39 lines
4.4 KiB
Markdown
39 lines
4.4 KiB
Markdown
# Privacy Policy
|
|
URL: https://bizl.com/privacy
|
|
Extracted: 2026-08-09
|
|
|
|
## Core Messaging / Positioning
|
|
- Operates "an AI-powered local visibility platform that helps local businesses get found in ChatGPT, Gemini, Perplexity, Google, and other AI search engines."
|
|
- Application scope: all visitors to bizl.com, users of free tools, and subscribers to paid services.
|
|
- Hardline promise: "We do not sell your personal data. Ever."
|
|
- No advertising tracking: "We do not use advertising cookies, retargeting pixels, or third-party tracking cookies for ad networks. We do not serve ads on bizl.com and do not share browsing data with ad networks."
|
|
|
|
## Key Claims & Stats
|
|
- Data collected: name/email; business name, website URL, business address; phone; payment info (card processed by Stripe — "we do not store card numbers"); intake form responses (category, target keywords, competitors, service area); communications.
|
|
- Free tools named: AI Visibility Scanner, Schema Generator, Citation Audit Preview, Competitor Gap Preview — email collected to deliver results, may be used for follow-up "You can opt out ... using the unsubscribe link."
|
|
- Business data processed on behalf: "handling data about your business, not about you as an individual" — name/address/phone/website content, GBP data, citations, schema, competitor info. Not shared with other clients; not used beyond service delivery.
|
|
- **"We do not use your personal data for automated decision-making or profiling that has legal or significant effects on you."**
|
|
- Sub-processor list declared (third-party services) but the actual list is not populated in the scrape.
|
|
- Security claims: HTTPS/TLS 1.2+, AES-256 at rest, hashed+salted passwords, JWT auth with token expiration, role-based access control, regular security reviews, no storage of card data (Stripe).
|
|
- Rights/compliance: 30-day response for general privacy requests; CCPA/CPRA (45-day response, categories disclosed); GDPR/UK GDPR legal bases (contract, legitimate interests, legal obligation, consent); children's data (<18 deletion); international transfers (EU-US Data Privacy Framework + SCCs); California: no sale/sharing for cross-context behavioral advertising.
|
|
- Flag (evidence quality): security measures are strong-sounding but **unsupported assertions → Tier 3**; the sub-processor list and cookie-type list are header-only (not populated). No retention/holding periods stated numerically (holds are qualitative).
|
|
|
|
## Offer / Pricing Details (if applicable)
|
|
- Not on this page (legal doc). References paid services and free tools.
|
|
|
|
## Process / How It Works
|
|
- Privacy-facing disclosure of how the platform treats personal vs business data, cookies, retention, security, and user rights. Free-tool email capture clearly disclosed ("may use it to follow up"; opt-out available).
|
|
- White-label/agency data visibility disclosed: "If you are using bizl.com as an end-client of a white-label agency partner, your data may be visible to that agency partner."
|
|
|
|
## Notable Strengths or Patterns
|
|
- Clear "we don't sell data, ever" and "no ads / no ad cookies" privacy stances — deliberate trust signals.
|
|
- Explicit separation of personal data vs business data processed (a subtle differentiator for a B2B done-for-you provider).
|
|
- Concrete security detail (TLS 1.2+, AES-256, JWT, RBAC) reads professionally.
|
|
- CCPA/CPRA and GDPR coverage present (structured compliance).
|
|
|
|
## Notes for Digital Operations Partner
|
|
- **Evidence quality / honesty**: Security/privacy assurances are categorical and largely **unverifiable (Tier 3)** here. DOP can differentiate by publishing verified compliance artifacts (SOC/pen-test summaries, processor list) where claims are made.
|
|
- **Human supervision vs black-box**: Notable — the platform explicitly disclaims automated decision-making with significant effects; still, execution is done-for-you. DOP's human-supervised + agent-assisted model makes human accountability explicit and should be matched in privacy/clarity tone.
|
|
- **PoC-style entry**: Discloses free-tool email capture + follow-up — the free-scan→paid funnel is codified in the privacy policy. DOP can pair its Cold Audit with clear disclosure of what measured data is retained.
|
|
- **Silent Customer Loss**: N/A directly; policy reveals the data model behind the loss-detection service (business data, competitor intelligence) — relevant to how DOP would frame its own data practices.
|
|
<!-- structured: 4000 chars, flags: 1 --> |