BizBot Technology, LLC ("BizBot," "we," "us") retains personal data only for as long as necessary to fulfill the stated purpose of collection, comply with applicable law, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymize it using industry-standard methods.
This policy applies to all personal data processed by BizBot on behalf of its clients and their end customers, across all BizBot products and verticals (BizBot, Horizon Talent Agency, AgentEdge, SiteLine, WattWorks, CutRoom, and future verticals).
This policy is published in compliance with the ten US state privacy laws listed in Section 3. Residents of those states have additional rights described below.
The following table sets out our standard retention periods by data type. Retention periods begin on the date of last active use unless otherwise noted.
| Data Type | Retention Period | Legal Basis | Deletion Method |
|---|---|---|---|
| Business contact data (leads) |
2 years from date of collection, or immediately upon opt-out request — whichever is sooner | Legitimate interests (B2B marketing); consent where required | Hard delete from Google Sheets + database; permanent entry added to suppression list |
| Client account data |
Duration of active subscription + 90 days post-cancellation | Contractual necessity; legal obligation | Automated purge at day 90; anonymized aggregate metrics retained indefinitely |
| Call & voice recordings |
30 days from date of call | Legitimate interests (quality assurance); consent (call disclosure) | Automated deletion via Retell AI retention settings; confirmed by API purge log |
| Chat conversation logs |
90 days from date of conversation | Legitimate interests (service improvement, dispute resolution) | Automated purge job (weekly sweep of records older than 90 days) |
| Payment records |
7 years from transaction date | Legal obligation (IRS Rev. Proc. 98-25; IRC § 6001; state tax codes) | Retained in Stripe; access restricted to Finance/Legal after year 3 |
| Support tickets |
3 years from ticket close date | Legitimate interests (legal defense, service improvement) | Archived to cold storage after 1 year; hard deleted at 3-year mark |
| Analytics & usage logs |
12 months total; anonymized after 30 days | Legitimate interests (product analytics, security monitoring) | PII stripped from logs at 30 days; anonymized aggregate data retained 12 months; raw logs deleted at 30 days |
| Marketing email engagement |
3 years from last engagement, or until unsubscribe | Consent (email opt-in); legitimate interests (deliverability) | Unsubscribed contacts moved to permanent suppression list; data purged at 3-year mark |
| Suppression / opt-out list |
Indefinitely (permanent) | Legal obligation (CAN-SPAM; CCPA/CPRA; state opt-out laws) | Never deleted — required to honor opt-out preference |
| Employee & contractor records |
7 years from end of engagement (IRS); 4 years California (Labor Code § 1174) | Legal obligation | Secure file destruction; digital records hard deleted after retention period |
Residents of the following states have enforceable rights regarding their personal data under applicable state law. BizBot honors all of these rights regardless of your state of residence, subject to applicable exemptions.
| State (Law) | Effective | Right to Delete | Right to Correct | Data Portability | Opt-Out of Sale / Sharing |
|---|---|---|---|---|---|
| California (CPRA) | Jan 2023 | Yes | Yes | Yes | Yes |
| Virginia (VCDPA) | Jan 2023 | Yes | Yes | Yes | Yes |
| Colorado (CPA) | Jul 2023 | Yes | Yes | Yes | Yes |
| Connecticut (CTDPA) | Jul 2023 | Yes | Yes | Yes | Yes |
| Utah (UCPA) | Dec 2023 | Yes | No | Yes | Yes |
| Texas (TDPSA) | Jul 2024 | Yes | Yes | Yes | Yes |
| Oregon (OCPA) | Jul 2024 | Yes | Yes | Yes | Yes |
| Montana (MCDPA) | Oct 2024 | Yes | Yes | Yes | Yes |
| Delaware (DPDPA) | Jan 2025 | Yes | Yes | Yes | Yes |
| Iowa (ICDPA) | Jan 2025 | Yes | No | Yes | Yes |
Notes: Utah and Iowa do not provide a statutory right to correct inaccurate personal data, though BizBot will honor correction requests as a matter of policy. "Sale" as used above means the disclosure of personal data for monetary or other valuable consideration, not including service provider relationships. BizBot does not sell personal data.
To request deletion of your personal data, contact us at:
We may retain data notwithstanding a deletion request where necessary to:
BizBot operates scheduled automated purge jobs to enforce the retention schedule without manual intervention:
Purge job logs are retained for 12 months as evidence of compliance. Results are available to authorized personnel and, upon request, to regulators.
BizBot shares personal data with the following sub-processors who process data on our behalf. Each sub-processor is bound by data processing agreements requiring them to maintain appropriate retention and deletion standards.
| Sub-processor | Role | Data Categories | Retention Policy |
|---|---|---|---|
| Anthropic | AI inference (Claude models) | Conversation inputs/outputs submitted to Claude API | anthropic.com/legal/privacy — API inputs not used for training by default; zero data retention available |
| Brevo | Email marketing & automation | Email address, name, engagement data | brevo.com/legal/privacypolicy |
| Stripe | Payment processing | Payment card data, billing address, transaction history | stripe.com/privacy — financial records retained per applicable law (typically 7 years) |
| Retell AI | Voice AI & call management | Call recordings, transcripts, caller data | retellai.com/privacy-policy — configurable; BizBot sets 30-day max retention |
| Vercel | Cloud hosting & edge infrastructure | Server logs, IP addresses, request metadata | vercel.com/legal/privacy-policy — logs retained per Vercel's standard schedule |
| Google (Workspace / Sheets) | Internal data storage & operations | Client data stored in operational Sheets | workspace.google.com/terms/dpa_terms.html |
| Twilio | SMS & telephony | Phone numbers, message content, call metadata | twilio.com/en-us/legal/privacy |
For questions about this policy, data deletion requests, or to exercise any state privacy right:
We will update this policy as new state privacy laws take effect or our practices change. Material changes will be posted at this URL with an updated version number and date. We recommend checking this page periodically.