Privacy Policy

This Privacy Policy explains how BizPilotB.Ai ("we", "us") collects, uses and protects your information when you use the BizPilotB.Ai platform, website and mobile app (the "Service"). By using the Service you agree to the practices described here.

Information we collect

• Account information: your name, email address and password (managed securely by our hosting platform). You may also add a profile photo.
• Social account connections: when you connect a social account we store the platform, account name and a connection record. OAuth access tokens are managed securely by our publishing partner, Bundle.social, and are never exposed in the app or frontend code.
• Content you create: posts, captions, hashtags, media (uploaded and AI-generated), AI prompts, and your Brand Kit (business name, logo, brand colours, tone of voice, target audience, products and services).
• Analytics data: per-post reach, impressions, likes, comments, shares and engagement, plus follower counts, synced from your connected social accounts.
• Usage data: how you interact with the Service, used to operate and improve it.

How we use your information

• To provide and operate the Service, including scheduling and publishing posts.
• To generate on-brand AI content (captions, images and videos) based on your Brand Kit and prompts.
• To publish to and retrieve analytics from your connected social accounts via Bundle.social.
• To display performance analytics and insights within your account.
• To provide owner support and respond to your enquiries.
• To maintain the security and integrity of the Service.

Third-party services

• Base44: hosting, authentication and database infrastructure.
• Stripe: subscription payments on the web app only. Stripe processes your card details; we do not store them. Purchases are not processed inside the mobile app.
• Bundle.social: social publishing and analytics across your connected accounts.
• Google Gmail: used solely for the owner support inbox, if you contact us via email.
• AI model providers: process prompts and generate text, images and video content on our behalf.

Data retention

We keep your information for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings → Delete Account, which removes your profile, business information, posts, drafts, media, AI content, analytics snapshots and social connection records, and revokes OAuth credentials where supported.

Your rights

You have the right to:

• Access the personal data we hold about you.
• Export or correct your data.
• Delete your account and associated data.
• Object to or restrict certain processing.

To exercise any of these rights, contact us at our contact page.

Security

Each customer's data is private to that account — no other user can access it. OAuth tokens for connected social accounts are stored securely on the server. While we use reasonable measures to protect your information, no method of transmission or storage is completely secure.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "last updated" date.