BizBudPro ("BizBudPro", "we", "us", or "our") operates the BizBudPro software-as-a-service platform, websites, mobile experiences, AI chat and voice agents, WordPress plugin, and related services (collectively, the "Services"). We are headquartered in Vancouver, British Columbia, Canada. This Privacy Policy explains what personal information we collect, how we use and disclose it, and the choices you have. It is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA), and to align with applicable provisions of Canada's Anti-Spam Legislation (CASL).

1. Who is responsible for your information

BizBudPro is the controller of personal information that you provide to us directly through the Services. When you use the Services as an employee, contractor, or representative of an organization that subscribes to BizBudPro (a "Customer"), that Customer is responsible for personal information it uploads, imports, or otherwise submits to the Services, and we process such information on the Customer's behalf as a service provider.

Our Privacy Officer can be reached at privacy@bizbudpro.com.

2. Personal information we collect

We collect the following categories of personal information:

Account information — name, email address, password (hashed), profile photo, workspace name, role, and authentication identifiers from sign-in providers (such as Google).
Billing information — billing address, tax identifiers, and the last four digits and brand of your payment card. Full card numbers are collected and stored directly by our payment processor (Stripe) and are never stored on our servers.
Customer Data — information you choose to submit to the Services, including contacts, deals, conversations, calendar events, documents, AI prompts and outputs, voice agent call transcripts, recordings, and any data you import from integrated third-party services.
Communications — messages you send to us, support tickets, survey responses, and metadata about emails or calls processed through the Services.
Usage and device data — IP address, browser type, operating system, referring URL, pages viewed, features used, timestamps, crash logs, and similar diagnostic data.
Cookies and similar technologies — see Section 8.

3. How we use personal information

We use personal information for the following purposes:

To provide, operate, maintain, and improve the Services.
To authenticate users, secure accounts, and prevent fraud and abuse.
To process payments, manage subscriptions, and issue invoices and receipts.
To deliver AI features, including generating responses through our AI chat and voice agents, scheduling appointments, and creating leads or CRM activities on your behalf.
To provide customer support and respond to your requests.
To send transactional messages (such as service notices and security alerts) and, with your consent or where otherwise permitted by CASL, commercial electronic messages such as product updates and marketing.
To comply with legal obligations and enforce our Terms of Service.
To conduct analytics and research to understand and improve the Services.

4. Legal basis and consent

Under PIPEDA and BC PIPA, we collect, use, and disclose personal information with your knowledge and consent, except where authorized or required by law. By creating an account and accepting our Terms of Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer; withdrawing consent may mean we can no longer provide some or all of the Services to you.

5. AI features and voice agents

When you use our AI chat or voice agents, the prompts, messages, audio, and transcripts you submit are processed by us and by third-party AI model providers (including Google and OpenAI, accessed via the Lovable AI Gateway, and ElevenLabs for voice). These providers process your data on our behalf under contractual confidentiality and security obligations. Our voice agent may create leads, contacts, appointments, and CRM activities in your workspace based on the content of a call. We do not use Customer Data to train third-party foundation models.

6. How we share personal information

We disclose personal information only in the limited circumstances described below:

Service providers. We engage trusted vendors to host infrastructure (Supabase, Cloudflare), process payments (Stripe), deliver email (our transactional email provider), provide AI inference (Google, OpenAI, ElevenLabs), and perform analytics. These providers are bound by written agreements requiring confidentiality and appropriate security safeguards, and may only use personal information to provide services to us.
Within your workspace. Information you submit may be visible to other members of your Customer organization based on role-based access controls.
Legal and safety. We may disclose information where required by law, court order, or governmental authority, or to protect the rights, property, or safety of BizBudPro, our users, or others.
Business transfers. If BizBudPro is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections.

We do not sell personal information.

7. International transfers and storage location

BizBudPro is based in Canada, but personal information may be stored and processed in the United States and other jurisdictions where our service providers operate. These jurisdictions may have data protection laws that differ from those of Canada or British Columbia. While information is outside of Canada, it may be subject to the laws of the jurisdiction in which it is held and may be disclosed to the courts, law enforcement, and national security authorities of that jurisdiction. We use contractual and technical safeguards to protect personal information regardless of where it is processed.

8. Cookies and analytics

We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, secure the Services, and measure usage. You can configure your browser to refuse cookies, but parts of the Services may not function properly without them.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), encryption at rest, role-based access controls, row-level security in our database, audit logging, secret management, and regular reviews of our security posture. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with our legal obligations (including tax, accounting, and anti-spam recordkeeping), resolve disputes, and enforce our agreements. When personal information is no longer required, we securely delete or anonymize it. Customer Data is retained in accordance with your subscription agreement and is deleted following account termination, subject to backup retention windows.

11. Your rights

Subject to PIPEDA, BC PIPA, and other applicable law, you have the right to:

access the personal information we hold about you;
request correction of inaccurate or incomplete personal information;
withdraw your consent to certain uses of your personal information;
request deletion of your account and associated personal information;
receive a copy of your personal information in a portable format; and
make a complaint to our Privacy Officer or to a supervisory authority — in British Columbia, the Office of the Information and Privacy Commissioner for British Columbia, or federally, the Office of the Privacy Commissioner of Canada.

To exercise these rights, email privacy@bizbudpro.com. We will respond within the timeframes required by applicable law (generally 30 days under PIPEDA and BC PIPA). We may require you to verify your identity before fulfilling a request.

12. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. Commercial electronic messages (CASL)

Where required by CASL, we obtain express or implied consent before sending you commercial electronic messages. Every commercial email we send identifies the sender and includes a functioning unsubscribe mechanism that takes effect within 10 business days.

14. Third-party services

The Services may include links to or integrations with third-party services (such as Google Workspace, QuickBooks, WordPress, and others). Your use of those services is governed by their own terms and privacy policies. BizBudPro is not responsible for the privacy practices of third-party services.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and, for material changes, provide additional notice (such as an in-product banner or email). Your continued use of the Services after the updated Privacy Policy takes effect constitutes your acceptance of the changes.

16. Contact us

BizBudPro — Privacy Officer
Vancouver, British Columbia, Canada
Email: privacy@bizbudpro.com