Skip to main content

Privacy Policy

Last updated: March 8, 2026

1. Introduction

BizzFolio ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service at bizzfolio.com and related applications.

2. Information We Collect

Information You Provide

  • Account information — Email address, password (hashed, never stored in plain text), name
  • Business information — Business name, address, category, description, website URL, phone number
  • Content — Photos, reviews, messages, responses
  • Payment information — Processed by Stripe; we never store credit card numbers

Information Collected Automatically

  • Usage data — Pages visited, features used, photo views
  • Device information — Browser type, operating system, IP address
  • Authentication tokens — JWT tokens stored in your browser for session management

Information from Third Parties

  • OAuth providers — When you sign in with Google or Facebook, we receive your email and profile name (never your password)

3. How We Use Your Information

  • Provide and improve the Service
  • Authenticate your identity
  • Display your business listings and content to other users
  • Send transactional emails (verification, password reset, magic links)
  • Process payments for subscriptions
  • Moderate content and enforce our Terms of Service
  • Analyze usage patterns to improve the platform (aggregated, not individual)

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Data Storage and Security

  • Database — Neon PostgreSQL (US-East-1), encrypted at rest (AES-256)
  • Photos — Cloudflare R2, encrypted at rest (AES-256)
  • Cache — Upstash Redis (US-East-1), encrypted
  • Transmission — All data transmitted over TLS/HTTPS
  • Passwords — Hashed with bcrypt, never stored in plain text
  • Tokens — Generated using cryptographically secure random generators

5. Data Sharing

We share your information only with:

  • Service providers — Stripe (payments), Resend (email), Cloudflare (hosting, CDN), Fly.io (API hosting), Neon (database)
  • Other users — Your public content (business profiles, photos, reviews) is visible to other users
  • Legal requirements — If required by law, court order, or government request

6. Your Rights

All Users

  • Access — View your data in Settings and Dashboard
  • Update — Edit your profile, business information, and preferences
  • Delete — Delete your account permanently from Settings (immediate, irreversible)
  • Portability — Request a copy of your data by contacting us

EU/EEA Users (GDPR)

You have additional rights under GDPR including: right to rectification, right to restriction of processing, right to object to processing, and right to lodge a complaint with a supervisory authority.

California Users (CCPA)

You have the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.

7. Cookies and Local Storage

We use:

  • Essential cookies/local storage — Authentication tokens (JWT) to keep you logged in. These are strictly necessary and cannot be disabled.
  • No tracking cookies — We do not use Google Analytics, Facebook Pixel, or any third-party tracking.
  • No advertising cookies — We do not serve ads or use advertising trackers.

8. Data Retention

  • Account data — Retained while your account is active
  • Deleted accounts — All personal data permanently removed immediately upon account deletion
  • Auth tokens — JWT tokens expire after 24 hours; refresh tokens after 7 days
  • Verification tokens — Expire after 24 hours, then cleaned up
  • Server logs — Retained for 30 days for debugging and security purposes

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top will be revised accordingly.

11. Contact Us

For privacy-related questions or to exercise your rights:

We use essential cookies to keep you logged in. No tracking or advertising cookies. See our Privacy Policy.