Privacy Policy

BizPilot is a business management application operated by the BizPilot team ("BizPilot", "we", "us"). If you use BizPilot as a member of someone else's workspace, that business is responsible for the business and customer records it enters; BizPilot processes those records on its behalf.

Contact for privacy questions and data requests: privacy@bizzpilot.shop.

• Account information — name, email address, optional phone number and avatar URL, and an encrypted password managed by our authentication provider.
• Workspace / business information — business name, type, team size, currency, country, city, address, contact phone and email, logo URL, storefront handle and storefront settings.
• Customer information you enter — customer and lead names, contact details, segments, notes, purchase history and follow-ups.
• Staff information — member name, role, status, schedules and leave requests.
• Attendance information — clock-in and clock-out events, breaks, shift durations, lateness, and a verification selfie captured at the moment of clocking.
• Location / geofencing information — the latitude, longitude and accuracy reported by the device at the moment of a clock event, the matched work location and the distance from it. Location is captured only at clock events. BizPilot does not run continuous background tracking.
• Financial and business records — products, costs, stock, sales, sale items, expenses, invoices, payments, gigs, deliverables and storefront orders.
• Device and technical information — information necessary to serve requests and keep logs, such as request metadata and error diagnostics.
• Cookies and similar technologies — see the Cookie Policy.

We do not collect card numbers or CVV data. BizPilot does not currently process payments through the application.

• To provide the product: authentication, workspaces, records, reporting and dashboards.
• To verify attendance where a business has enabled attendance and geofencing.
• To generate business insights and answers in the AI Business Assistant.
• To secure the service: audit logging, abuse and rate-limit controls, and investigating suspected misuse.
• To communicate service and security notices. Marketing messages are only sent where you have opted in.

• Performance of a contract — providing the service you or your employer signed up for.
• Legitimate interests — securing the platform, preventing abuse, and improving reliability.
• Consent — marketing communications, and, where required in your jurisdiction, device location for attendance.
• Legal obligation — retaining records where law requires it.

Where a business uses BizPilot to process staff or customer data, that business is responsible for establishing its own lawful basis.

• Within your workspace — according to role-based permissions. Staff attendance, selfies and location are visible only to the staff member concerned and to owners, admins and managers.
• Service providers (processors) — our hosting, database, storage and authentication infrastructure provider, and our AI gateway provider.
• AI processing — see section 6.
• Legal — where we are legally required to disclose information.

We do not sell personal information.

• Provider: Lovable AI Gateway (routing to OpenAI models)
• Purpose: Answering business questions inside the AI Business Assistant
• Data shared: An aggregated snapshot of your own workspace: revenue and cost totals, expense categories, product names, stock levels, low-stock items, top sellers, customer and lead counts, gig and invoice status with client names and balances, and storefront order counts.
• Never shared with the AI: Passwords, session tokens, API keys, payment credentials, staff selfies, and GPS coordinates.
• Retention: Requests are processed to generate a response. We do not store your prompts outside your workspace conversation view. Provider-side retention is governed by the provider's terms and is not controlled by BizPilot.

The assistant can only read data from the workspace you are signed in to, through fixed server-side queries. It cannot run arbitrary database queries and cannot change your records.

Location and selfie capture happen only when a staff member deliberately clocks in, starts or ends a break, or clocks out. The browser asks for permission first and the reason is shown in the app. We record the coordinates, accuracy and distance from the assigned work location for that event, plus the selfie image.

Selfies are held in private storage. They are not publicly accessible and can only be read by members of the same workspace who are permitted to view attendance. Precise coordinates are not shown to ordinary staff members other than the person who clocked.

Our infrastructure providers may process data in regions outside your own country. Where required, transfers rely on the mechanisms offered by those providers. We have not carried out a jurisdiction-specific transfer assessment; this should be reviewed with legal counsel before commercial launch in regulated markets.

Workspace owners can configure retention periods in Settings → Security & privacy. Defaults are:

• Attendance records and selfies — 365 days
• Staff location verification data — 90 days
• Audit and security logs — 730 days
• Account and business records — kept while the workspace is active
• Deleted accounts — processed through a controlled deletion request; records that must be retained for legal or accounting reasons are retained until that obligation ends

Implemented controls include workspace isolation enforced by database row-level security, role-based permissions enforced server-side, append-only audit logging, private file storage with access control, server-side rate limiting for AI requests, cross-site request protections for state-changing operations, and HTTPS in transit. See the Security page. No system is completely secure; we do not claim BizPilot is unbreachable, and we hold no security certifications.

Depending on where you live, you may have rights to access, correct, delete, export, restrict or object to the processing of your personal information, and to withdraw consent. You can raise any of these from Settings → Security & privacy, or by emailing privacy@bizzpilot.shop. We describe these rights as they may apply to you; we do not promise a right that does not legally apply in your jurisdiction.

Account deletion is requested in-app and handled through a controlled process so that financial records with legal retention requirements are not destroyed prematurely. Workspace owners and admins can export the workspace's business records as a JSON file at any time. Exports contain sensitive information — store them securely.

BizPilot is for business use and is not directed to children. We do not knowingly collect information from children under 16.

Marketing consent is separate from account creation, is never pre-ticked, and can be withdrawn at any time in Settings → Security & privacy.

If we become aware of a security incident affecting personal information, we will investigate, take remedial steps and notify affected workspace owners and, where legally required, the relevant authority, without undue delay.

We publish the version, effective date and last-updated date at the top of this page, and keep a record of previous versions:

• v1.0 (4 September 2026) — First published version.

Privacy questions and data requests: privacy@bizzpilot.shop.