Privacy Policy

Scope and Application of This Policy

bizz is a software development agency that builds custom software, web and mobile applications, artificial intelligence and machine learning systems, cloud and DevOps infrastructure, data and analytics platforms, QA and testing programs, UI and UX design work, legacy modernization projects, and extended engineering teams for business clients. This Privacy Policy explains how bizz collects, uses, discloses, transfers, and retains personal information in connection with the website at www.bizz.ai and with the commercial relationships that grow out of it. It is written for a business to business audience and applies wherever you are located, including the European Economic Area, the United Kingdom, Switzerland, the United States, India, and elsewhere.

This policy applies to four broad groups of people. Visitors, meaning anyone who browses www.bizz.ai without identifying themselves. Prospects, meaning individuals who submit the contact form, the start a project intake form, or the newsletter subscription form, or who otherwise reach bizz by email, telephone, or a scheduled call. Client personnel, meaning the employees, contractors, and authorized representatives of the businesses that engage bizz. And candidates, meaning individuals who apply for a role at bizz or who are proposed for a staff augmentation placement with a client. Where a group is treated differently, the relevant section says so expressly.

This policy does not govern personal information that bizz processes on behalf of a client inside that client's own systems, environments, or product during a paid engagement. That processing is described in Section 7 and is governed by the master services agreement and the data processing agreement signed with the client, which take precedence over this policy in the event of a conflict. This policy is informational and is not legal advice. It does not create contractual rights beyond those granted by applicable law. Clients and prospective clients should have their own counsel review any agreement with bizz, including its data protection terms, before signing.

Information You Provide Directly to bizz

bizz collects the information you choose to give it. The contact form on www.bizz.ai asks for your name, your work email address, your company name, an optional telephone number, and the content of your message, and it records the submission timestamp and the page you submitted it from. The start a project intake form asks for your name, work email address, company name and website, your role or job title, the services you are interested in, an indicative budget range, a target timeline, your country or time zone, your preferred contact method, and a free text description of the project you have in mind.

The newsletter subscription form collects your email address and, optionally, your first name. bizz records the date, time, source page, and the IP address used at the moment of subscription so that it can evidence a valid opt in and honor a later withdrawal. If you write to hello@bizz.ai, telephone or message +91 8799379425, or join a scheduled discovery or scoping call, bizz retains the correspondence, the meeting notes taken by its team, calendar and scheduling details, and any documents you attach, such as briefs, requirement lists, wireframes, architecture diagrams, or sample data files. Calls are recorded only where every participant has been told in advance and has agreed.

Once an engagement begins, bizz collects the business contact and administrative details needed to run it. This typically includes the names, job titles, work email addresses, and telephone numbers of your project stakeholders and approvers, the legal name and registered address of the contracting entity, tax registration numbers, purchase order references, invoice contacts, and remittance information. Where an engagement requires access to your systems, bizz also holds the account names and access credentials issued to its personnel by you, which are managed under Section 12 and returned or revoked at the end of the engagement.

Please do not submit special category data, government identifiers, health information, payment card numbers, account passwords, or the personal information of third parties through the public forms on www.bizz.ai. The forms are not designed for sensitive material. If you need to share something confidential or regulated in order to scope a project, contact bizz first so that a secure transfer channel, a mutual non disclosure agreement, and, where required, a data processing agreement can be put in place before anything is sent.

Information Collected Automatically and From Third Party Sources

When you visit www.bizz.ai, some information is collected automatically by the website and by the infrastructure that serves it. This includes your IP address, which may be truncated or shortened before storage, your browser type and version, your operating system and device category, screen and viewport dimensions, language and locale settings, the referring URL, the pages and articles you view, the links and buttons you interact with, scroll depth on longer pages, the date and time of each request, the HTTP response code, and an approximate location inferred from your IP address at the country or city level.

bizz uses Google Analytics to understand how visitors find and use the site. Google Analytics sets cookies or similar identifiers that assign a pseudonymous identifier to your browser and reports aggregated metrics such as sessions, page views, traffic sources, campaign parameters, engagement time, and conversion events such as a completed contact form. bizz has enabled IP anonymization where that control is available and has not enabled advertising features, remarketing audiences, demographic reporting, or the linking of analytics data to advertising identifiers. Google processes the data it receives as an independent service provider under its own published terms and privacy documentation.

bizz also uses Vercel Analytics and Vercel Speed Insights, provided by the platform that hosts www.bizz.ai. Vercel Analytics reports aggregated page view, route, and referrer statistics without setting advertising cookies and without building profiles that follow you across other websites. Vercel Speed Insights collects performance measurements such as Core Web Vitals, page load and rendering timings, and error rates, which are attached to a page or route rather than to you as an individual. Separately, the hosting platform and content delivery network retain standard server and edge logs, including request paths, response times, user agent strings, and error traces, for operational and security purposes.

In limited circumstances bizz receives business contact information from sources other than you. These include publicly available professional and company sources such as a company website or a public professional profile, referrals and introductions from existing clients and partners, event and conference organizers where you have consented to lead sharing, and recruitment platforms or staffing partners in the case of candidates. Information obtained this way is limited to business contact details and professional background, is used only for the purposes described in Section 5, and is subject to the same rights, retention limits, and security controls as information you supply yourself.

Cookies and Similar Technologies

Cookies are small text files placed on your device by a website. Similar technologies include local storage, session storage, pixels, and software development kits that perform a comparable function. www.bizz.ai uses a deliberately small set of these technologies. bizz does not operate an advertising network, does not run retargeting or behavioral advertising pixels on the site, and does not permit third parties to use the site to build cross context advertising profiles about you. Where consent is required, cookies that are not strictly necessary are set only after you have given it through the consent banner.

You can control these technologies in several ways. If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, a consent banner appears on your first visit and lets you accept or reject the optional categories, and the link in the site footer reopens it whenever you want to change or withdraw that choice. Every browser also lets you block or delete cookies and clear local storage through its settings, and Google publishes a browser add on that opts you out of Google Analytics across all sites. Blocking strictly necessary cookies may prevent forms from submitting correctly, and clearing local storage will reset saved preferences such as your theme choice, but the site will otherwise continue to work. The categories in use are listed below.

• Strictly necessary. Used for security, request routing and load balancing, spam and abuse prevention on the forms, form submission integrity, and remembering the cookie choices you have already made. These cannot be switched off through the banner because the site cannot function properly without them.
• Analytics and performance. Google Analytics, Vercel Analytics, and Vercel Speed Insights, used to count visits, understand which content and services attract interest, and detect slow or broken pages. These are optional and are governed by consent where local law requires it.
• Functionality and preference. Local storage entries that remember interface choices such as light or dark theme, a dismissed banner, or a previously expanded section, so that the site behaves consistently on your next visit.
• Advertising and targeting. None. bizz does not set advertising, retargeting, conversion tracking, or social media tracking cookies on www.bizz.ai.
• Third party embeds. Some blog posts or case studies may embed content such as a video player or a code sandbox, which can set its own cookies when you interact with it. These embeds are identified where used.

How bizz Uses Personal Information

bizz uses personal information for a defined set of business purposes and does not repurpose it for unrelated activities without telling you first. In broad terms, information is used to answer the questions people ask, to scope and deliver software engineering work, to run the commercial and administrative side of that work, to keep the website secure and useful, to hire and staff teams, and to meet legal and accounting obligations. Analytics data is used in aggregate to make product and content decisions, not to make judgments about individual visitors.

A few limits are worth stating plainly. bizz does not use website analytics to score, profile, or make decisions about individual visitors. It does not add someone to the newsletter merely because they submitted the contact form or the intake form, since those are separate actions requiring a separate opt in. It does not use client data or candidate data for marketing. And it does not use personal information received in one engagement to benefit a different client. With those limits in mind, the specific purposes for which personal information is used are as follows.

• Responding to enquiries submitted through the contact form, the start a project intake form, email, or telephone, and holding follow up conversations about your requirements.
• Qualifying and scoping opportunities, preparing estimates, proposals, statements of work, and commercial terms, and negotiating agreements.
• Delivering contracted services, including custom software development, web and mobile application work, AI and machine learning projects, cloud and DevOps engineering, data and analytics builds, QA and testing, UI and UX design, legacy modernization, and staff augmentation.
• Managing the client relationship, including project communication, status reporting, change control, escalation handling, support, and satisfaction reviews.
• Billing, invoicing, payment reconciliation, credit control, expense management, and financial reporting.
• Sending the newsletter and other business communications about services, engineering practice, case studies, and events, subject to your consent or a lawful opt out mechanism.
• Measuring, maintaining, and improving www.bizz.ai, including performance monitoring, content planning, and diagnosing errors.
• Protecting bizz, its clients, and its site visitors against fraud, abuse, spam, unauthorized access, and other security risks.
• Recruiting, assessing, and onboarding employees and contractors, and proposing engineers for client placements.
• Complying with tax, corporate, employment, export control, sanctions screening, and other legal obligations, and establishing, exercising, or defending legal claims.

Legal Bases for Processing Under the GDPR and UK GDPR

Where the EU General Data Protection Regulation or the UK GDPR applies to bizz as a controller, bizz relies on one of the legal bases in Article 6 for each processing purpose. bizz does not rely on consent where a more appropriate basis exists, and it does not rely on legitimate interests where the processing would override your rights and freedoms. Where bizz relies on legitimate interests, it has carried out a balancing assessment weighing the business need against the impact on you, and it will provide a summary of that assessment on request to hello@bizz.ai.

Two practical points follow from this. Where processing depends on your consent, such as the newsletter or optional analytics cookies, you may withdraw it at any time without giving a reason and without affecting the lawfulness of what happened before you withdrew. Where processing depends on legitimate interests, you have the right to object, and bizz will stop unless it can show compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is needed for legal claims. Objections to direct marketing are always honored without exception. The mapping between purpose and legal basis is set out below.

• Responding to enquiries and preparing proposals: performance of a contract or steps taken at your request before entering into a contract, and legitimate interests in responding to business enquiries addressed to bizz.
• Delivering contracted services and managing the engagement: performance of a contract with the client, or legitimate interests where the individual is an employee of the contracting entity rather than a party to the contract.
• Billing, collections, and financial administration: performance of a contract and compliance with a legal obligation under applicable tax and companies legislation.
• Newsletter and marketing emails: consent, which you may withdraw at any time, or legitimate interests in business to business marketing to existing clients about similar services where local law permits a soft opt in.
• Analytics cookies and performance measurement: consent where required by the ePrivacy rules of your jurisdiction, and otherwise legitimate interests in understanding and improving website performance.
• Strictly necessary cookies, logging, and security monitoring: legitimate interests in keeping the website, its forms, and bizz systems secure and available.
• Recruitment and candidate assessment: steps taken at your request before entering into an employment or contractor relationship, legitimate interests in evaluating suitability, and consent for retention in a talent pool after a decision is made.
• Legal compliance, record keeping, sanctions and conflict checks, and audit: compliance with a legal obligation and legitimate interests in governance and risk management.
• Establishing, exercising, or defending legal claims, and corporate transactions such as a merger or financing: legitimate interests in protecting the business and its lawful position.

Client Data During Engagements, and the Controller and Processor Distinction

bizz plays two different roles. For its own website, marketing, prospect, newsletter, recruitment, supplier, and internal business records, bizz acts as a controller and decides why and how the information is processed. For personal information contained in a client's systems, databases, repositories, test environments, support tickets, or product telemetry that bizz touches while performing an engagement, bizz acts as a processor or service provider on behalf of the client, who remains the controller and is responsible for the lawfulness of the underlying processing and for the notices and consents given to its own users.

When acting as a processor, bizz processes client personal data only on the documented instructions of the client, including the statement of work and any written change requests. bizz does not use client data to train general purpose models, to build its own products, or for its own marketing or analytics. Personnel with access are bound by confidentiality obligations that survive the engagement. Access is granted on a least privilege basis, limited to named individuals, logged where the client's systems support logging, and revoked promptly when a person leaves the project or the project ends.

Engagements that involve personal data are governed by a separate data processing agreement, normally executed alongside the master services agreement, which sets out the subject matter, duration, nature and purpose of processing, the categories of data and data subjects, the approved subprocessors and the notice period for changes, the security measures, the audit and assistance obligations, the breach notification timelines, and the transfer safeguards described in Section 10. Where the client is subject to sector specific rules, additional terms may be negotiated. Nothing in this policy replaces or amends a signed data processing agreement.

bizz asks clients to minimize what its team can see. Wherever a project allows it, bizz works with anonymized, pseudonymized, masked, or synthetic data in development and test environments, and requests production access only where a defect or migration genuinely requires it, for the shortest period necessary. At the end of an engagement, bizz returns or deletes client personal data in accordance with the data processing agreement, and clients should have counsel review those terms before the work begins.

Job Applicants and Candidate Data

If you apply for a role at bizz, or are put forward by a staffing partner, bizz collects the information needed to evaluate your application. This typically includes your name, contact details, curriculum vitae or resume, employment history, education and certifications, technical skills, portfolio or public code repository links, work samples and take home assessment submissions, interview notes and scorecards, availability and notice period, salary or rate expectations, location and work authorization status, and the outcome of reference checks where you have given the referees' details. Background verification is carried out only where lawful, disclosed to you in advance, and proportionate to the role.

Candidate information is used to assess suitability, to communicate with you about the process, to prepare an offer, to plan onboarding, and, for staff augmentation roles, to present an anonymized or agreed profile of your skills and experience to a prospective client. bizz does not use candidate information for marketing. Assessment decisions are made by human reviewers. Where software is used to organize applications or to run automated tests, the output informs a human decision and is never the sole basis for rejecting an application, as explained in Section 16.

If you are unsuccessful, bizz retains your application for six months from the date of the decision so that it can respond to questions and defend any complaint about the process, and then deletes it. If you consent, bizz keeps your details in a talent pool for twelve months so that it can contact you about future openings, and you may withdraw that consent at any time by writing to hello@bizz.ai. If you are hired, your application becomes part of your personnel record and is retained under the employment and statutory retention rules that apply to bizz as an employer.

Sharing, Disclosure, and Subprocessors

bizz does not sell personal information, does not rent or trade contact lists, and does not share personal information with third parties for cross context behavioral advertising. Information is disclosed only to the categories of recipients listed below, only for the purposes described in this policy, and only under written terms that require confidentiality, security, and processing limited to bizz instructions. Where a recipient acts as a processor or subprocessor, bizz remains accountable for the work it does on bizz behalf and reviews its security posture before engagement and periodically afterwards.

Before a new provider is engaged, bizz assesses what data it would receive, whether that data is genuinely necessary, the provider's security posture and certifications, its transfer arrangements, and its subprocessing chain. Providers that process personal data on bizz behalf sign a data processing agreement containing confidentiality, security, transfer, audit, deletion, and breach notification obligations. Where bizz acts as a processor for a client, new subprocessors are added only in line with the notice and objection procedure in the applicable data processing agreement. The categories of recipients are as follows.

• Cloud, hosting, and infrastructure providers that run www.bizz.ai, its content delivery network, and internal engineering environments, including the platform that supplies Vercel Analytics and Speed Insights.
• Analytics providers, currently Google for Google Analytics, which receive pseudonymous website usage data as described in Section 3.
• Business software providers that bizz uses to operate, including email and transactional email delivery, customer relationship management, calendaring and video conferencing, ticketing and project management, source control, document storage, and electronic signature services.
• Payment processors, banks, and accounting platforms that process invoices and remittances.
• Professional advisers, including external lawyers, accountants, auditors, tax advisers, and insurers, who are bound by professional duties of confidentiality.
• Clients, where bizz presents a candidate profile for a staff augmentation placement, and staffing partners who introduce candidates, in each case limited to what is necessary.
• Courts, regulators, law enforcement, and other public authorities, where disclosure is required by valid legal process or is necessary to establish, exercise, or defend legal claims. bizz reviews such demands and challenges those that appear overbroad or unlawful.
• An acquirer, investor, or successor entity in connection with a merger, acquisition, reorganization, financing, or sale of assets, subject to confidentiality undertakings and to this policy continuing to apply to the transferred information.
• Any other recipient you direct or authorize, including a subprocessor approved by a client under a data processing agreement.

International Transfers of Personal Data

bizz operates from India and serves clients in the United States, the European Economic Area, the United Kingdom, and other regions. As a result, personal information you provide will be accessed by bizz personnel in India, and may be processed in other countries where its service providers operate data centers, including the United States and the European Union. Some of these countries have not received an adequacy decision from the European Commission or the United Kingdom government, which means their legal protections for personal data are not formally recognized as equivalent to those of the EEA or the UK.

Where bizz transfers personal data out of the EEA, the United Kingdom, or Switzerland, it puts appropriate safeguards in place. For transfers to bizz in India and to its subprocessors, bizz relies on the European Commission Standard Contractual Clauses adopted in 2021, together with the United Kingdom International Data Transfer Addendum or the International Data Transfer Agreement for UK data, and the Swiss adaptations issued by the Federal Data Protection and Information Commissioner where Swiss data is involved. bizz carries out a transfer impact assessment for material transfers and reviews it when circumstances change.

Alongside those contractual safeguards, bizz applies supplementary technical and organizational measures, including encryption of data in transit, access controls and multi factor authentication, minimization of the data made available to offshore teams, use of masked or synthetic data in development environments wherever feasible, and a commitment to notify the client and, where permitted by law, the affected individuals if a government authority demands access to data processed on their behalf. Copies of the transfer mechanisms bizz relies on, with commercially sensitive terms redacted, are available on request to hello@bizz.ai.

Data Retention

bizz keeps personal information only for as long as it is needed for the purpose it was collected for, or for as long as a legal, tax, accounting, or limitation period requires. Retention periods are applied by category rather than record by record, and information that has passed its period is deleted or irreversibly anonymized during scheduled housekeeping reviews carried out at least twice a year. Backups roll off on their own cycle, so a deleted record may persist in encrypted backup media for a short additional period before it is overwritten.

In setting these periods bizz weighs the amount and sensitivity of the information, the potential harm from unauthorized use or disclosure, the purpose it was collected for and whether that purpose can be achieved with less, the length of the commercial relationship, and the statutory limitation and record keeping periods that apply in India and in the client's jurisdiction. Where information is still useful for trend reporting after its period expires, it is aggregated or anonymized so that it no longer identifies anyone, rather than kept in identifiable form. A period may be extended where a legal hold applies because litigation, an audit, or a regulatory inquiry is reasonably anticipated. The periods bizz applies are as follows.

• Website enquiry and intake form submissions that do not lead to an engagement: 24 months from the last substantive contact, then deleted.
• Newsletter subscriptions: until you unsubscribe or your consent is withdrawn. Your email address is then held on a suppression list for as long as bizz continues to send newsletters, so that your opt out is honored, and for no other purpose.
• Client engagement records, contracts, statements of work, invoices, and correspondence: for the duration of the engagement plus seven years, to satisfy tax, accounting, corporate, and limitation requirements.
• Personal data processed on behalf of a client as a processor: returned or deleted within sixty days of the end of the engagement, unless the data processing agreement specifies otherwise or law requires retention.
• Google Analytics event and user level data: retained for fourteen months, after which only aggregated reporting remains.
• Vercel Analytics and Speed Insights measurements: retained in aggregated form for no more than twelve months.
• Server, edge, and application logs: 90 days, extended only where an incident investigation requires it.
• Security incident and breach records: seven years from closure of the incident.
• Unsuccessful job applications: six months from the decision, or twelve months where you have consented to the talent pool.
• Consent and preference records, including cookie choices and marketing opt ins: for the duration of the processing plus three years, as evidence of a lawful basis.

How bizz Protects Information

bizz maintains organizational and technical measures designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. Security is treated as an engineering discipline rather than a document, and controls are reviewed as the business, its tooling, and its client obligations change. bizz aligns its practices with widely recognized frameworks for information security and secure development, but it does not claim to hold any particular certification or attestation unless that claim is made expressly and in writing in a signed agreement with a client.

No method of transmission over the internet and no method of electronic storage is perfectly secure, and bizz will not pretend otherwise. Determined attackers, compromised third party software, and human error remain real risks for every organization. What bizz commits to is a serious, documented, and continuously reviewed security program, prompt investigation of anything that looks wrong, and honest and timely notification to affected clients and individuals when an incident occurs. You also play a part: use unique credentials, keep the devices you use to correspond with bizz patched, and do not send sensitive material through the public website forms. The measures currently in place include the following.

• Role based access control and least privilege provisioning, with access granted per project, reviewed periodically, and revoked on role change or departure through a documented offboarding checklist.
• Multi factor authentication on email, source control, cloud consoles, and administrative tooling, with password manager use and unique credentials required across the team.
• Encryption of data in transit using current TLS versions for the website, internal tooling, and client connections, and encryption at rest for laptops, managed databases, and cloud storage where the platform supports it.
• Secrets management that keeps credentials, keys, and tokens out of source code, with automated scanning for accidental exposure in repositories.
• Secure development practices including peer code review, dependency and vulnerability scanning, environment separation, and use of masked or synthetic data in non production environments.
• Logging and monitoring of administrative activity and infrastructure events, with alerting on anomalous access.
• Confidentiality agreements for all personnel and contractors, security and privacy awareness training, and screening appropriate to the role.
• A documented incident response process covering triage, containment, forensics, remediation, and notification, including notification to affected controllers without undue delay and, where bizz acts as a controller, to the competent supervisory authority within 72 hours where the incident is notifiable.

Your Rights Under the GDPR and UK GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, or if the GDPR or UK GDPR otherwise applies to processing carried out by bizz as a controller, you have the rights set out below. These rights are not absolute. Some depend on the legal basis being relied upon, and some may be limited where they would adversely affect the rights of others, where bizz must retain information to comply with a legal obligation, or where the information is needed to establish, exercise, or defend a legal claim. bizz will explain the reason whenever it declines a request in whole or in part.

Exercising a right costs nothing, and bizz will not treat you differently in a commercial discussion because you asked. Requests are handled by the same contact point described in Section 15, which also explains how bizz verifies who you are and how long it takes to reply. If bizz holds only pseudonymous website data that it cannot link to you without additional information, it may ask you to supply that information, and it may decline the request if you cannot, since it will not create new identifying records simply to service a request. Your rights include the following.

• Access. To be told whether bizz processes information about you and, if so, to receive a copy of it together with information about the purposes, recipients, retention, and sources.
• Rectification. To have inaccurate information corrected and incomplete information completed.
• Erasure. To have information deleted where it is no longer necessary, where you withdraw consent and no other basis applies, or where it has been processed unlawfully.
• Restriction. To have processing limited while accuracy is being verified, while an objection is being assessed, or where you need the information preserved for a legal claim.
• Portability. To receive information you provided to bizz, where processing is based on consent or contract and carried out by automated means, in a structured, commonly used, machine readable format, and to have it transmitted to another controller where technically feasible.
• Objection. To object at any time to processing based on legitimate interests, including profiling, and to object absolutely to processing for direct marketing purposes.
• Withdrawal of consent. To withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Complaint. To lodge a complaint with your local supervisory authority, such as the Information Commissioner's Office in the United Kingdom or the data protection authority of your EU member state, and to seek a judicial remedy.

Your Rights Under the CCPA and CPRA

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights, and those rights extend to business to business contacts such as the client and prospect representatives whose details bizz holds. In the preceding twelve months bizz has collected the following statutory categories of personal information: identifiers such as name, work email address, telephone number, IP address, and cookie identifiers; commercial information such as services enquired about, budget range, and engagement history; internet or other electronic network activity such as page views and interactions with www.bizz.ai; professional or employment related information such as job title, employer, and candidate employment history; coarse geolocation inferred from IP address; and, where all participants consented, recordings of meetings.

bizz does not sell personal information and has not sold personal information in the preceding twelve months. bizz does not share personal information for cross context behavioral advertising as that term is defined by the CPRA, and it does not use or disclose sensitive personal information for purposes that would trigger the right to limit its use. bizz does not knowingly sell or share the personal information of consumers under sixteen years of age. Because bizz does not sell or share, a do not sell or share my personal information link is not offered, and opt out preference signals are treated as described in Section 16.

Subject to verification, California residents may exercise the rights listed below. bizz will not discriminate against you for exercising them: it will not deny you services, charge a different price, provide a different level of quality, or retaliate in any commercial relationship because you made a request. Residents of other United States states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, and Texas, may exercise the equivalent rights those laws provide, including the right to appeal a refused request.

• Right to know the categories and specific pieces of personal information collected, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom it is disclosed.
• Right to delete personal information collected from you, subject to statutory exceptions such as completing a transaction, security, legal compliance, and internal uses reasonably aligned with your expectations.
• Right to correct inaccurate personal information that bizz maintains about you.
• Right to opt out of the sale or sharing of personal information. bizz does not engage in either, so there is nothing to opt out of, and bizz will update this policy before that ever changes.
• Right to limit the use and disclosure of sensitive personal information. bizz does not use sensitive personal information for purposes beyond those permitted without a limitation right.
• Right to non discrimination for exercising any of these rights, and the right to designate an authorized agent to act on your behalf.
• Right to appeal, where your state law provides one, if bizz declines to act on a request.

How to Exercise Your Rights, Verification, and Response Times

To exercise any right described in Sections 13 and 14, write to hello@bizz.ai with the subject line Privacy Request, or telephone +91 8799379425 and ask to be directed to the privacy contact. Please tell bizz which right you want to exercise, the email address or other identifier you used when dealing with bizz, the approximate dates or context of the interaction, and the country or state you are resident in, so that the correct law can be applied. Requests are free of charge, although bizz may charge a reasonable fee or decline to act where a request is manifestly unfounded, repetitive, or excessive, and it will say so in writing.

Before acting, bizz verifies that the request comes from the person it concerns or from someone properly authorized. Verification is usually done by matching two or more data points already held, such as the email address used to contact bizz, the company name, and the details of a prior enquiry or engagement, and by confirming the request from the email address on file. For requests to delete or to receive specific pieces of information, a higher degree of certainty is applied. bizz will not collect new sensitive information solely to verify you, and any information supplied for verification is used only for that purpose and then discarded.

An authorized agent may submit a request on your behalf if they provide written permission signed by you, or a valid power of attorney, and bizz may still contact you directly to confirm that you authorized the request and to verify your identity. Where a client asks bizz to assist with a request from one of its own users, bizz will refer the request to that client, who is the controller, and will support the client as required by the data processing agreement.

bizz responds to GDPR and UK GDPR requests within one month of receipt, extendable by two further months for complex or numerous requests, with notice of the extension and the reason given within the first month. Requests under United States state privacy laws are answered within 45 days, extendable once by a further 45 days where reasonably necessary, again with notice. Appeals under state laws that provide them are decided within 45 days. Requests to unsubscribe from the newsletter are actioned within 5 business days, and usually immediately through the unsubscribe link in every email.

Do Not Track, Global Privacy Control, and Automated Decision Making

There is still no common industry or legal standard for how websites should respond to Do Not Track browser signals, and different browsers implement them inconsistently. For that reason www.bizz.ai does not currently alter its behavior in response to a Do Not Track header. bizz will revisit this position if a recognized standard emerges. In the meantime, the cookie controls described in Section 4 give you a direct and effective way to switch off analytics, and they are honored regardless of any other signal your browser sends.

bizz recognizes the Global Privacy Control and similar opt out preference signals sent by a browser or extension. Because bizz does not sell personal information and does not share it for cross context behavioral advertising, such a signal has nothing to disable in that respect. Where technically feasible, bizz treats a received opt out preference signal as an instruction to disable non essential analytics cookies for that browser as well, which is broader than the law requires. Because the signal is stored per browser and per device, you will need to send it from each browser you use.

bizz does not make decisions about you that are based solely on automated processing and that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 of the GDPR. Lead qualification, project scoping, pricing, hiring, and placement decisions are all made by people. Software may sort, rank, or flag information to help those people work efficiently, and bizz uses AI assisted engineering tools in its delivery work under human review, but a human being remains responsible for the outcome and you can ask for the reasoning behind any decision that affects you.

Children's Privacy

www.bizz.ai and the services bizz provides are directed at businesses and business professionals. They are not intended for children, and bizz does not knowingly collect personal information from anyone under sixteen years of age. The website has no features designed to appeal to children, no accounts for individuals, and no content aimed at a young audience. bizz does not knowingly sell or share the personal information of anyone under sixteen, and as stated in Section 14 it does not sell or share personal information at all.

If bizz becomes aware that it has collected personal information from a child under sixteen without appropriate parental consent, it will delete that information from its active systems within 30 days and instruct any relevant service provider to do the same. If you are a parent or guardian and believe that a child has provided information to bizz through the contact form, the intake form, or the newsletter, write to hello@bizz.ai and the matter will be handled promptly and without charge.

Where bizz processes personal data belonging to a client's end users as a processor, and those end users may include minors, responsibility for age verification, parental consent, and any applicable children's privacy law rests with the client as controller. bizz will follow the client's documented instructions and any specific terms agreed in the data processing agreement, and it encourages clients whose products reach minors to have counsel review those terms carefully before an engagement begins.

Third Party Links and Independent Services

www.bizz.ai contains links to websites and services that bizz does not control, including client and case study websites, technology vendor documentation, open source projects, social media profiles, event registration pages, job boards, and scheduling or video conferencing tools used to arrange calls. Following such a link takes you to a destination governed by that operator's own privacy policy and terms. bizz does not control, and is not responsible for, the content, security practices, cookies, or data handling of those third parties, and inclusion of a link is not an endorsement of their privacy practices.

Before providing personal information to any linked site or embedded service, review its privacy notice and cookie settings. If you contact bizz through a third party channel such as a social platform, a marketplace, or a partner referral form, that platform will process your information under its own terms in addition to any processing described here. bizz only receives what the platform passes on, and it applies this policy to that information from the point of receipt.

Client environments are also independent for these purposes. When bizz personnel work inside a client's cloud tenancy, repository, ticketing system, or product, the client's own policies, monitoring, and logging apply to that environment, and the client determines what is collected there. Questions about processing inside a client environment should be raised with that client, and bizz will support the client in answering them to the extent the data processing agreement requires.

Disclaimers, Limitation of Liability, Indemnity, and Dispute Resolution

This policy is provided for information and transparency. It is not legal advice, it is not a substitute for advice from your own counsel, and it does not form part of any contract between you and bizz unless a signed agreement incorporates it expressly. www.bizz.ai and its content, including blog posts, case studies, and technical material, are provided on an as is and as available basis without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non infringement, to the fullest extent permitted by applicable law.

To the maximum extent permitted by law, bizz and its officers, employees, and contractors will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business opportunity, arising out of or in connection with your use of www.bizz.ai or with information you choose to submit through it. Nothing in this section limits or excludes liability that cannot lawfully be limited or excluded, including liability for fraud, willful misconduct, death or personal injury caused by negligence, or a data subject's statutory remedies under applicable data protection law. Liability arising out of a paid engagement is governed exclusively by the limitation and exclusion provisions of the signed master services agreement.

If you submit information through www.bizz.ai, you confirm that you are entitled to do so, that the information is accurate, and that you have any authority or consent needed to share personal information about other people, such as colleagues you name in a project brief. You agree to indemnify and hold bizz harmless against third party claims, penalties, and reasonable legal costs arising from your submission of information in breach of that confirmation, from unlawful content you transmit, or from misuse of the website, except to the extent the claim arises from bizz own negligence or breach of law.

If you have a concern about privacy, raise it first with bizz at hello@bizz.ai so that it can be resolved directly, and bizz will engage in good faith for at least 30 days. Except where mandatory local law provides otherwise, this policy and any dispute about it are governed by the laws of India, and the competent courts of India will have jurisdiction. This does not deprive you of the protection of mandatory provisions of the law of your country of residence, of the right to bring proceedings where your applicable data protection law permits, or of the right to complain to your supervisory authority.

Changes to This Policy and How to Contact bizz

bizz reviews this policy at least annually and updates it whenever its services, tooling, service providers, or legal obligations change. The version in force is always the one published at www.bizz.ai, and the last updated date at the top of the page tells you when it changed. Minor edits, such as clarifications of wording or the addition of a service provider within an existing category, take effect when posted. For changes that materially affect your rights or expand how bizz uses personal information, bizz will post a prominent notice on the website and, where it holds your email address, notify newsletter subscribers and active client contacts at least 30 days before the change takes effect.

Where a change requires consent under applicable law, bizz will obtain that consent before applying the change to information already collected, rather than relying on continued use of the website. Previous versions of this policy are archived and a copy can be requested at any time. If you object to a change, you may exercise the rights in Sections 13 and 14, including unsubscribing from the newsletter or asking for your enquiry record to be deleted, and doing so will not affect any live commercial discussion or engagement.

For any privacy question, request, or complaint, contact bizz by email at hello@bizz.ai, by telephone at +91 8799379425, or through the contact form at www.bizz.ai. bizz acknowledges privacy correspondence within 5 business days and then responds within the statutory timeframes set out in Section 15. If bizz is required to designate a representative under Article 27 of the GDPR or UK GDPR for a particular activity, details of that representative are available on request. If you are not satisfied with the response, you may complain to your local supervisory authority or data protection regulator, and bizz would appreciate the chance to address the issue first.