Privacy Policy

1. When this Policy Applies

This Privacy Policy applies to all YourBiz websites, applications, and services that link to it (collectively, "Services").

1a. About Your Customers' Data

YourBiz allows you to store and manage business data, including information about your customers, invoices, payments, estimates, and other records. For this data that you upload or create ("Your Data"):

• You retain ownership. You own all data you input into YourBiz, and we act as a data processor on your behalf, processing your data only on your instructions and in accordance with this Privacy Policy.
• You are responsible for compliance. You must ensure you have the right to store and use this data, including obtaining necessary consents from individuals whose information you store (e.g., your own customers).
• International transfers apply. Your data may be processed and stored in the United States or other jurisdictions as described in Section 9. If you are in the EU or a jurisdiction with data protection laws, a Data Processing Agreement (DPA) is available upon request.

Please reach out to [email protected] if you have questions about data processing or need a DPA.

2. What We Collect

We collect information about you in the following ways:

3. How We Use Your Information

We use your account information to:

• Perform our contract with you: Create and manage your account, provide, operate, and improve our Services, and process payments and transactions
• Marketing (with consent): Send promotional offers and relevant advertising. For residents of EU jurisdictions, we require your affirmative opt-in consent before sending marketing communications. You can withdraw consent and opt out at any time by emailing [email protected] or using the unsubscribe link in our emails.
• Legitimate business interests: Detect and prevent fraud or misuse of our Services, conduct research and analytics to improve customer experience
• Legal compliance: Comply with legal and regulatory obligations

We do not sell or share your personal data for targeted advertising purposes to third-party advertisers or data brokers.

4. How We Share Your Information

We may share your information in the following limited circumstances:

Service providers: We share information with trusted vendors who help us deliver Services, including Cloudflare (analytics) and Stripe (payment processing). They are contractually required to protect your information.

Legal obligations: We may disclose information to comply with legal requests, enforce our Terms of Use, or protect rights, property, and safety.

Business transfers: If our business is sold or merged, your data may be transferred as part of the transaction.

With your consent: We may share information when you give us explicit permission.

We may also share aggregated or anonymized data that cannot reasonably identify you.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session and remember your preferences. You can manage cookies through your browser settings. See our full Cookie Policy for details.

We do not currently respond to "Do Not Track" (DNT) or Global Privacy Control (GPC) signals. However, since YourBiz does not use advertising or tracking cookies and does not sell or share personal data with third parties for advertising, these signals do not change your experience on our site.

6. Your Rights

Depending on where you live, you may have rights to:

• Access, correct, or delete your personal data
• Restrict or object to certain data processing
• Opt out of marketing communications
• Request a copy of your data in portable format
• Lodge a complaint with your local data protection authority

To exercise your rights, email us at [email protected].

7. Data Retention

We keep your data only as long as needed to provide our Services, fulfill legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are:

• Account data: Retained for the duration of your account and deleted within 30 days of account termination
• Business data (your customers' data): Deleted within 30 days of account termination, except where retention is required for legal or tax compliance (see below)
• Backup data: Encrypted backups are retained for up to 60 days after account termination for disaster recovery purposes, then permanently deleted
• Legal and tax records: Retained for up to 7 years as required by applicable law for tax, accounting, and legal compliance

8. How We Protect Your Data

We implement technical, organizational, and administrative safeguards to protect your information, including:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS/SSL
• Encryption at rest: Sensitive data stored on our servers is encrypted using industry-standard encryption algorithms
• Daily encrypted backups: Your data is backed up daily with encrypted copies stored in secure, redundant locations
• Access controls: Only authorized employees with a business need to access your data are granted access, protected by strong authentication requirements
• Regular security updates: We maintain and regularly update our security infrastructure and software

However, no method of transmission or storage is completely secure. You can help by keeping your login credentials confidential and enabling two-factor authentication on your account.

9. International Data Transfers

If you access our Services from outside the United States, please note that your data may be processed and stored in the U.S. or other jurisdictions, which may not have the same data protection laws as your country.

For transfers from the European Economic Area, United Kingdom, or other regions with data protection laws, YourBiz relies on Standard Contractual Clauses (SCCs) approved by the European Commission, as supplemented by the UK Data Protection Act 2018 for UK data transfers. Where required by applicable law, a Data Processing Agreement (DPA) incorporating the SCCs is available upon request at [email protected].

10. Breach Notification

In the event of a data breach that affects your personal data, YourBiz will:

• Notify affected users and relevant regulatory authorities within the timeframes required by applicable law (e.g., 72 hours under GDPR)
• Provide information about the breach, the likely consequences, and measures we have taken or will take
• Notify you via email to the address associated with your account

You can contact us at [email protected] if you have questions or believe your data may have been compromised.

11. Children's Privacy

Our Services are not directed to children under 18, and we do not knowingly collect personal data from minors. If we discover we have done so, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email at the address associated with your account at least 30 days before the changes take effect. For non-material changes, we may simply update this page. The "Last Updated" date at the top of this policy will reflect any changes.

Your continued use of our Services after notification of changes constitutes your acceptance of the revised Privacy Policy.

Questions?

If you have questions about this Privacy Policy, email us at: [email protected]