Privacy Policy

1. Who we are

BizPack AI (the website at bizpackai.com and the app at app.bizpackai.com) is operated by Forge Cloudify ("we", "us", "our"). For the personal data described in this policy about our own customers and website visitors, we are thedata controller.

Questions or requests about your personal data can be sent to [email protected].

2. Data you store about your own customers

BizPack AI lets you keep records about your clients, suppliers, staff and sales — for example names, contact details, invoices and payment history. For that data you are the controller and we act as your processor: we store and process it only to provide the service to you and on your instructions, and we do not use it for our own purposes or sell it. You are responsible for having a lawful basis to record it and for answering requests from those people; we will help you do so where we reasonably can.

3. What we collect

• Account details — your name, email address, phone number (optional), profile photo (optional) and password. Passwords are stored only as a one-way hash; we cannot read them.
• Business details — your business name, logo, address, country, currency, tax registration and the bank or payment details you choose to print on your invoices.
• Content you create — quotations, invoices, products, stock, expenses, receipts, projects, appointments and the other records you enter, plus files you upload such as receipts and product images.
• Subscription and billing — your plan, billing period and a customer reference from our payment provider. Card details are entered directly with Stripe and never reach our servers.
• Technical data — IP address, browser and device type, and server logs created when you use the service, used for security, debugging and preventing abuse.
• Messages to us — anything you send when you contact us for support.

4. How we use it, and our legal basis

We do not sell your personal data and we do not use it to profile you for advertising.

5. AI features

When you use an AI feature — for example rewriting a message or summarising your activity — the text you provide and a short summary of relevant business context are sent to an AI provider (OpenAI or Anthropic) to generate the result. They process it on our behalf to return the response and do not use it to train their models under our agreements with them. AI features only run when you ask them to, and their output is a suggestion for you to review.

6. Who we share data with

We use carefully chosen service providers, who may only process data on our instructions:

• Hosting and infrastructure — cloud servers and a content-delivery and security network (Cloudflare) that run the website, app and database.
• File storage — Amazon Web Services (S3) for uploaded files such as receipts, logos and product images.
• Payments — Stripe, for subscription payments; Google Play, if you subscribe through our Android app.
• Email delivery — our email provider, to deliver account and invoice emails.
• AI providers — OpenAI or Anthropic, only when you use an AI feature (see section 5).

We may also disclose data where the law requires it, to protect the rights and safety of our users or the public, or to a buyer or successor if our business is reorganised or sold — in which case this policy will continue to apply.

7. International transfers

Some of these providers store or process data outside the UK, including in the United States. Where they do, we rely on adequacy regulations or on safeguards approved under UK law, such as the International Data Transfer Addendum to the EU Standard Contractual Clauses.

8. How long we keep it

• Account and business data — for as long as your account is open.
• After you close your account — we delete or anonymise your data within 90 days, except billing records we must keep for tax and accounting purposes (generally six years) and backups, which are overwritten on a rolling basis.
• Server and security logs — for a limited period, typically no more than 12 months.

9. Security

Data is encrypted in transit (HTTPS), each business's records are kept separate from every other business's, and access inside a business is controlled by the roles you assign to your team. Uploaded files go straight to secure storage through short-lived signed links. No system is perfectly secure, but we work to protect your data and will notify you and the regulator of a breach where the law requires it.

10. Cookies and local storage

This website does not use advertising or analytics cookies. The BizPack AI app stores your sign-in session, language and an offline copy of your recent data in your browser's local storage so that it stays signed in and keeps working when the connection drops. This is strictly necessary for the service and is cleared when you sign out or clear your browser data.

11. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, including closing your account;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive your data in a portable format; and
• withdraw consent, where we rely on consent.

To exercise any of these, email [email protected] from the address on your account. We will respond within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to resolve it first.

12. Children

BizPack AI is a business tool for adults. It is not directed at anyone under 18 and we do not knowingly collect their personal data.

13. Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last revised, and we will email account holders about significant changes before they take effect.

14. Contact

Forge Cloudify — [email protected]