Data Processing Policy

For account holders, BizPage AI acts as a platform provider and may act as a data controller for account, billing, security, analytics, and platform operations. For lead/contact data submitted through generated websites, the business owner may be the controller and BizPage AI may act as a processor/service provider.

BizPage AI processes data only for platform purposes: account access, website generation, publishing, branding, QR/business card generation, content tools, CRM, communication, automation, billing, support, abuse prevention, security, analytics, and compliance.

Data categories include account data, business profile data, public website content, lead/contact submissions, CRM notes and deals, billing records, domain/hosting records, communication messages, automation logs, AI prompts and outputs, device/log data, uploads, and audit logs.

Third-party processors may include cloud hosting, PostgreSQL/Redis infrastructure, AI providers, email providers, payment gateways, storage providers, analytics tooling, domain/hosting providers, and support tools. International transfers may occur.

Retention depends on account activity, legal obligations, billing/dispute needs, backups, fraud prevention, security, and operational logs. Users may request reasonable access, correction, deletion, or export support subject to lawful limits.

BizPage AI uses technical and organizational measures such as access controls, role checks, validation, secure cookies, password hashing, rate limits, audit logs, backup planning, health checks, worker separation, and storage abstraction.