[YOUR REGISTERED BUSINESS NAME] trades as BizzFlow POS and operates the service at bizzflow.online. In these pages "we", "us" and "our" mean that business, and "you" means the person or business using the service.
Address: [YOUR TRADING ADDRESS]. You can reach a person at support@bizzflow.online, and we aim to answer within two working days.
We collect what we need to run your account and the application, and nothing to sell on. We never see your card number. We do not sell personal data, and we do not use your business records for advertising.
Account details. Your name, email address, the password you set (stored only as a cryptographic hash, never in a form we can read), your business name and the plan you are on.
What you put into the application. Your products, stock, suppliers, expenses, staff accounts, and the sales you record. Where you choose to keep customer records, that will include your customers’ names and contact details and what they owe you. You decide what to enter; we do not require any of it.
Technical data. IP address, browser type and the times of requests, kept in server and security logs so we can keep the service running and investigate abuse. The application also records an audit trail of significant actions inside your own account, which you can read from the Audit log screen.
When you enter details about your own customers, you decide why and how they are used, and we handle them on your instructions in order to provide the service. You are responsible for having a lawful reason to hold them and for telling those people what you do with their information. We are responsible for keeping them secure and for not using them for our own purposes.
Card payments are processed by Paddle, which acts as the merchant of record. The card form belongs to Paddle even when it appears inside our checkout screen: your card number is entered into their fields and goes to them directly. We never receive it, never store it and never see it. What we receive back is a confirmation that a payment succeeded, the amount, and an identifier for the transaction.
Paddle handles the payment as its own controller and applies its own privacy notice to it, including any billing and tax details it collects from you.
Only the providers needed to run the service, and only with what they need:
We may also disclose data where the law requires it. We do not sell personal data to anyone.
The assistant is off until you turn it on, and it uses an API key you supply. When it is on, the question you ask and a summary of the figures needed to answer it are sent to the provider you chose. There is a separate setting controlling whether customer details may be included, and it is off by default. Switch the assistant off and nothing is sent at all.
We use the cookies needed to keep you signed in and to keep forms secure. We do not use advertising cookies and we do not run third-party trackers on the application.
Some preferences are stored in your browser rather than on our servers, because they belong to the device rather than the account — the sound settings are the main one, so a shop tablet and an office laptop can differ. Clearing your browser data clears them.
Your business records are kept for as long as your account exists, because they are the point of the service. Close your account and ask us to delete them and we will, except where we have to keep something to meet a legal or tax obligation, or where it is needed to resolve a dispute. Technical logs are kept for a short period and then discarded.
The site is served over HTTPS. Passwords are hashed. Credentials you store for third-party services are encrypted before they are written. Access inside the application is controlled by roles and permissions that are checked on the server on every request, not only hidden in the interface. No system is perfectly secure, but if a breach affects your data we will tell you.
You can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, or object to how we use it. Much of it you can do yourself: account details are editable in Settings, and the CSV export gives you your records without needing to ask. For anything else, write to us at the address above and we will respond within a reasonable time.
The service is for businesses and is not directed at children. We do not knowingly collect data from anyone under the age at which they could enter a contract where they live.
If we change this notice in a way that matters, we will tell you by email or in the application. The date at the top of this page is when it was last changed.
Any question about privacy, or to exercise any of the rights above: support@bizzflow.online.