Privacy Policy

BizPulse AI (“we”, “our”, “us”) respects your privacy. This Privacy Policy explains what personal data we collect when you use bizpulseai.net or take an Business Growth Discovery™ hosted on our platform, how we use that data, who we share it with, and the rights you have.

1. Who We Are

BizPulse AI is a lead-generation platform for independent consultants. The data controller for this Service is BizPulse AI. For privacy questions, contact contact@bizpulseai.net.

2. Data We Collect

We collect:

• Account data — name, company, email, password (hashed), profile photo, biography, expertise, countries and industries served, WhatsApp number, booking link.
• Discovery & lead data — country, industry and function chosen, answers to Business Growth Discovery™ questions, the resulting score and opportunity analysis, and the contact details (name, email, phone, company, position) submitted by business leaders who take the Discovery.
• Billing data — processed by Paddle (see “Processors” below); we never receive or store full card numbers.
• Technical data — IP address, browser type, device, pages visited, and interaction events used to operate and secure the Service.

3. How We Use Your Data

• To provide the Service: generate Business Growth Discoveries™, score responses, deliver reports, and route leads to the right consultant;
• To send transactional emails (account, invoices, lead notifications, password reset);
• To process payments and prevent fraud;
• To improve the Service through aggregated, anonymised analytics;
• To comply with our legal obligations.

4. Cookies

We use a small set of strictly-necessary cookies (authentication, CSRF, view-mode) and may use first-party analytics cookies to understand how the Service is used. We do not use third-party advertising cookies. You can clear cookies at any time from your browser settings; doing so may sign you out.

5. Third-Party Processors

We share personal data only with vetted processors who act under our instructions and contractual data-protection obligations:

• Paddle.com Inc. (United States / global) — merchant of record for payments, tax collection, refunds, and invoicing.
• MongoDB Atlas (MongoDB, Inc.) — managed database hosting for all account, Discovery, and lead data.
• Resend (Resend Inc.) — transactional email delivery (account emails, lead notifications, PDF report delivery to consultants).
• Anthropic (Anthropic, PBC) — Claude large-language-model API used to generate Business Growth Discovery™ questions and Executive Growth Reports™. Prompts contain Discovery context (country, industry, function, answers) but no consultant credentials or billing data.

6. International Transfers

Your data may be processed in countries other than your own, including the United States and the European Union, depending on where our processors host their infrastructure. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms.

7. Retention

Account data is retained for as long as your account is active and for up to 24 months after closure for legal, tax, and accounting purposes. Lead data is retained for as long as the attributed consultant’s account remains active. Backups are kept for up to 90 days.

8. Your Rights

You have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion (right to be forgotten);
• Export your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email contact@bizpulseai.net from the email address linked to your account.

9. Security

We use TLS for data in transit, password hashing (bcrypt) for credentials, HTTPS-only secure cookies for authentication, role-based access control internally, and regular dependency and vulnerability scans. No system is 100% secure, but we treat security as a continuous priority.

10. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app banner. The “last updated” date at the top reflects the most recent revision.

12. Contact

Privacy questions or rights requests: contact@bizpulseai.net.