Privacy Policy

1. Information We Collect

Account Information

When you create an account we collect your name and email address via Google OAuth. We do not store your Google password.

Organization & Business Data

You may provide your company name, industry, NAICS codes, and policy watchlist keywords so we can deliver relevant analyses and alerts.

Payment Information

Payments are processed by Stripe. We do not store credit card numbers. Stripe's privacy policy governs payment data.

Usage Data

We automatically collect IP addresses, browser type, pages visited, and timestamps to operate and improve the service.

2. How We Use Your Information

• Deliver AI-powered policy analyses and regulatory alerts
• Match your business profile to relevant grants and funding
• Process payments and manage subscriptions
• Send transactional emails (digests, reports, alerts)
• Improve and secure the platform

3. Third-Party Services

We share data with the following providers as needed to operate:

• Google OAuth — authentication
• Stripe — payment processing
• Microsoft Azure — cloud hosting, storage, and compute
• Anthropic (Claude) — AI analysis of policy documents

Each provider processes data under its own privacy policy. We do not sell your personal information to third parties.

4. Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

5. Data Retention

We retain account data for the life of your account. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

6. Security

We use industry-standard measures including encryption in transit (TLS 1.2+), encrypted storage, and access controls. No system is 100 % secure — please contact us immediately if you suspect unauthorized access.

7. Your Rights

CCPA (California)

California residents may request access to, deletion of, or opt out of the sale of personal information. We do not sell personal information.

GDPR (EEA)

If you are in the European Economic Area you have the right to access, rectify, erase, restrict processing, or port your data. Our legal basis for processing is contract performance and legitimate interest.

8. Children's Privacy

Bizmoon is not directed at anyone under 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date.

10. Contact Us

If you have questions about this policy, contact us at support@bizmoon.ai.