Privacy Policy — BizNote

BizNote("we", "us", or "our") operates biznoteai.com. This Privacy Policy explains what information we collect when you use our service, how we use it, and your rights regarding that information.

By using BizNote you agree to the practices described here.

1. Information we collect

Information you provide directly:

Your email address — when you run a scan, sign in, or subscribe.
Your business details — to run a scan.

Public data we pull on your behalf:

Google Business Profile data (name, address, rating, review count, categories, website) retrieved via the Google Places API using the business you confirm.
Public review text and metadata from Google Maps — used solely to generate your AI business report. We do not store reviewer names.
Nearby competitor data (name, rating, review count) pulled from public Google Places results within a defined radius of your business.

Usage data collected automatically:

IP address and request metadata — for rate limiting and abuse prevention.
Browser type and referring page — via standard server logs.

2. How we use your information

To generate and display your AI business report.
To send weekly growth notes to subscribed users.
To process payments securely through Stripe.
To authenticate your account via Supabase (magic-link or password sign-in).
To prevent abuse and protect the service.

We do not sell your data. We do not use your data for advertising.

3. Data storage and retention

Report data is stored in our database (Supabase / PostgreSQL hosted infrastructure). Free scan reports are retained for 30 days. Subscribed-business reports are retained for the duration of the subscription plus 90 days after cancellation.

Email addresses are retained as long as your account is active. You may request deletion at any time (see Section 6).

4. Third-party services

We use the following third-party services:

Google Places API — to fetch business details and review data. Subject to Google's Privacy Policy.
Stripe — to process subscription payments. Your card details are handled entirely by Stripe; we never see or store them. Subject to Stripe's Privacy Policy.
Supabase — for database storage and authentication. Hosted on AWS infrastructure with encryption at rest and in transit.
OpenAI— to generate AI report content. We send review and business signal data as part of API requests. OpenAI's API usage is governed by OpenAI's API data usage policies.

5. Cookies and local storage

BizNote uses browser local storage to maintain your authentication session (via Supabase Auth). We do not use third-party tracking cookies or advertising cookies. Session data is cleared when you sign out.

6. Your rights

You may request at any time:

A copy of the personal data we hold about you.
Deletion of your account and associated data.
Correction of inaccurate information.

To exercise any of these rights, email privacy@biznoteai.com. We will respond within 30 days.

7. Weekly email notes and unsubscribe

Paid subscribers receive a weekly AI-generated business note by email. These notes are part of the core service. You may disable them at any time:

In-app:go to Settings and toggle off “Weekly updates” for any subscribed business.
One-click unsubscribe: every weekly email contains an unsubscribe link that immediately disables notes for that business without affecting your subscription.
Email request: email hello@biznoteai.com and we will disable notes within 24 hours.

Unsubscribing from weekly notes does not cancel your paid subscription. Billing continues until you cancel through the billing portal (Settings → Manage billing) or contact us.

9. Data security

All data in transit is encrypted via HTTPS/TLS. Data at rest is encrypted by our infrastructure providers. We apply rate limiting to prevent unauthorized access to scan and checkout endpoints.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at security@biznoteai.com.

10. Children

BizNote is not directed at children under 13. We do not knowingly collect personal data from anyone under 13.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by email to subscribed users.

12. Contact

Questions about this Privacy Policy? Email privacy@biznoteai.com.