Privacy Policy
Last updated: January 20, 2026
Table of Contents
1. Introduction
Welcome to BizyGrow ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our comprehensive business management platform.
BizyGrow provides an integrated suite of tools for business communication, customer relationship management, social media management, AI-powered automation, and reputation management. This policy covers all features and integrations within our platform.
By using our Service, you consent to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, business name, business category, company registration details, and password when you create an account.
- Business Profile: Company logo, address, tax IDs (GST, PAN), social media links, and business description.
- Contact Data: Customer and contact information you import or create, including names, phone numbers, email addresses, tags, and notes.
- Communication Content: Messages, templates, broadcast campaigns, and automated responses you create or send.
- Documents: Files you upload for AI processing, including invoices, receipts, contracts, and other business documents.
- Images: Photos and images you upload or generate using our AI Image Studio.
- Payment Information: Billing details processed through secure third-party payment providers (we do not store complete card numbers).
- Support Communications: Messages, feedback, and support requests you send to us.
2.2 Information from Third-Party Integrations
- WhatsApp Business API: Message content, delivery/read status, contact information, media files, and conversation history as authorized through Meta's WhatsApp Business Platform.
- Facebook: Page information, posts, comments, messages, and insights when you connect your Facebook Business Page.
- Instagram: Profile information, posts, comments, direct messages, stories, and engagement metrics when you connect your Instagram Business or Creator account.
- Google Business Profile: Business locations, reviews, ratings, reviewer information, and profile data when you connect your Google account.
2.3 Automatically Collected Information
- Device Information: Browser type, operating system, device identifiers, and screen resolution.
- Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
- Network Information: IP address, approximate geographic location, and internet service provider.
- Performance Data: Error logs, crash reports, and diagnostic information.
3. WhatsApp Business Integration
Our platform integrates with WhatsApp Business API provided by Meta Platforms, Inc. When you use WhatsApp features:
3.1 Data We Access
- Phone numbers and WhatsApp profile information of your contacts
- Message content (text, images, documents, audio, video, stickers, locations)
- Message metadata (timestamps, delivery status, read receipts)
- Template messages and their approval status
- Business profile information (name, description, profile picture, address)
3.2 How We Use WhatsApp Data
- Display and manage your conversations in our unified inbox
- Send messages on your behalf (individual, bulk, and automated)
- Process AI-powered auto-replies and chatbot responses
- Generate analytics and reports on message performance
- Sync contacts between WhatsApp and your contact database
3.3 WhatsApp Compliance
Our use of WhatsApp data is governed by Meta's WhatsApp Business Policy and Terms of Service. We:
- Only access data necessary to provide messaging features
- Do not sell WhatsApp user data to third parties
- Comply with opt-in requirements for business messaging
- Respect user privacy settings and blocking preferences
4. Meta Platforms (Facebook & Instagram)
When you connect your Facebook Page or Instagram account, we access data through Meta's Graph API in compliance with Meta Platform Terms.
4.1 Facebook Data
- Page Information: Page name, ID, category, profile picture, and cover photo
- Posts & Content: Posts, photos, videos, and their engagement metrics
- Messaging: Facebook Messenger conversations with your Page
- Comments: Comments on your posts and your replies
- Insights: Page analytics, reach, engagement, and audience demographics
4.2 Instagram Data
- Profile Information: Username, bio, profile picture, follower/following counts
- Media: Posts, stories, reels, and their engagement metrics
- Direct Messages: Instagram DM conversations (Business/Creator accounts)
- Comments: Comments on your posts and your replies
- Insights: Account analytics, reach, impressions, and audience data
4.3 How We Use Meta Platform Data
- Display your social media content in our unified dashboard
- Enable you to respond to comments and messages from one place
- Schedule and publish posts to your connected accounts
- Provide analytics and performance reports
- Power AI-assisted content creation and response suggestions
Meta Platform Compliance: Our use of Facebook and Instagram data adheres to Meta Platform Terms and Policies. We only request permissions necessary for the features you use, and you can disconnect your accounts at any time.
5. Google Business Profile Integration
Our platform integrates with Google Business Profile APIs to help you manage your online business presence and reputation.
5.1 Data We Access
- Account Information: Google account email and profile (via OAuth)
- Business Locations: Location names, addresses, phone numbers, websites, categories
- Reviews: Customer reviews, ratings, reviewer names/photos, review dates, and your replies
- Business Profile: Business description, hours, photos, and attributes
5.2 How We Use Google Data
- Display your reviews in our unified reputation management dashboard
- Enable you to respond to reviews directly from our platform
- Generate AI-assisted reply drafts for reviews
- Provide alerts for new reviews and negative feedback
- Track review trends and sentiment over time
Google API Services User Data Policy: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We:
- Only use Google data to provide features you explicitly request
- Do not use Google data for advertising purposes
- Do not sell Google data to third parties
- Store OAuth tokens securely with encryption
- Allow you to disconnect and revoke access at any time
6. AI Services & Document Processing
BizyGrow provides AI-powered features to enhance your business operations. Understanding how we handle data in AI processing is important.
6.1 AI Agent (Automated Responses)
- Data Processed: Incoming messages, conversation context, your business information, and configured response rules
- Purpose: Generate intelligent automated responses to customer inquiries
- Processing: Messages are sent to AI providers (OpenRouter/OpenAI) for processing
- Storage: Prompts and responses are logged for quality improvement and debugging
6.2 AI Document Parser
- Data Processed: Documents you upload (invoices, receipts, contracts, forms)
- Purpose: Extract structured data from documents automatically
- Processing: Documents are sent to AI vision models for text extraction and analysis
- Storage: Uploaded documents and extracted data are stored in your account
- Sensitive Data: Documents may contain financial information, personal details, or business data - handle with care
6.3 AI Image Studio
- Data Processed: Text prompts, reference images, and generation parameters
- Purpose: Generate marketing images, social media graphics, and creative content
- Processing: Prompts are sent to AI image generation models (Google Gemini)
- Storage: Generated images are stored in your account gallery
- Ownership: You own the images generated using your prompts and credits
6.4 AI Review Reply Drafts
- Data Processed: Review content, rating, reviewer name, and your business information
- Purpose: Generate professional reply suggestions for customer reviews
- Processing: Review data is sent to AI models to generate contextual replies
- Review Before Sending: AI drafts are suggestions only - you review and approve before publishing
6.5 AI Service Providers
We use the following third-party AI providers to power our features:
- OpenRouter: Routes requests to various AI models (GPT-4, Claude, Gemini, etc.)
- Google AI: Gemini models for image generation and document processing
- OpenAI: GPT models for text generation and analysis
AI Data Notice: Data sent to AI providers is processed according to their respective privacy policies. While we select providers with strong privacy practices, AI-processed data may be used by providers to improve their models unless specifically opted out. Do not submit highly sensitive personal data (like SSN, medical records, or passwords) to AI features.
7. How We Use Your Information
We use collected information for the following purposes:
7.1 Service Delivery
- Provide, operate, and maintain our platform features
- Process your transactions and manage your account
- Enable integrations with third-party services you authorize
- Deliver AI-powered features and automation
7.2 Communication
- Send administrative messages, updates, and security alerts
- Respond to your support requests and inquiries
- Notify you about changes to our services or policies
- Send optional marketing communications (with your consent)
7.3 Improvement & Analytics
- Analyze usage patterns to improve user experience
- Develop new features and services
- Monitor and improve platform performance
- Conduct research and analytics (in anonymized form)
7.4 Security & Compliance
- Detect, prevent, and address fraud and abuse
- Enforce our terms of service
- Comply with legal obligations
- Protect the rights and safety of users
8. Data Sharing & Disclosure
We may share your information in the following circumstances:
8.1 Service Providers
We share data with trusted third-party vendors who perform services on our behalf:
- Cloud Hosting: Server infrastructure and data storage
- Payment Processors: Secure payment handling
- AI Providers: AI model inference and processing
- Analytics: Usage analysis and performance monitoring
- Communication: Email and notification delivery
8.2 Platform Integrations
When you connect third-party services, data flows to those platforms as necessary:
- Meta (WhatsApp/Facebook/Instagram): Messages and content you send/receive
- Google: Review replies and profile updates
8.3 Legal Requirements
We may disclose information when required to:
- Comply with applicable laws, regulations, or legal process
- Respond to lawful requests from government authorities
- Protect our rights, privacy, safety, or property
- Enforce our terms and agreements
8.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We do NOT sell your personal information to third parties for advertising or marketing purposes.
9. Data Security
We implement comprehensive security measures to protect your information:
- Encryption in Transit: All data transmitted uses TLS/HTTPS encryption
- Encryption at Rest: Sensitive data is encrypted in our databases
- Token Security: OAuth tokens and API keys are encrypted with AES-256
- Access Controls: Role-based access and multi-tenant data isolation
- Authentication: Secure password hashing and session management
- Monitoring: Security logging and anomaly detection
- Regular Updates: Security patches and vulnerability assessments
While we strive to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and keep your credentials confidential.
10. Data Retention
We retain your data according to the following guidelines:
- Account Data: Retained while your account is active and for a reasonable period after deletion request
- Message History: Retained according to your plan and preferences (typically 90-365 days)
- Documents & Media: Retained until you delete them or close your account
- AI Processing Logs: Retained for 30-90 days for debugging and improvement
- Analytics Data: Aggregated data may be retained indefinitely
- Legal Compliance: Some data may be retained longer if required by law
You can request deletion of your data by contacting us. We will process deletion requests within 30 days, subject to legal retention requirements.
11. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a portable format
- Restriction: Request restriction of certain processing activities
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent where processing is based on consent
- Disconnect Integrations: Revoke access to connected third-party accounts at any time
To exercise these rights, please contact us at bizylook@gmail.com. We will respond within 30 days.
13. International Data Transfers
Your information may be transferred to and processed in countries other than your own. Our service providers and AI partners may be located in the United States or other countries.
When transferring data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.
14. Children's Privacy
Our Service is intended for business use and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will:
- Update the "Last updated" date at the top of this policy
- Notify you of material changes via email or in-app notification
- Obtain consent where required by law
We encourage you to review this policy periodically.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: