Privacy
What we hold, why, and for how long
Written to be read rather than to be survived. If anything here is unclear, ask us and we will explain it in plain words.
To be completed before this page goes live.
The controller details and the sub-processor list below need the operating company's real information, and this page should be reviewed by a lawyer in your main market. Nothing here is legal advice.
Who is responsible
The controller for personal data processed through BizBoard is […]. You can reach us at privacy@bizboard.space.
Where you use BizBoard to keep records about your own customers, staff and suppliers, you are the controller of that data and we act as your processor.
What we collect, and why
To give you an account
Your name, email address, the business you belong to and your role in it. Without these there is no account. Lawful basis: performance of the contract between us.
The records you put in
Invoices, supplier bills, sales, stock, shifts, hours, tips and the contact details of your customers and suppliers. This is your business data. We hold it so the product can do its job, we do not sell it, and we do not use one customer's figures to build something for another.
To keep the service running and secure
Sign-in times, IP addresses and error logs, kept for a limited period. Lawful basis: our legitimate interest in a service that works and is not abused.
To take payment
Your billing details and subscription history. Card numbers are handled by our payment provider and never reach our servers.
What we do not do
- We do not sell personal data, and we do not share it for anybody else's advertising.
- We do not ask for your banking credentials. Payments leave as a file you upload to your own bank.
- We do not read your mailbox beyond the supplier invoices you connect it for.
- The supplier comparison never reveals what you pay, how much you buy, or who you buy from.
Who else processes it
We use a small number of providers to run the service — hosting, email delivery and payments. Each is bound by a data processing agreement, and the current list is:
- Hosting and database — within the European Union: […]
- Email delivery: […]
- Payments: […]
If you connect your own AI provider key, the text of the documents you choose to have read is sent to that provider under your own account and their terms. That connection is off unless you turn it on, per feature.
Where it is kept
Your business data is stored on infrastructure inside the European Union.
How long
- Account and business records: while your account is open, and for a limited period afterwards so that you can come back or export.
- Accounting documents: for the retention period the law of your country sets, which is usually longer than the subscription.
- Technical logs: a short period, measured in weeks.
Your rights
Under the GDPR you may ask for a copy of your personal data, ask us to correct it, ask us to delete it, object to processing based on legitimate interest, and ask for it in a portable form. Write to privacy@bizboard.space and we will answer within a month.
You can also complain to your national supervisory authority. In Czechia that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
Export and deletion
You can export your data from inside the app at any time while your account is open — the ledger in your accountant's format, your invoices as PDFs, and your records as files. Deleting your account removes your business data, subject to documents we are legally required to retain.
Changes
If we change this policy in a way that matters, we will tell account holders by email rather than quietly changing the date at the bottom of the page.