie (“__Host-sid”, or “sid” without a secure connection): keeps you signed in. It cannot be read by scripts, and by default your session ends after 24 hours without activity and at most 7 days after you sign in.
• Theme cookie (“theme”): remembers a colour theme you chose, for one year. It is set only if you change the theme.
• Google sign-in cookie (“__Host-gflow”, or “gflow” without a secure connection): set only while you sign in with Google, so the sign-in can finish only in the browser that started it. It cannot be read by scripts and is removed when sign-in finishes, or after 10 minutes at most.
• Your browser’s local storage: remembers help and tour progress on your device.

We use no advertising or analytics cookies. Fonts are served from our own website. Razorpay’s checkout script loads only on pages where you can pay, and Cloudflare’s security check only on sign-in and account pages; each provider’s own policy covers what it stores.

Passwords are stored as one-way hashes, sign-in links and session tokens as hashes, and access tokens for connected accounts encrypted. Each workspace’s data is separated from other workspaces, roles limit who can connect accounts, publish or pay, repeated requests are limited, and important actions are recorded. No system is completely secure, and we cannot promise that information will never be accessed without permission.

• Account, workspace and business profile information: while the account or workspace exists.
• Sign-in sessions: until they end. Email confirmation links: 24 hours. Password reset links and email change links: 1 hour. Invitations: 7 days.
• Mobile number: while it is on your account; removing it from your account deletes it. Records of one-time codes: deleted about one day after the code stops working.
• Google sign-in: the link to your Google account is kept until you disconnect it; records of a sign-in in progress are deleted within about an hour.
• Reports from connected accounts: Google Analytics and Search Console up to 7 days, Google Ads analyses 90 days, social media statistics history 400 days.
• Notifications: 180 days.
• Website checks, marketing plans, AI usage records and payment records: kept until a retention period is set (see below).
• Activity history: kept permanently and cannot be edited or deleted, so that changes stay traceable.
• Confirmations of Meta data deletion requests: 180 days.

In the app you can already:

• see and correct your business profile and workspace details;
• see where you are signed in, sign out other sessions and change your password;
• change your email address, confirmed from a link sent to the new address;
• add, change or remove a mobile number, and connect or disconnect Google sign-in, where these are offered;
• choose which notifications you receive, and unsubscribe from emails with one click;
• disconnect any connected account, which deletes its stored access and reports;
• switch AI off for a workspace.

Exporting your data and deleting your account or a workspace are not available in the app yet. Until they are, ask info@bizskipper.com and we will handle the request by email. You can also ask what information we hold about you, ask us to correct it, or raise a concern with [To be confirmed: grievance officer and contact details].

We serve businesses in India and other countries, including the United Arab Emirates. Your information is stored in [To be confirmed: country or region where data is stored]. Providers listed above, such as the AI provider, may process it in other countries, including the United States.

BizSkipper is a service for businesses and is not meant for children. Do not create an account for a child.

Each version of this policy has a version number and an effective date. We will give [To be confirmed: notice period for material changes] notice of a material change, by email or in the app, before it takes effect.

• Privacy questions and requests: info@bizskipper.com
• Grievance officer: [To be confirmed: grievance officer and contact details]
• Postal address: [To be confirmed: registered legal name of the business], [To be confirmed: registered office address]