Privacy Policy

Automated Decision-Making Notice (California CPRA 2026)

Important: bizbot uses automated algorithms to make decisions that may affect your service experience. Please read this before using our platform.

We use artificial intelligence and mathematical models to analyze your data and make predictions about your business. These predictions may influence:

• Churn Prediction: We estimate the likelihood you may cancel your subscription based on your login frequency, payment history, and plan type. If flagged as high-risk, you may automatically receive retention offers or check-in messages.
• Health Scoring: We calculate an overall "health score" combining your NPS feedback, feature usage, payment status, and support activity. This score may determine what onboarding, upsells, or support content you see.
• Engagement Classification: We categorize your account as high, medium, or low engagement. This affects the frequency and type of product recommendations you receive.

You have rights under California law:

• Right to Know: You can request an explanation of any automated decision and the data used to make it.
• Right to Human Review: You can request a human review of any automated decision affecting your service.
• Right to Opt Out: You can request that we stop using automated decision-making for your account. Opt out here.

Questions? Email privacy@bizbottech.com or call (833) 573-5855. This notice is required under California's Consumer Privacy Rights Act (CPRA). Continued use of bizbot after seeing this notice means you acknowledge this automated decision-making practice.

Overview

bizbot Technology, LLC ("bizbot," "we," "us," or "our") operates the website www.bizbottech.com and provides AI chatbot, voice agent, workflow automation, review management, and lead finder services to small businesses. This Privacy Policy explains what information we collect, why we collect it, how it is used, and your rights regarding your data.

By using our website or services, you agree to the practices described in this policy. If you have questions, contact us at hello@bizbottech.com.

Information We Collect

Information You Provide Directly

When you contact us, sign up for a trial, or become a client, we may collect:

• Name and business name
• Email address
• Phone number
• Business address and location
• Business type and industry
• Payment information (processed securely through our payment processor — we do not store card numbers)
• Any information you voluntarily share in forms, emails, or onboarding questionnaires

Information Collected Automatically

When you visit our website, we may collect:

• IP address and general geographic location
• Browser type and device information
• Pages visited, time spent, and referral source
• Clicks and interactions via analytics tools

Information from Your Customers

When we deploy AI systems on your behalf (chatbots, voice agents, or automation workflows), our systems may collect data from your end-customers, including their names, phone numbers, email addresses, and inquiry details. This data is processed for service delivery and is governed by your relationship with your own customers. You are responsible for obtaining appropriate consent from your customers as required by applicable law.

How We Use Your Information

We use the information we collect to:

• Deliver, configure, and maintain AI chatbot, voice agent, and automation services
• Process payments and manage subscriptions
• Send automated SMS and email messages on your behalf as part of your service package
• Respond to support requests and inquiries
• Send account updates, billing notices, and service-related communications
• Improve our platform, products, and service quality
• Comply with legal obligations

We do not use your information for targeted advertising, and we do not sell or rent your personal data to third parties for marketing purposes.

SMS and Email Automation

As part of our services, bizbot may send automated SMS messages and emails on behalf of your business to your customers. These communications are configured by you or on your behalf during onboarding.

By activating SMS or email automation services, you confirm that you have obtained the necessary consent from your customers to receive such communications, consistent with the Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, and any other applicable laws.

bizbot is not liable for SMS or email messages sent as a result of your service configuration. You remain responsible for ensuring your use of these features complies with applicable regulations.

Third-Party Services

We work with trusted third-party providers to deliver our services. These partners may receive certain data necessary to perform their functions:

Google

We use Google Analytics for website traffic analysis and Google services (including Google Business Profile integrations) as part of our review management offerings. Google's privacy practices are described at policies.google.com/privacy.

Communications Services

SMS delivery and AI voice agent services are processed through our communications infrastructure providers. Phone numbers, call data, and message content may be processed through these systems to deliver automated communications and voice interactions on your behalf.

Review Platforms

Our review management service may interface with review platforms such as Yelp to monitor and respond to reviews. Business information and review data may be exchanged with those platforms.

Payment Processing

Payment processing is handled by our secure payment processor. Your payment card information is entered directly into their secure environment and is never stored on bizbot's servers.

We contractually require our service providers to protect your data and use it only for the purposes for which it was shared.

Service Providers & Data Processors

bizbot uses the following service providers to process your personal information as part of our Services. Under California law (CCPA), these are "service providers" — meaning they process your data on our behalf and are contractually prohibited from selling or sharing your information for their own purposes.

What This Means for Your Data

All service providers listed above are contractually bound to:

• NOT sell your personal information under the California Consumer Privacy Act (CCPA)
• NOT share your data with third parties for their own marketing or business purposes
• Use your data only to provide the specific services we've engaged them for
• Protect your data with reasonable security measures
• Comply with CCPA and other applicable privacy laws

Cookies and Tracking

Our website uses cookies — small text files stored on your browser — to enable basic functionality, remember preferences, and analyze usage patterns. Types of cookies we use include:

• Essential cookies: Required for the site to function properly.
• Analytics cookies: Help us understand how visitors use our site (e.g., Google Analytics).
• Marketing cookies: May be used to track visits from advertising platforms (e.g., Google Ads, Meta Ads) for conversion measurement.

You can control cookie preferences through your browser settings. Disabling cookies may affect certain site features. We do not currently respond to "Do Not Track" signals from browsers.

Data Retention

We retain your personal and business information for as long as your account is active and for a period thereafter as necessary for business, legal, and compliance purposes. As a general policy:

• Active client records are retained for the duration of your service agreement.
• After account closure, data is retained for up to 2 years, then securely deleted or anonymized.
• Financial transaction records may be retained for up to 7 years as required by applicable tax and accounting regulations.
• Backups may retain data for up to 90 days beyond deletion requests.

Customer data collected by your AI systems (on behalf of your business) is subject to the same retention schedule unless you request earlier deletion.

See our full Data Retention Policy for state-specific schedules covering California (CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, and Iowa.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, including marketing communications.

To exercise any of these rights, contact us at hello@bizbottech.com. We will respond within 30 days of receiving your request. We may need to verify your identity before processing certain requests.

Data Security

We take reasonable and appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your information has been compromised, contact us immediately at hello@bizbottech.com.

California Consumer Privacy Rights (CCPA) — What You Can Do

If you are a California resident, California law gives you specific rights over your personal information. Here's what you can do and how to do it:

Your Rights at a Glance

• Right to Know: You can request what personal information we have collected about you, where it came from, how we use it, and who we share it with.
• Right to Delete: You can ask us to delete your personal information that we have collected from you, except in certain cases where we are required by law to keep it.
• Right to Opt-Out of "Sales" or "Sharing": While bizbot does not sell your personal information for money, we do not currently share your data with third parties for their own marketing purposes either. However, you have the right to opt out of any such practices should we ever offer them.
• Right to Non-Discrimination: We will not punish you, deny you services, charge you more, or give you lower quality service if you exercise your privacy rights. (We might offer you a discount for allowing us to use your data, but we won't penalize you for saying no.)
• Right to Correct: You can request that we correct inaccurate personal information about you.
• Right to Limit Use of Sensitive Personal Information: Under CPRA, you have the right to direct bizbot to limit its use and disclosure of your sensitive personal information to only what is necessary to perform the services you requested. To exercise this right, submit a privacy request and select "Limit Sensitive PI Use." Sensitive personal information we may hold includes: government ID numbers (if provided for verification), precise geolocation, and login credentials.
• Right to Appeal: If we deny one of your requests, you have the right to appeal our decision.

How to Submit a Request

To exercise any of these rights, please reach out to us using any of the following methods:

• Email: privacy@bizbottech.com with subject line "CCPA Request"
• Phone: (833) 573-5855 (mention "CCPA Request")
• Online Form: Submit a CCPA Request
• Mail: bizbot Technology, LLC (Attn: Privacy Officer) · 1741 Eastlake Parkway, Ste 102, PMB 485, Chula Vista, CA 91915-2032

We will verify your identity (to protect your privacy) and respond to your request within 45 days. If we need more time, we will notify you and explain why.

What Personal Information Does bizbot Collect?

To help you understand what we have about you, here are the categories of personal information we collect, in plain English:

1. Identifiers (Your Contact Information)

We collect your name, email address, phone number, business name, and business location so we can communicate with you, deliver services, and process payments.

• Examples: first name, last name, email, phone, company name, IP address, account username

2. Commercial Information (Your Business Activity)

We track information about the services you use, your subscription tier, how much you're paying, and your purchase history. This helps us understand your needs and offer the right plan for you.

• Examples: subscription type ($97/mo standalone, $67/mo add-on), MRR (monthly recurring revenue), payment history, failed payment attempts, plan change dates, trial duration, upgrade history

3. Internet Activity (How You Use Our Platform)

We log your usage patterns — what features you click, how often you log in, what API calls you make, and how you interact with our tools. This helps us fix bugs, improve features, and provide better support.

• Examples: pages visited, feature usage counts, API call frequency, last login timestamp, export formats used, button clicks, session duration

4. Inferences (What We Predict About Your Business)

Using your activity and payment data, we create mathematical predictions about your business to help you succeed:

• Churn Risk Score: We predict the likelihood you might cancel your subscription (based on your login activity, payment failures, and plan type). If we detect risk, we reach out with retention offers.
• Health Score: We estimate the overall health of your relationship with bizbot (combining NPS feedback, feature usage, payment status, and support requests). A healthy score means you're getting value.
• Engagement Tier: We categorize you as high-engagement, medium-engagement, or low-engagement so we can tailor onboarding and support.

5. Geolocation (Where You Are Based)

We collect your business address and general geographic location (city/state) for billing, support, and regional compliance purposes. We do not track your precise GPS location.

• Examples: billing address, business address, state/country for jurisdiction compliance

How We Use These Predictions (Automated Decision-Making)

Our algorithms — the rules we use to make predictions — can affect your experience with bizbot. For example:

• If our churn prediction algorithm flags you as "high risk," you may receive a retention email or special offer automatically.
• If our health score indicates low engagement, we might suggest additional training or features to help you succeed.
• If we predict you could benefit from upgrading your plan (high usage on a lower tier), we might surface upsell messaging to you.

These predictions are NOT perfect, and you always have the right to disagree. You can request a human review of any automated decision affecting you.

What If You Want to Opt Out of Algorithmic Profiling?

You have the right to opt out of our use of automated decision-making for churn prediction, health scoring, and expansion recommendations. If you opt out:

• We will stop using algorithms to predict your behavior.
• You will not receive automated retention offers or expansion emails based on our predictions.
• Your service will not change — you'll continue to have full access to bizbot.

Click here to opt out of algorithmic profiling

International Users & GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with data protection laws, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation:

• Right of Access: Obtain confirmation of whether we process your data and request a copy.
• Right to Rectification: Correct inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
• Right to Restrict Processing: Request restriction of processing in certain circumstances.
• Right to Object: You may object at any time to processing of your data for direct marketing purposes. To opt out of any marketing communication, click the unsubscribe link in any email or contact us at hello@bizbottech.com. We will action opt-out requests within 5 business days.

Legal Basis for Processing

We process personal data on the following legal bases:

• Contract performance — when delivering services you have purchased.
• Legitimate interests (Article 6(1)(f)) — for operating and improving our business, including B2B direct marketing to business owners and decision-makers at professional email addresses. We have conducted a Legitimate Interests Assessment (LIA) for this activity. You may request a copy by emailing hello@bizbottech.com with subject "LIA Request".
• Consent — where specifically requested (e.g. newsletter sign-up, SMS opt-in).
• Legal obligation — where processing is required to comply with applicable law.

B2B Marketing — Legitimate Interests

Where we send unsolicited B2B marketing emails to EU/UK business contacts, we rely on the legitimate interests legal basis. This applies only to professional email addresses of business owners and decision-makers. We do not send marketing to personal email addresses under this basis. Every marketing email includes a one-click unsubscribe link. Upon objection, your details are added to our permanent suppression list. We do not send cold outreach to business contacts in Germany, Austria, or Denmark without prior consent.

Business Contact Data We Collect for Outreach

To identify businesses that may benefit from our services, we collect and process limited business contact information from the following sources: public business directories and mapping services (e.g. Google Business listings — business name, address, phone number, website, and public review statistics) and professional contact enrichment services (e.g. Hunter.io — publicly listed professional email addresses and job titles). We use this information solely to send a small number of relevant B2B introductions, subject to the safeguards above (one-click unsubscribe, permanent suppression on request, no personal email addresses). We currently limit this outreach to businesses in the United States and Canada. California residents may exercise their CCPA rights over this data — including deletion and opt-out — by emailing privacy@bizbottech.com or using our CCPA request form; suppression requests are honored permanently.

Data Transfers

bizbot Technology LLC is based in the United States. If you are located in the EEA or UK, your data may be transferred to and processed in the US. We rely on the EU-US Data Privacy Framework (DPF) where applicable, and Standard Contractual Clauses (SCCs) for transfers to processors not covered by DPF. Our primary email processor, Brevo, is based in the EU (France) and does not require a transfer mechanism.

Data Retention

Upon account cancellation, your personal data is deleted within 30 days, except where retention is required for legal or compliance purposes. Suppression list entries (unsubscribed contacts) are retained permanently to honor your opt-out preference — this is a compliance obligation, not marketing processing.

Supervisory Authority

If you are in the EEA or UK and unsatisfied with our response to a privacy request, you have the right to lodge a complaint with your local supervisory authority. EU residents: find your authority at edpb.europa.eu. UK residents: ico.org.uk.

Data Requests

To exercise any of the above rights, contact us at hello@bizbottech.com with subject "GDPR Request — [Right]". We will respond within 30 days (or 72 hours for data breach notifications).

Children's Privacy

Our services are intended for businesses and adults aged 18 and older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us personal data, we will delete it promptly. If you believe we have collected such information, please contact us.

VitalCoach — Health & Fitness Data

VitalCoach (vitalcoach.bizbottech.com) is a software product for certified personal trainers and fitness coaches. The following product-specific provisions supplement — and, where conflict exists, control over — the general Privacy Policy for VitalCoach subscribers.

Not a HIPAA-Covered Entity

BizBot Technology, LLC is not a HIPAA-covered entity and is not a HIPAA business associate in connection with VitalCoach. Subscribers must not upload, enter, store, or transmit Protected Health Information (PHI) through VitalCoach, including medical diagnoses, treatment records, prescription information, or any information received from a covered entity under a HIPAA authorization. If you are a healthcare provider subject to HIPAA and need a Business Associate Agreement (BAA) to use VitalCoach in your practice, do not use the service — VitalCoach does not offer BAAs.

What We Treat as General Fitness Data (Not PHI)

In the normal course of a trainer–client relationship, VitalCoach processes general fitness information entered by subscribers about their clients, including: name, email/phone (for client identification), fitness goals, training experience level, available equipment, self-reported injuries or physical limitations, body-composition goals, and session history. This data is treated as general fitness/wellness information, not PHI or "health information" under HIPAA.

Sensitive Personal Information (California)

Certain client-provided fitness inputs (e.g., injury notes, health conditions voluntarily shared by end clients) may constitute "Sensitive Personal Information" under the CCPA/CPRA. Subscribers are the businesses (controllers) with respect to their clients' data; BizBot processes this data solely to provide the VitalCoach service on the subscriber's instructions. Subscribers are responsible for obtaining any consents required from their clients.

AI-Generated Health and Nutrition Content

Workout programs, nutrition drip messages, and milestone celebrations produced by VitalCoach are AI-generated advisory content, not medical advice. All AI output is labeled "AI-generated — review before sending" (CA SB 942, effective Aug 1, 2026). The certified trainer is the human-in-the-loop responsible for reviewing, editing, and approving all content before it reaches any end client. VitalCoach is not a substitute for a licensed physician, registered dietitian, or healthcare provider.

Retention and Deletion

VitalCoach user and client records are retained for the life of the subscription plus 30 days post-cancellation for recovery purposes, after which they are anonymized or deleted. Subscribers may export their data (CSV, PDF) at any time via the VitalCoach dashboard. Deletion requests can be made at legal@bizbottech.com.

End Clients of Subscribers

If you are an end client whose trainer uses VitalCoach and you wish to exercise privacy rights (access, correction, deletion), contact your trainer directly as the controller of your data. BizBot will assist subscribers in fulfilling verified requests.

TierUp — Direct-Sales Builder Data

TierUp (tierup.bizbottech.com) is a software product for independent direct-sales distributors (network marketing builders). The following product-specific provisions supplement — and, where conflict exists, control over — the general Privacy Policy for TierUp subscribers.

BizBot Technology LLC is not affiliated with, endorsed by, or an agent of any direct-sales company, MLM, or party plan. TierUp is a productivity tool sold directly to individual distributors. We do not transmit data to upline, downline, or corporate parent organizations. Subscribers are solely responsible for compliance with their company's policies and procedures, applicable distributor agreements, and the FTC Business Opportunity Rule (16 CFR Part 437).

TierUp processes general contact-management and pipeline data entered by subscribers about their prospects and team members, including: name, email/phone, recruitment stage, follow-up notes, and self-reported activity history. Subscribers are the businesses (controllers) with respect to their prospects' and team members' data; BizBot processes this data solely to provide the TierUp service on the subscriber's instructions.

TierUp's compliance script-checker scans subscriber-drafted messaging for income claims, lifestyle implications, and other patterns commonly flagged under the FTC Business Opportunity Rule and state direct-seller statutes. The script-checker is AI-generated advisory output, not legal advice. All flags are surfaced as suggestions for the subscriber to review; final compliance responsibility remains with the subscriber. BizBot makes no representation that any message the script-checker approves will satisfy any particular company's policies, any state regulator, or the FTC.

TierUp does not generate income reports, does not display testimonials, and does not project earnings. Any such content entered by a subscriber is the subscriber's content and is not endorsed by BizBot Technology LLC.

TierUp user and contact records are retained for the life of the subscription plus 30 days post-cancellation for recovery purposes, after which they are anonymized or deleted. Subscribers may export their data (CSV) at any time via the TierUp dashboard. Deletion requests can be made at legal@bizbottech.com.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we may notify you by email or by a prominent notice on our website. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

EU AI Act — AI System Transparency (Article 52)

bizbot Technology, LLC operates AI systems that interact with or affect users and businesses. In compliance with the EU Artificial Intelligence Act (Regulation (EU) 2024/1689, effective August 2, 2026), we disclose the following:

Our AI Systems

System	Risk Category	Transparency Measure
bizbot Chat (Orbit)	Limited Risk	AI badge displayed; never denies being AI
bizbot Voice	Limited Risk	Callers informed of AI at call start
bizbot Stars	Limited Risk	AI-generated label on all review responses; human approval required
bizbot Scout	Limited Risk	Scores businesses (not individuals); advisory only
bizbot Flow	Minimal Risk	Human-configured automation; no individual profiling

A complete machine-readable AI system registry is available at: /api/ai-system-registry

AI Model Provider

bizbot uses Anthropic's Claude models via API. We do not train our own AI models. Anthropic operates its own EU AI Act compliance program. bizbot does not use AI for decisions regarding credit, employment, healthcare, housing, or other Annex III high-risk categories.

No Automated Individual Decisions

bizbot does not make fully automated decisions that produce legal or similarly significant effects on individuals. All AI outputs affecting individual service accounts are subject to human review. For questions about AI systems or to request human review of any automated output, contact us at legal@bizbottech.com.

Contact Us

For privacy-related questions, requests, or concerns, please reach us at:

• Email: hello@bizbottech.com
• Phone: (833) 573-5855
• Mail: bizbot Technology, LLC (EIN 42-1842381) · 1741 Eastlake Parkway, Ste 102, PMB 485, Chula Vista, CA 91915-2032