Privacy Policy

1. Introduction

BizContent AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content generation platform.

This policy complies with:

• General Data Protection Regulation (GDPR) - EU
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• Other applicable U.S. state privacy laws

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us:

• Account information (name, email address, business name, industry)
• Business profile data (target audience, brand voice, products/services)
• Payment information (processed securely through Stripe)
• Communication data (support tickets, feedback, surveys)

2.2 Content and Usage Data

• Content you generate using our AI tools
• Usage patterns, feature interactions, and performance metrics
• Device information, IP addresses, and browser data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve our AI content generation services
• Personalization: To customize your experience and content recommendations based on your business profile
• AI Training: To improve our AI models and algorithms (with appropriate safeguards)
• Communication: To send service updates, support responses, and marketing communications
• Analytics: To analyze usage patterns and optimize our platform performance
• Legal Compliance: To comply with applicable laws and regulations

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal information based on the following legal grounds:

• Contractual Necessity (Art. 6(1)(b)): Processing is necessary to deliver the service you requested when you created an account (authentication, content generation, subscription management)
• Consent (Art. 6(1)(a)): You provide explicit consent for certain processing activities (marketing communications, optional features, cookie usage)
• Legitimate Interest (Art. 6(1)(f)): We have a legitimate interest in improving our service, preventing fraud, and ensuring security (analytics, fraud detection, service optimization)
• Legal Obligation (Art. 6(1)(c)): Processing is required to comply with legal obligations (tax reporting, responding to legal requests)

You have the right to object to processing based on legitimate interest at any time. Contact privacy@bizcontent.ai to exercise this right.

5. AI and Data Processing

Our AI systems process your data to:

• Generate personalized content based on your business profile
• Learn your brand voice and preferences over time
• Improve content quality and relevance
• Ensure content aligns with your business goals

Important: We do not use your generated content to train our AI models without your explicit consent. Your business-specific data is kept separate and secure.

6. Data Sharing and Third-Party Processors

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these limited circumstances:

• Service Providers: With trusted third parties who assist in our operations (listed below)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
• Consent: With your explicit consent for specific purposes

Third-Party Service Providers

We work with the following trusted service providers:

• Stripe: Payment processing (PCI-compliant, encrypted)
• hCaptcha: Bot protection and fraud prevention
• Google (OAuth & Maps API): Optional sign-in and address autocomplete
• Hosting Provider: Cloud infrastructure for application hosting
• AI API Providers: Secure AI model processing (your data is not used for their model training)

All third-party processors are contractually required to protect your data and use it only for the specific services they provide to us. They cannot use your data for their own purposes.

7. Data Security

We implement comprehensive security measures to protect your information:

• End-to-end encryption for data in transit and at rest
• Regular security audits and penetration testing
• Multi-factor authentication and access controls
• Secure data centers with physical and digital security
• Employee training on data protection and privacy
• Incident response procedures and breach notification

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify relevant authorities within 72 hours of becoming aware of the breach (as required by GDPR)
• Notify affected users without undue delay via email and in-app notification
• Provide details about the nature of the breach, data affected, and steps we're taking to remediate
• Offer guidance on steps you can take to protect yourself

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Opt out of certain data processing activities
• Marketing: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@bizcontent.ai. We will respond within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions, to protect your data in accordance with applicable privacy laws.

10. Cookies and Tracking Technologies

BizContent AI uses cookies and browser local storage for essential functionality and user preferences:

• Essential Cookies: Authentication tokens, session management, security (required for service to function)
• Functional Cookies: Language preferences, Google OAuth, Google Maps autocomplete
• Security Cookies: hCaptcha for bot protection and fraud prevention

What we DON'T use: We do not use analytics cookies (like Google Analytics), advertising cookies (like Facebook Pixel), or any third-party tracking for profiling or targeted advertising.

For complete details about our cookie usage, legal basis, and your choices, please see our Cookie Policy. You can control some cookie settings through your browser, but note that disabling essential cookies will prevent you from using the service.

11. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

12. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@bizcontent.ai.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about the personal data we collect, use, disclose, and sell (if any)
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (we do not sell or share)
• Right to Limit: Limit use and disclosure of sensitive personal information
• Right to Non-Discrimination: Exercise your rights without facing discrimination

Important: We do not sell or share your personal information for cross-context behavioral advertising. See our Do Not Sell page for details.

To exercise your California privacy rights, email privacy@bizcontent.ai with the subject line "California Privacy Rights Request." We will respond within 45 days.

14. Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals as required by California and other state privacy laws. If you enable GPC in your browser or browser extension, we will treat it as a valid request to opt out of the sale or sharing of your personal information (though we do not sell or share data).

Learn more about GPC at globalprivacycontrol.org

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Sending you an email notification
• Displaying a notice in our application

Your continued use of our service after any changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@bizcontent.ai
Data Protection Officer: dpo@bizcontent.ai
Address: BizContent AI, Privacy Department

We are committed to resolving any privacy concerns you may have and will respond to your inquiry within 30 days.