Privacy Policy

This describes what Bizsoftbiz collects, who processes it, and what you can do about it. Last updated 3 September 2026.

What we hold

Two kinds of data. Account data is what identifies you and your business: your name, email address, store name and address, and your role. Business data is what you put into the product: your products, customers, orders, stock movements, ledger entries, suppliers and documents. Your business data is yours — we process it to run the service and for nothing else.

  • Account data: name, email, store details, role
  • Business data: catalogue, customers, orders, stock, ledger, documents
  • Technical data: log records, error reports, and IP address at sign-in

Customer records you enter

If you record your own customers — names, phone numbers, email addresses, billing addresses, tax registrations — you remain the controller of that information and we process it on your behalf. You are responsible for having a basis to collect it, and for telling those people what you do with it. We do not market to your customers, ever.

Who else processes it

We use a small number of subprocessors, each for a specific purpose.

  • Supabase — database, authentication and file storage. All of your business data lives here.
  • Vercel — application hosting and delivery.
  • Google (Gemini) — powers the AI assistant, insights and natural-language reports. Data is sent only when an AI feature is used, and AI features can be turned off entirely in settings.
  • Lemon Squeezy — merchant of record for your subscription. They handle payment details and tax; we never see your card.
  • Resend — sends receipt and notification email, where you enable it.

What we do not do

We do not sell your data or your customers’ data. We do not use your business data to train AI models. We do not process card payments at all — Bizsoftbiz records how a customer paid, and the payment itself happens on your own card machine, so no cardholder data ever reaches us.

Retention and deletion

We keep your data for as long as your account is active. If you cancel, the data remains available for a period so that you can export it, after which it is deleted. You can ask for deletion sooner. Note that some records — accounting entries in particular — you may be legally required to retain, and exporting before deletion is strongly advised.

Getting your data out

Everything exports. Products, customers, orders, stock movements and every accounting statement, ledger and subledger download as Excel and PDF from within the product, at any time, without asking us. There is no lock-in on the way out and no export fee.

Security

Data is encrypted in transit and at rest. Access within a store is governed by role-based permissions enforced in the database itself rather than only in the interface, so a permission error can deny access but cannot grant it. Posted accounting entries and stock movements are append-only and cannot be edited or deleted, by anyone, including us.

Your rights

Depending on where you are, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Write to hello@bizsoftbiz.com and we will respond.

Changes and contact

If this policy changes materially we will tell account owners by email rather than only updating this page. Questions go to hello@bizsoftbiz.com.