Privacy policy

1. What BizGen is

BizGen is an operator console. A business owner signs in and connects accounts they already use, such as email, calendar, payments, and a customer relationship system, so BizGen can show their whole business from one place. BizGen is not a public consumer app. Every account it touches is one the owner explicitly chooses to connect, and every connection can be turned off at any time from the Connections page inside the app.

2. Two different jobs BizGen does with data

This distinction matters, so it comes early rather than buried.

For the owner’s own account, BizGen decides what is collected and why. That is the sign-in email, the password hash, and what the owner does inside the product. This policy governs it.

For the business’s own customers and contacts, BizGen is only a processor. The owner decides what to sync and why; BizGen holds it and works on it under the owner’s instructions, and does not use it for anything else. If one of the owner’s customers wants to see or delete their information, that request goes to the owner, whose privacy policy covers it. BizGen will help the owner answer it.

3. What data BizGen stores

BizGen stores three kinds of data.

Account data

The email address and a password hash used to sign in. BizGen never stores a plain password, only a one-way hash of it.

Workspace business data

Whatever the owner types or uploads into BizGen directly, such as notes, tasks, leads, and business records.

Data synced from services the owner chooses to connect

BizGen only reads a service after the owner clicks Connect for that specific service, and only the kinds of data that service is connected for. Broadly, those fall into:

• Email and messaging: who a message was sent to and from, when, and the message content, used to propose contacts, draft replies, and send emails the owner approves.
• Calendars and meetings: meeting details and attendees, and the notes or summary a meeting tool produced for a recorded meeting, used to show who the owner is meeting with and what was discussed. When a meeting tool offers only a transcript, BizGen reads it to propose a summary and does not store the transcript.
• Payments and accounting: customer, invoice, and revenue records, used to show the business’s real financial picture.
• Customer relationship systems: contact and pipeline records.
• Documents, storage, and project tools: the files and tasks the owner connects.
• Prospect search: results returned only when the owner runs a search for new leads.

The Connections page inside the app is the authoritative, current list of every service BizGen can connect to, what each one reads, and which ones are switched on for that workspace. It is kept accurate there rather than duplicated here, where it would fall out of date.

BizGen does not collect payment card numbers, government identification numbers, or health information, and does not ask for them.

4. Google user data

BizGen connects to Gmail, Google Calendar, and Google Meet when the owner chooses to connect them. BizGen’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, this means:

• Gmail data is never sold.
• Gmail data is never used for advertising, and never shown to advertisers.
• Gmail data is never used to train general-purpose AI or machine learning models.
• Gmail data is only seen by humans the owner has authorized, and only when strictly necessary for security, legal compliance, or with the owner’s consent.
• Gmail data is used only for the features described in section 3 above: proposing contacts, drafting replies, and sending emails the owner has approved.

5. What BizGen never does with the data

• BizGen does not sell data, and does not share it with data brokers.
• BizGen does not use it for advertising or to build advertising profiles, with one narrow exception described in full in section 11: when you buy the Revenue Leak Scan or the first month of the paid beta, BizGen sends Meta a one-way hash of the email address you paid with, so Meta can credit that sale to the ad that led to it.
• BizGen does not use it to train general-purpose AI models, and neither do its AI providers.
• BizGen does not mix one workspace’s data into another workspace.

6. Who else sees the data

BizGen uses a small number of infrastructure providers to run the product. Each one sees only what it needs to do its job, and none of them are permitted to use the data for their own purposes.

BizGen will also disclose data if the law requires it, such as a valid court order, and to protect the safety or legal rights of BizGen or others. If BizGen is ever bought or merged, the data moves with the business, and account owners will be told before that happens.

BizGen will email account owners before adding a new provider that will handle workspace data.

7. How BizGen protects the data

Florida law requires a business holding personal information to take reasonable measures to protect it (Fla. Stat. 501.171(2)). These are the measures actually in place:

• Traffic between a browser and BizGen is encrypted in transit, and the database is encrypted at rest.
• Passwords are stored only as a one-way bcrypt hash. Nobody at BizGen can read a password.
• Where BizGen has to store a credential for a connected source directly, it is encrypted with AES-256-GCM before it is written down. Most connections avoid this entirely by going through Composio, so BizGen never holds the credential at all.
• Each workspace’s business records are separated at the database level by row-level security, and every request is additionally scoped to its own workspace by the application.
• Access to production systems is limited to the people who need it to operate the service.

No system is perfectly secure, and BizGen does not claim any security certification. It does not hold SOC 2 or ISO 27001.

8. If there is a breach

If personal information is exposed by unauthorised access, BizGen will:

• tell the affected people no later than 30 days after determining a breach happened, by email or post, as Florida law requires (Fla. Stat. 501.171(4));
• tell the account owner within 10 days where the exposed data was their business’s data that BizGen holds on their behalf, so they can meet their own obligations (Fla. Stat. 501.171(6));
• notify the Florida Department of Legal Affairs within 30 days if 500 or more Florida residents are affected (Fla. Stat. 501.171(3));
• say what happened, what data was involved, and how to reach BizGen about it.

9. How long data is kept

Bizzy conversations can use your recent messages, saved private memories, and extracts from documents you submit to generate replies through our AI providers. These memories and documents are private to your user account within the workspace. Automatic memory is off until you enable it; you can also explicitly ask Bizzy to remember a statement. Sensitive memory suggestions require your review.

Saved memories and extracted document text remain available until you remove them or your account data is deleted. Raw uploaded files are not retained by this chat feature. Use Bizzy's Memory panel to review, edit, forget, or clear memories, and its Documents tab to delete document text. Forgetting resets earlier conversational context for future replies; it does not remove visible messages from your conversation history. Chat message bodies are cleared by the retention process after one year.

BizGen keeps workspace data for as long as the account is active. Disconnecting a service from the Connections page stops any further syncing from that service immediately.

When an account closes, the data stays available for 30 days so it can be exported, then it is deleted. When BizGen deletes data it is erased so it cannot be read again, which is what Florida law requires for disposing of customer records (Fla. Stat. 501.171(8)). Backups roll off on their own cycle and are overwritten within 30 days of the deletion. Records BizGen has to keep by law, such as records of payments for tax purposes, are kept for as long as the law requires and nothing else is done with them.

10. Your choices

BizGen is a small company and the Florida privacy statute that creates formal consumer rights only applies to businesses making over a billion dollars a year, so it does not apply here. BizGen offers these anyway, because they are the right thing to offer:

• Ask what personal data BizGen holds about you, and get a copy of it.
• Ask BizGen to correct anything that is wrong.
• Ask BizGen to delete your account and its data.
• Export your workspace data in a common machine-readable format.
• Disconnect any connected service yourself, at any time, from the Connections page.

Email the address in section 14 and BizGen will respond within 30 days. There is no charge. If one of your own customers asks you about their data, section 2 explains how that works.

11. Cookies and tracking

BizGen sets a cookie to keep you signed in. That is what it is for and it is required for the product to work. Inside the product itself, once you are signed in, BizGen does not use advertising cookies, does not run third-party advertising or analytics trackers, and does not track you across other websites.

On BizGen’s own public marketing pages, the ones you see before you have an account, such as the homepage, the Revenue Control Assessment, the Revenue Leak Scan page, and the signup page at /join, BizGen runs the Meta (Facebook) Pixel to measure how its own advertising performs. These pages set a Meta cookie (_fbp, and _fbc if you clicked through from a Meta ad) and send Meta a record that the page was viewed, that you submitted the assessment, that you started checkout, or that you created an account. The Pixel itself never runs anywhere else, in particular never inside the signed-in product and never on a page BizGen generates or hosts for one of its own customers.

Separately, when Stripe confirms that you have paid for the Revenue Leak Scan or the first month of the paid beta, BizGen’s server sends Meta a record of that one purchase through the Meta Conversions API, so Meta can credit the sale to the ad that led to it. That confirmation happens after checkout, so it can happen while you are signed in, but it is triggered only by that one payment being confirmed, never by anything else you do inside the product. Your email address is included, but only after turning it into a one-way hash first: Meta never receives it in plain text, and cannot reverse the hash back into your address.

12. Children

BizGen is a business tool for adults. It is not directed at children, and BizGen does not knowingly collect information from anyone under 18. If BizGen learns it has, that information is deleted.

13. Where the data is handled

BizGen is operated from the United States and its data is stored and processed there. If you use BizGen from another country, you are sending your information to the United States, where privacy laws differ from your own.

14. Changes, deletion, and contact

If this policy changes in a way that materially affects how your data is handled, BizGen will email account owners at least 30 days before it takes effect. The effective date at the top always shows the current version.

To ask a question about this policy, to exercise any of the choices in section 10, or to request that BizGen delete an account and its data, email contact@bizgen.io. BizGen is operated by BGAI Ventures LLC, 2401 NE 65th St Apt 208, Fort Lauderdale, FL 33308.