Do Not Sell or Share My Personal Information

Purpose of This Page and a Plain Language Summary

This page is the standing notice bizz publishes for residents of US states whose privacy laws give them rights over their personal information, including California, Virginia, Colorado, Connecticut, Utah, and Texas. It explains what personal information bizz collects through www.bizz.ai and through its work as a software development agency, whether bizz sells or shares that information as those terms are defined by statute, and exactly how a person can exercise the rights available to them. It is intended to be read alongside the general bizz Privacy Policy and Cookie Notice. Where this page and the Privacy Policy differ on a point of state privacy rights, this page controls.

In plain language: bizz is a business to business professional services firm. Our clients are companies, not consumers, and our revenue comes from building software, not from monetizing personal data. We do not sell personal information for money. We do not share personal information for cross context behavioral advertising. We do not build advertising profiles, we do not operate a data broker business, and we are not registered as a data broker in any state. The personal information we hold is mostly business contact details that prospects and clients give us voluntarily, newsletter email addresses, and website analytics that tell us which pages people actually read.

This page describes practices, not certifications. bizz makes no claim on this page to any particular audit, certification, or accreditation, and nothing here should be read as one. This page is also provided for information only and is not legal advice. It does not create a contract and it does not alter any master services agreement, statement of work, data processing addendum, or nondisclosure agreement between bizz and a client. Clients who need to know how a specific engagement handles personal data should read the agreement governing that engagement and should have their own counsel review it before signing.

• Applies to personal information collected through www.bizz.ai, including the contact form, the start a project intake form, and the newsletter subscription.
• Applies to personal information about prospects, client personnel, vendors, and applicants that bizz handles for its own business purposes.
• Does not apply to personal data bizz processes on behalf of a client during an engagement, which is governed by that engagement's master services agreement and data processing addendum.
• Does not apply to third party websites that bizz links to, each of which publishes its own notice.

The Position of bizz on Selling and Sharing Personal Information

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, to sell means to disclose a consumer's personal information to a third party for monetary or other valuable consideration. The phrase other valuable consideration is deliberately broad, and it can capture arrangements where no money changes hands but a business receives something of value in return for data. To share has a narrower and more specific meaning: disclosing personal information to a third party for cross context behavioral advertising, meaning advertising targeted to a consumer based on personal information obtained from that consumer's activity across businesses, websites, applications, or services other than the one being used.

bizz does not sell personal information for monetary consideration, and has not done so in the twelve months preceding the most recent update of this page. bizz does not share personal information for cross context behavioral advertising. We do not deploy retargeting pixels, we do not build or export advertising audiences, and we do not supply prospect lists, client contact details, or newsletter subscriber addresses to advertising networks, data brokers, list vendors, or any other party that would use them for its own purposes. We also have no actual knowledge of selling or sharing the personal information of consumers under sixteen years of age, and our services are not directed to minors.

One nuance deserves an honest statement rather than a flat denial. bizz uses Google Analytics and Vercel Analytics on www.bizz.ai. Some regulators and some plaintiffs have argued that transmitting pseudonymous identifiers and browsing signals to an analytics vendor can amount to a sale or a share when that vendor is permitted to use the data for its own purposes. bizz configures its analytics to operate under service provider or processor terms and does not enable advertising features, audience export, or data sharing settings. Section seven explains this in detail and tells you how to opt out regardless of how the question is ultimately characterized.

If this position ever changes, we will update this page before the change takes effect, add the opt out link and mechanisms the law requires, and honor opt outs already on record. We will not treat a change in vendors, tooling, or website platform as a reason to reset preferences you have already expressed. Any opt out you send us today is recorded as a standing instruction that survives future changes to our marketing stack, and we apply it to the identifiers we hold rather than only to the browser the request came from.

Categories of Personal Information We Collect, Our Sources, and How Long We Keep It

The CCPA organizes personal information into statutory categories. The list below maps what bizz actually collects onto those categories so that a request to know can be answered against a common vocabulary. We collect considerably less than the statute contemplates. bizz does not collect biometric information, does not collect precise geolocation beyond the coarse city or country level inferred from an IP address, does not collect audio or visual recordings other than meeting recordings a client explicitly asks us to make, does not collect education records, and does not purchase personal information from data brokers or append third party data to our records.

We obtain personal information from a small number of sources. The largest by far is the individual: what someone types into the contact form, the start a project intake form, or the newsletter box, and what they tell us on a call or by email. The second is automatic collection through cookies and similar technologies when someone visits www.bizz.ai. The third is our clients and their personnel, who provide names and contact details so a project team can communicate. The fourth is publicly available business sources such as a company website or a public professional profile, used only to confirm that an inbound inquiry is genuine.

We retain personal information only for as long as it serves the purpose it was collected for, plus any period we are required to keep records. Contact form and intake form submissions that do not lead to an engagement are kept for twenty four months and then deleted or aggregated. Newsletter records are kept until the subscriber unsubscribes, plus a minimal suppression record kept indefinitely so we do not email that person again by mistake. Client engagement records, contracts, and invoices are kept for the term of the engagement plus seven years to satisfy tax, accounting, and limitation period requirements. Raw website analytics are retained for fourteen months.

• Identifiers: name, business email address, business phone number, company name, job title, IP address, and cookie or device identifiers.
• Commercial information: services inquired about, proposals and statements of work, engagement history, invoicing records, and payment status. bizz does not store full payment card numbers.
• Internet or other electronic network activity: pages viewed on www.bizz.ai, referring URLs, time on page, page performance metrics, browser and device type, and interactions with our forms and newsletter.
• Professional or employment related information: employer, role, team size, technology stack, and the project context a prospect chooses to describe in an intake form or on a call.
• Inferences: a limited assessment of whether an inquiry fits our services, an approximate budget band, and the likely stage of a buying process, drawn only from what the person tells us.
• Client engagement data: whatever personal data exists inside a client system we are asked to build, test, migrate, or support, handled as a service provider or processor under the engagement agreement.

Business and Commercial Purposes for Each Category

State privacy law requires a business to state why it collects each category and to limit use to what is reasonably necessary and proportionate to that purpose. bizz collects personal information for a short list of ordinary commercial purposes, all of which relate to running a professional services firm. We do not collect information speculatively, we do not enrich records for future resale, and we do not use personal information collected through the website to train machine learning models of our own. When we build or tune models during a client engagement, we do so on data the client supplies under that engagement's agreement, not on our marketing data.

Two purposes deserve to be named explicitly because they are the ones people ask about most. The first is marketing. We use business contact details and newsletter subscriptions to send occasional updates about our work, and every one of those messages carries an unsubscribe link that we honor promptly and permanently. The second is service improvement. We use aggregated and de identified analytics to decide what to write about and what to fix on the site. Once information is aggregated or de identified so that it cannot reasonably be linked back to a person, we maintain it in that form and do not attempt to reidentify it.

We will not use personal information for a materially different, unrelated, or incompatible purpose without providing notice first. If a new purpose arises, for example a new client portal or a new support channel, we will describe it here and, where the law requires consent rather than notice, we will ask for consent before proceeding. Personal data processed on behalf of a client is used only for the purposes the client instructs, and bizz does not use client data to improve its own products, benchmark other clients, or generate marketing content unless the client agrees in writing.

• Identifiers: to respond to inquiries, deliver proposals, staff and administer engagements, issue invoices, send transactional messages, and prevent fraud or abuse of our forms.
• Commercial information: to scope work, prepare and manage statements of work, forecast capacity, invoice accurately, and maintain accounting and tax records.
• Internet activity: to keep www.bizz.ai secure and available, measure which content is useful, diagnose performance problems through Vercel Speed Insights, and improve navigation.
• Professional and employment information: to understand what a prospect needs, judge whether bizz is a suitable fit, assemble a team with the right skills, and tailor a proposal.
• Inferences: to prioritize follow up and to avoid pursuing work we are not well positioned to deliver.
• All categories: to comply with law, respond to lawful requests, establish or defend legal claims, and enforce our agreements.

Categories Disclosed to Service Providers and the Restrictions We Impose

bizz discloses personal information to a limited set of service providers and contractors that perform functions on our behalf. In the twelve months preceding the most recent update of this page, bizz disclosed the categories described in section three to the types of recipients listed below, for the business purposes described in section four. A disclosure to a service provider under a compliant contract is neither a sale nor a share, because the recipient is contractually barred from using the information for its own purposes. We keep the vendor list deliberately short and review it at least annually.

Each of these relationships is governed by a written contract that, at a minimum, states the limited and specified purposes for which personal information is disclosed, prohibits the recipient from selling or sharing the information, prohibits retaining, using, or disclosing it for any purpose other than performing the services, prohibits combining it with information received from other sources except as the statute permits, requires reasonable security measures appropriate to the sensitivity of the information, requires the recipient to notify us if it can no longer meet its obligations, and grants bizz the right to take reasonable steps to stop and remediate unauthorized use. Subcontractors must accept equivalent terms in writing before receiving any personal information.

For personal data that bizz processes on behalf of a client during an engagement, the roles are reversed. The client is the business or controller, bizz acts as the service provider or processor, and our obligations are set out in the master services agreement and the data processing addendum for that engagement. Individuals whose data is processed in that context should direct rights requests to the client that controls the data. If such a request reaches us first, we will forward it to the relevant client promptly, tell the requester that we have done so where permitted, and assist the client as the agreement requires.

• Cloud hosting and application delivery providers, which process identifiers and internet activity in order to serve www.bizz.ai.
• Website analytics and performance measurement providers, which process internet activity and pseudonymous identifiers.
• Email delivery and newsletter platforms, which process identifiers and subscription status.
• Customer relationship, email, calendaring, document storage, and project tracking tools, which process identifiers, commercial information, and professional information.
• Accounting, invoicing, and payment processing providers, which process identifiers and commercial information. Card data is handled by the processor and not stored by bizz.
• Professional advisors in legal, tax, and audit roles, and, where an engagement requires it, approved subcontractors bound to the obligations we owe the client.
• Law enforcement or regulators, where disclosure is required by a valid legal process and only to the extent required.

Sensitive Personal Information and the Right to Limit Its Use

The CPRA defines sensitive personal information to include government identifiers such as a Social Security number, driver's license number, or passport number, account credentials and financial account information, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, the contents of mail, email, and text messages where the business is not the intended recipient, genetic data, biometric data used for unique identification, health information, and information concerning sex life or sexual orientation. bizz does not seek any of these categories, and the forms on www.bizz.ai are not designed to collect them.

In the ordinary course, bizz collects no sensitive personal information through www.bizz.ai. We ask for a name, a work email, a company, a phone number if you choose to give one, and a description of the project. There are two narrow exceptions. First, if a person volunteers sensitive details in a free text field, that text lands in our systems even though we did not ask for it, which is exactly why we ask people not to put sensitive information into our forms. Second, during a client engagement we may encounter sensitive categories inside client systems, in which case the client's documented instructions and the engagement agreement govern how that data is handled.

California residents have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform the services reasonably expected by an average consumer. bizz does not use or disclose sensitive personal information for the purpose of inferring characteristics about a person, and does not use it for advertising, profiling, or any purpose beyond the limited uses the statute permits without a right to limit. Because our use already falls within those permitted uses, we are not required to post a separate notice of the right to limit. You may still submit a limitation request through the channels in section nine and we will honor it.

Analytics, Advertising Technologies, and How to Opt Out

www.bizz.ai uses Google Analytics to understand traffic patterns and Vercel Analytics together with Vercel Speed Insights to measure page performance and identify slow or broken pages. These tools set or read cookies and similar identifiers and receive information such as your IP address, the pages you view, referring URLs, approximate location at the city or country level, and device and browser characteristics. bizz does not run advertising pixels, conversion trackers, or retargeting tags on the site, and does not maintain remarketing audiences. We do not use analytics data to build individual profiles or to make decisions that produce legal or similarly significant effects about any person.

We want to be candid about the legal characterization rather than hide behind a denial. Under the broadest reading of the CPRA, and under some state enforcement positions and private litigation theories, permitting a third party analytics vendor to receive identifiers from your browser can be argued to constitute a sale or a share, even where the business receives no money and enables no advertising features. bizz does not believe its configuration meets that standard, because our analytics vendors act under service provider or processor terms, advertising and data sharing features are disabled, and IP handling uses the anonymization the tools provide. Rather than argue the point with visitors, we offer a straightforward opt out and honor it.

An opt out of sale and sharing does not stop all processing of your information. We will still write server logs for security and to deliver the pages you request, still send transactional email you have asked for, still keep the records we are legally required to keep, still process personal data on behalf of clients under their instructions, and still retain contract and billing records for the periods described in section three. Opting out limits specific disclosures. It does not erase you from our systems. If you want your information removed, submit a deletion request rather than an opt out, and we will process it under section eight.

• Use the cookie preference control on www.bizz.ai to decline analytics cookies. Declining prevents the analytics scripts from loading in that browser.
• Send a Global Privacy Control signal. We treat a valid GPC signal as an opt out of sale and sharing for that browser, as described in section twelve.
• Install the Google Analytics opt out browser add on, which stops Google Analytics from collecting data on any site you visit.
• Block or delete cookies in your browser settings, or browse in a private window. Note that clearing cookies also clears the stored record of your opt out preference.
• Submit a request through the privacy request form on www.bizz.ai or email hello@bizz.ai, and we will apply the opt out to the records we hold about you rather than to a single browser.

Your Rights: Know, Delete, Correct, Opt Out, Limit, and Appeal

Depending on where you live, some or all of the rights below apply to you. California residents have the fullest set. Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws have a similar but not identical set, described in section twelve. As a matter of policy, bizz extends the core rights to know, delete, correct, and opt out to any individual who asks, regardless of state of residence, because maintaining separate service levels state by state would serve nobody well. Rights are exercised free of charge, subject to the verification standards and frequency limits the statutes allow.

Rights are not absolute, and honesty about the exceptions matters more than a generous sounding promise. We may decline to delete or restrict information where we need it to complete a transaction, provide a service you asked for, detect or prevent security incidents or fraud, exercise or defend legal claims, comply with a legal obligation such as tax and accounting record keeping, or use it internally in a lawful manner compatible with the context in which you provided it. If we decline in whole or in part, we will tell you which exception applies and what we did with the remainder of your request.

We may also decline a request we cannot verify, or a request that is manifestly unfounded, excessive, or repetitive, and where a state law permits a fee for such requests we will tell you the amount before doing any work rather than billing you afterwards. In practice we do not charge. For personal data we process on behalf of a client, we will pass your request to that client rather than acting unilaterally, because the client, not bizz, decides what happens to data in its own systems and may have retention obligations we cannot see from the outside.

• Right to know and access: the categories and specific pieces of personal information we collected, the sources, the purposes, and the categories of recipients, covering the twelve months before your request and, where our records permit, earlier periods.
• Right to delete: to ask us to delete personal information we collected from you, subject to the exceptions above.
• Right to correct: to ask us to correct inaccurate personal information, taking into account the nature of the information and the purpose of processing.
• Right to opt out of sale and sharing: bizz does not sell or share, and we record your request as a standing instruction in case that ever changes.
• Right to limit use of sensitive personal information to what is necessary to provide the services you requested.
• Right to data portability: to receive the personal information you provided in a portable and, where technically feasible, readily usable format.
• Right to non discrimination: we will not deny services, charge different prices, or provide a lower quality of service because you exercised a privacy right, and we run no financial incentive programs.
• Right to appeal a decision we make about your request, as described in section eleven.

How to Submit a Request, What to Include, and What Not to Include

There are two primary ways to submit a privacy rights request to bizz. The first is the privacy request form on www.bizz.ai, which is the fastest route because it captures everything we need in a single pass. The second is email to hello@bizz.ai with the words Privacy Request in the subject line. You may also reach us by telephone at +91 8799379425 during Indian business hours, though because our team is based in India and serves clients across many time zones, the form or email will almost always produce a faster and better documented response than a phone call.

Please do not include sensitive information in your request. We do not need, and we ask you not to send, passwords or account credentials, full payment card numbers or bank account details, Social Security numbers, Aadhaar numbers, passport or driver's license numbers or images of them, health information, or scans of government identity documents. If we ever need an additional data point to verify you, we will ask for the narrowest one that will do the job and will explain why we need it. If you send us sensitive information we did not request, we will use it only to process your request and will delete it once the request is closed.

Every request is logged. We record the date received, the channel it arrived through, the identifiers you supplied, the right claimed, the verification steps taken and their outcome, the decision and the reasoning behind it, the date of our response, and any appeal. We keep that record for twenty four months, which matches the record keeping period California requires for consumer requests, and we use it only to process the request, to demonstrate compliance, and to detect abuse. The request log is kept separate from our marketing systems, and submitting a request never adds you to any mailing list.

• The state or country you reside in, so we apply the correct law.
• Which right you are exercising: know or access, delete, correct, opt out of sale or sharing, limit sensitive information, portability, or appeal.
• Your full name and the email address or phone number you used with bizz, so we can locate your records.
• The company you were associated with, if you contacted us in a business capacity.
• Roughly when and how you interacted with bizz, for example a contact form submission, a newsletter signup, or a project engagement.
• For a correction request, the specific information that is wrong and what it should say instead.
• For an agent submitted request, written authorization signed by you, as described in section ten.
• A reply address you can access, since our response and any verification questions will go there.

Verification of Requests and Authorized Agents

Before we act on a request to know, delete, or correct, we must verify that the request comes from the person it concerns. The level of verification we apply is proportionate to the sensitivity of the information and the risk of harm from a wrongful disclosure. For a request about a newsletter subscription or a contact form submission, matching the email address against our records and confirming from that same address is usually sufficient. For a request that would reveal specific pieces of personal information, we will ask you to confirm two or three data points we already hold, such as the approximate date of your inquiry or the company name you used.

If we cannot verify you to a reasonable degree of certainty, we will say so and explain what would be needed. In that situation we may still be able to treat a request to know as a request for categories only, or to process an opt out, because opt out requests do not require verification under California law. We will never require you to create an account in order to make a request, and information you provide for verification is used for that purpose only and then deleted. Verification for a deletion request is held to a higher standard than for other requests, because deletion cannot be undone.

An authorized agent may submit a request on your behalf. The agent must provide written permission signed by you, or a valid power of attorney under applicable state law. Unless the agent holds a power of attorney, we may also contact you directly to confirm that you gave permission, verify your own identity, and confirm the scope of the authority granted. An agent that is a business should identify itself, state its relationship to you, and confirm that it will not use the information for any purpose other than fulfilling your request. We do not accept blanket agent authorizations that are not tied to an identified individual.

Response Timeframes, Appeals, and Denied Requests

We confirm receipt of a rights request within ten business days and tell you how we intend to process it. We respond substantively within forty five calendar days of receiving a verifiable request. Where the request is complex, or where we have received an unusual volume, we may extend once by a further forty five days, for a maximum of ninety days from receipt, and we will notify you of the extension and the reason before the first period expires. Opt out requests, including Global Privacy Control signals, are handled far faster: we act on them within fifteen business days and normally within a few days.

If we deny your request in whole or in part, our response will state the reason, identify the statutory exception we relied on, describe any portion of the request we did fulfill, and explain how to appeal. To appeal, reply to our response or write to hello@bizz.ai with the words Privacy Appeal in the subject line within sixty days of our decision. An appeal is reviewed by someone who was not responsible for the original decision. We respond to appeals in writing within forty five days and explain the reasoning behind the outcome. If we deny the appeal, we will tell you how to contact your state attorney general to lodge a complaint.

You may also complain to a regulator without appealing to us first. California residents may contact the California Privacy Protection Agency or the California Attorney General. Residents of other states may contact their state attorney general, which is the enforcement authority under each of the comprehensive state privacy laws currently in force. Nothing on this page limits your ability to do so or requires you to exhaust our process first. If a request is denied because we hold no personal information matching the identifiers you gave us, we will say that plainly rather than implying that something was deleted, because a clear no records answer is itself the accurate response.

Other State Privacy Laws, Global Privacy Control, and Universal Opt Out Signals

Comprehensive privacy laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and a growing list of other states give residents rights that closely track the California rights described above, with differences in wording, thresholds, and procedure. In general those laws grant a right to confirm and access, a right to correct, a right to delete, a right to a portable copy, and a right to opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects. Most also require an appeals mechanism. bizz applies a single process to all of them rather than offering a lesser experience based on your address.

Several of these laws require opt in consent before processing sensitive data, and several define a sale to include disclosure of personal data to a third party for any valuable consideration rather than money alone. bizz does not conduct targeted advertising, does not sell personal data under either the narrow or the broad definition, and does not engage in profiling that produces legal or similarly significant effects about any individual. We therefore have no such processing for you to opt out of, but we will still record and honor an opt out as a standing preference in case our practices change. Residents of any state may exercise the rights in section eight through the channels in section nine.

bizz honors the Global Privacy Control. When your browser or extension sends a valid GPC signal to www.bizz.ai, we treat it as a request to opt out of the sale and sharing of personal information and to disable non essential analytics for that browser. Because a GPC signal is transmitted by a browser rather than by a logged in account, the preference applies to that browser and device only, and it will be lost if you clear cookies or move to another browser or device. If you want an opt out applied to your records instead, send us a request and we will apply it to the identifiers we hold.

We do not require you to authenticate before a GPC signal is honored, and we do not treat the signal as consent to anything else. Other universal opt out mechanisms recognized by state regulators are handled the same way as GPC once they are recognized in the relevant state. If you believe a signal you sent was not honored, tell us at hello@bizz.ai and include the date, the browser or extension used, and the page you visited. We will investigate, correct our configuration if it is at fault, and tell you what we found.

Disclaimers, Limitation of Liability, Indemnification, Governing Terms, and Contact

This page is provided for informational purposes and is not legal advice. It describes the practices of bizz as of the last update shown on the page and does not create any contract, third party beneficiary right, or obligation beyond what applicable law and our signed agreements already require. To the fullest extent permitted by law, the information here is provided as is, without warranties of any kind, express or implied, including any implied warranty of accuracy, merchantability, or fitness for a particular purpose. Clients and prospects should not treat this page as a substitute for the agreement governing their engagement, and should have their own counsel review those documents.

To the maximum extent permitted by applicable law, bizz and its officers, employees, and contractors will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost data, or business interruption, arising out of or relating to this page or your use of the request channels it describes, even if bizz has been advised of the possibility of such damages. Nothing in this paragraph limits any right you hold under a state privacy statute, limits liability that cannot lawfully be limited, or reduces the obligations bizz owes a client under a signed agreement. Statutory rights survive this disclaimer in full.

You agree to indemnify and hold bizz harmless from claims, losses, and reasonable legal fees arising from a request you submit that is fraudulent, that impersonates another person, or that seeks personal information you have no right to receive. Any dispute arising out of this page that is not governed by a statutory enforcement mechanism or by a signed agreement between the parties will be governed by the laws of India, without regard to conflict of laws rules, and will be subject to the exclusive jurisdiction of the competent courts in India. This does not affect your right to complain to a regulator in your own state or country.

bizz may update this page as our practices, our vendors, or the law change. The last updated date shown on the page reflects the most recent revision, and material changes will be posted before they take effect. To exercise a right, ask a question, or report a concern, use the privacy request form on www.bizz.ai, email hello@bizz.ai, or call +91 8799379425. Written correspondence may be sent to the postal address published on the contact page of www.bizz.ai. We aim to acknowledge every privacy message within ten business days, including messages that turn out not to be formal rights requests.

• Privacy request form: the dedicated form published on www.bizz.ai.
• Email: hello@bizz.ai, using Privacy Request or Privacy Appeal in the subject line.
• Phone: +91 8799379425, during Indian business hours.
• Client engagements: direct data protection questions to your bizz engagement lead, and read the master services agreement and data processing addendum that govern the work.