Privacy Policy

Information we handle

• Account details: your name, email address, phone number, photo (if added) and role, as entered by your organisation's administrator or by you.
• Business data you enter: customers, orders, invoices, payroll, attendance, products, vendors, expenses and similar records. Your organisation owns this data.
• Sign-in and security data: login history, IP address, browser/device type and active sessions, used to protect accounts.
• Files you upload: photos and documents attached to records, such as order photos, expense bills and employee documents.
• Error reports: technical details about errors (for example the page, browser or device type and error message), used to find and fix problems.

Your organisation's customers and employees

Businesses use bizPower to record details of their own customers (such as name, phone number, measurements and order history) and employees (such as contact details, attendance, salary, bank account and identity documents). The business decides what to record and is responsible for it; we store and process it only to provide bizPower to that business. Identity and bank details are encrypted, and access to them is restricted and logged.

Using the Android app

• Camera and files: the app uses the camera only when you choose to take a photo to attach to a record, and reads only the files you pick. Photos are uploaded to your organisation's records; the app does not browse your gallery.
• Downloads: reports and documents you download (Excel files, PDFs) are saved to your device's Downloads.
• WhatsApp: "Send on WhatsApp" buttons open WhatsApp with a prepared message. You choose whether to send it, and WhatsApp's own privacy policy applies to the message. bizPower records that a message was prepared so it appears on the customer's timeline.
• Notifications: if you turn on notifications, the app registers a device token with Google's Firebase Cloud Messaging so we can send alerts such as task assignments to this phone. The token is linked to your account and removed when you sign out.
• The app does not access your location, contacts, call logs or SMS, and does not use an advertising ID.

Signing in with Google

If you choose "Continue with Google" on the web, we receive your Google email address, its verification status and your name. We use these only to match you to an existing bizPower account and sign you in. We do not create accounts from Google sign-in, and we do not access your Gmail, Google Drive, contacts, calendar or any other Google data. We never receive your Google password.

How we use information

• To provide, maintain and secure the service for your organisation.
• To send service messages such as sign-in codes, password resets and subscription notices.
• To diagnose errors and improve reliability.

We do not sell your personal information or use your business data for advertising.

Sharing and service providers

We share data only with service providers that help us run bizPower, and only as needed to provide the service:

• Railway: application hosting and database.
• Cloudflare R2: storage for uploaded files and backups.
• Resend: email delivery (sign-in codes, password resets, notices).
• MSG91: SMS and WhatsApp delivery of sign-in codes.
• Sentry: error monitoring.
• Google: optional sign-in on the web, and Firebase Cloud Messaging for app notifications.

We may also disclose information when required by law.

Security

All data is sent over encrypted connections (HTTPS). Data is isolated per organisation, access is controlled by roles and permissions, sensitive fields such as identity and bank details are encrypted, and access to them is recorded in an audit log.

Retention

We keep business data while your organisation's account is active. Login history is kept for 12 months and audit logs for 24 months; older entries are archived for up to 90 days and then deleted. Database backups are kept for up to 15 days. After an organisation closes its account, we delete its data within a reasonable period, except where the law requires us to keep it.

Deleting your account or data

bizPower accounts are created and managed by your organisation, which decides what information about you is kept. To have your account deleted or your details corrected, ask your organisation's administrator. They can erase your personal details from bizPower at any time.

You can also contact us: email [email protected] from the email address on your account, with the subject "Delete my bizPower account". After confirming it is you, we pass your request to your organisation and help them complete it.

When your personal details are erased, your name, contact details and photo are removed and your login is closed. Business records your organisation is required to keep (such as invoices and payroll records) stay with the organisation and show you as "Deleted user". Remaining copies in backups expire within 15 days.

Children

bizPower is a tool for businesses and is not intended for children.

Changes

We may update this policy and will change the date above when we do.

Contact

Innovate Biz — [email protected]