At YourBiz, we respect your privacy and are committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://yourbiz.app and use our services. In this policy, "personal data" (also referred to as "personal information" under certain laws such as the CCPA) means any information that identifies or could reasonably identify you. By using our services, you agree to the practices described here. If you do not agree, please do not use our services.
1. When This Policy Applies
This Privacy Policy applies to all YourBiz websites, applications, and services that link to it (collectively, "Services").
1a. About Your Customers' Data
YourBiz allows you to store and manage business data, including information about your customers, invoices, payments, estimates, and other records. For this data that you upload or create ("Your Data"):
- You retain ownership. You own all data you input into YourBiz, and we act as a data processor on your behalf, processing your data only on your instructions and in accordance with this Privacy Policy.
- You are responsible for compliance. You must ensure you have the right to store and use this data, including obtaining necessary consents from individuals whose information you store (e.g., your own customers).
- International transfers apply. Your data may be processed and stored in the United States or other jurisdictions as described in Section 9. If you are in the EU or a jurisdiction with data protection laws, a Data Processing Agreement (DPA) is available upon request.
Please reach out to [email protected] if you have questions about data processing or need a DPA.
2. What We Collect
We collect information about you in the following ways:
a. Information You Provide
When you register, purchase, or use our Services, we may collect:
- Account data: Name, email address, phone number, physical address, payment and billing details, account login credentials, and profile information
- Business data: Customer records, estimates, invoices, payment information, inventory, time tracking, custom form submissions, and other business information you upload or create
- Communications and feedback you send us
b. Information We Collect Automatically
When you use our Services, we automatically collect certain data, including:
- IP address, browser type, and device identifiers
- Aggregate usage metrics such as page views, collected via Umami and Cloudflare Web Analytics RUM for site analytics, and via PostHog for registration and in-app analytics only (see our Cookie Policy)
- Cookies and similar technologies (see our Cookie Policy)
- Location data if enabled
c. Information from Third Parties
We may also obtain information about you from:
- Linked third-party accounts (e.g., Google, payment processors)
- Service providers to validate or supplement your data
- Business partners helping us deliver services
3. How We Use Your Information
We use your account information to:
- Perform our contract with you: Create and manage your account, provide, operate, and improve our Services, and process payments and transactions
- Marketing (with consent): Send promotional offers and relevant advertising. For residents of EU jurisdictions, we require your affirmative opt-in consent before sending marketing communications. You can withdraw consent and opt out at any time by emailing [email protected] or using the unsubscribe link in our emails.
- Legitimate business interests: Detect and prevent fraud or misuse of our Services, conduct research and analytics to improve customer experience
- Legal compliance: Comply with legal and regulatory obligations
We do not sell or share your personal data for targeted advertising purposes to third-party advertisers or data brokers.
4. How We Share Your Information
We may share your information in the following limited circumstances:
Service providers: We use trusted service providers to help deliver our Services, including Umami (site analytics), Cloudflare Web Analytics RUM (site analytics), PostHog (registration and in-app analytics), and Stripe (payment processing). They are contractually required to protect your information.
Legal obligations: We may disclose information to comply with legal requests, enforce our Terms of Use, or protect rights, property, and safety.
Business transfers: If our business is sold or merged, your data may be transferred as part of the transaction.
With your consent: We may share information when you give us explicit permission.
We may also share aggregated or anonymized data that cannot reasonably identify you.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain your session and remember your preferences. You can manage cookies through your browser settings. See our full Cookie Policy for details.
We do not currently respond to "Do Not Track" (DNT) or Global Privacy Control (GPC) signals. However, since YourBiz does not use advertising or tracking cookies and does not sell or share personal data with third parties for advertising, these signals do not change your experience on our site.
6. Your Rights
Depending on where you live, you may have rights to:
- Access, correct, or delete your personal data
- Restrict or object to certain data processing
- Opt out of marketing communications
- Request a copy of your data in portable format
- Lodge a complaint with your local data protection authority
If you are a California resident or resident of another U.S. state with similar privacy laws, you have additional rights, including:
- Right to know: You may request what categories of personal data YourBiz collects and how it uses them.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights. You will not be denied service, charged different prices, or offered different quality of service based on your exercise of these rights.
To exercise your rights, email us at [email protected].
7. Data Retention
We keep your data only as long as needed to provide our Services, fulfill legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are:
- Account data: Retained for the duration of your account and deleted within 30 days of account termination
- Business data (your customers' data): Deleted within 30 days of account termination, except where retention is required for legal or tax compliance (see below)
- Backup data: Encrypted backups are retained for up to 60 days after account termination for disaster recovery purposes, then permanently deleted
- Legal and tax records: Retained for up to 7 years as required by applicable law for tax, accounting, and legal compliance
8. How We Protect Your Data
We implement technical, organizational, and administrative safeguards to protect your information, including:
- Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS/SSL
- Encryption at rest: Sensitive data stored on our servers is encrypted using industry-standard encryption algorithms
- Daily encrypted backups: Your data is backed up daily with encrypted copies stored in secure, redundant locations
- Access controls: Only authorized employees with a business need to access your data are granted access, protected by strong authentication requirements
- Regular security updates: We maintain and regularly update our security infrastructure and software
However, no method of transmission or storage is completely secure. You can help by keeping your login credentials confidential and enabling two-factor authentication on your account.
9. International Data Transfers
If you access our Services from outside the United States, please note that your data may be processed and stored in the U.S. or other jurisdictions, which may not have the same data protection laws as your country.
For transfers from the European Economic Area, United Kingdom, or other regions with data protection laws, YourBiz relies on Standard Contractual Clauses (SCCs) approved by the European Commission, as supplemented by the UK Data Protection Act 2018 for UK data transfers. Where required by applicable law, a Data Processing Agreement (DPA) incorporating the SCCs is available upon request at [email protected].
10. Breach Notification
In the event of a data breach that affects your personal data, YourBiz will:
- Notify affected users and relevant regulatory authorities within the timeframes required by applicable law (e.g., 72 hours under GDPR)
- Provide information about the breach, the likely consequences, and measures we have taken or will take
- Notify you via email to the address associated with your account
You can contact us at [email protected] if you have questions or believe your data may have been compromised.
11. Children's Privacy
Our Services are not directed to children under 18, and we do not knowingly collect personal data from minors. If we discover we have done so, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you via email at the address associated with your account at least 30 days before the changes take effect. For non-material changes, we may simply update this page. The "Last Updated" date at the top of this policy will reflect any changes.
Your continued use of our Services after notification of changes constitutes your acceptance of the revised Privacy Policy.
Questions?
If you have questions about this Privacy Policy, email us at: [email protected]