Privacy Policy

1. Introduction

NeuroFinancial Inc. ("bizzOS," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal and business information. This Privacy Policy describes how we collect, use, share, and protect information through the bizzOS platform and related services.

2. Information We Collect

2.1 Information You Provide

• Account registration information (name, email, password)
• Business profile information (company name, industry, goals)
• CRM and contact data you import or create in the platform
• Billing and payment information
• Communication preferences and feedback

2.2 Information Collected Automatically

• Usage patterns and platform activity
• Device information and IP addresses
• Cookies and similar tracking technologies
• Log data (pages visited, features used, session duration)

2.3 Information from Third Parties

• Business data from authorized integrations (Google Calendar, Google Contacts, Stripe, etc.)
• Identity verification from trusted providers
• Analytics from service providers
• Instagram: if you connect an Instagram professional account, we receive profile information, posts and post insights from Instagram, as described in Section 4

3. Google API Services Data

3.1 Google Calendar Data

• When you connect your Google Calendar to bizzOS, we access your calendar event data (event titles, dates, times, locations, attendees, and event descriptions) in read-only mode
• We do not modify, delete, or create events on your Google Calendar

3.2 How We Use Google Calendar Data

• Display your calendar events within bizzOS for scheduling and organizational purposes
• Sync calendar data to provide a unified view of your schedule alongside platform bookings and events
• We do not use Google Calendar data for advertising, profiling, or any purpose unrelated to the calendar functionality you requested

3.3 Storage and Protection

• Google Calendar data is stored securely in our cloud infrastructure with encryption at rest and in transit
• Calendar data is associated with your user account and organization and is not shared with other users or third parties
• Synced calendar data is refreshed periodically and retained only while your Google Calendar connection is active

3.4 Revoking Access

• You may disconnect your Google Calendar at any time through your account settings
• Upon disconnection, we revoke our access token and delete all synced Google Calendar data from our systems
• You may also revoke access directly through your Google Account at https://myaccount.google.com/permissions

3.5 Google Contacts Data

• When you click "Import from Google" and grant permission, we access your Google Contacts and your Google "Other contacts" (contacts Google automatically saves based on your email activity) in read-only mode
• We only read your contacts' names, email addresses, phone numbers, and company or organization information
• We do not create, edit, or delete anything in your Google Contacts

3.6 How We Use Google Contacts Data

• The import is a one-time action that you start; we do not continuously sync or monitor your Google Contacts in the background
• Before anything is saved, you review every contact we found and choose which ones to bring into your bizzOS CRM
• Any contact you do not select is discarded immediately and is not stored or kept by us
• We do not use Google Contacts data for advertising, to train AI or machine learning models, or for any purpose unrelated to the import you requested
• We do not share Google Contacts data with third parties

3.7 Storage and Protection

• Contacts you choose to keep are stored securely as part of your CRM in our cloud infrastructure, with encryption at rest and in transit
• Imported contact data is associated with your user account and organization and is not shared with other users or third parties

3.8 Revoking Access

• You may disconnect your Google account from bizzOS at any time through your account settings, which revokes our access token
• You may also revoke access directly through your Google Account at https://myaccount.google.com/permissions

3.9 Compliance with Google API Services User Data Policy

Our use and transfer of information received from Google APIs — including Google Calendar and Google Contacts data — adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Instagram Integration

If you are an owner or admin of an organization on bizzOS, you can connect your organization's Instagram professional account (Business or Creator) to bizzOS. We use Meta's "Business Login for Instagram" for this. The connection is optional. Nothing from Instagram is collected unless you connect an account.

4.1 Who Can Connect

Only an organization's owners and admins can connect or disconnect an Instagram account. Any member of that organization can view the connected account's information and posts inside bizzOS.

4.2 Information We Receive From Instagram

When you connect, with your permission, we receive:

• Profile information: username, name, account type, profile picture, follower, following and media counts, and Instagram account identifiers.
• Posts: up to your 100 most recent posts when you connect, and new posts after that, checked daily. For each post: images, carousel images, the cover image of videos and Reels (we do not receive the full video), caption, post date, post type, permalink, and like and comment counts.
• Post insights: reach, views, likes, comments, saves, shares, reposts, total interactions, profile visits and profile activity, follows, and Reel watch time.
• An access token, which lets bizzOS keep the connection working. We refresh it automatically.

4.3 How We Use and Store It

• We show your Instagram profile, posts and insights inside your organization's bizzOS account, so you can view and use your own content and performance information in one place.
• Post images are saved to your organization's Uploads library, in a folder named "Instagram".
• Captions, counts and insights are stored in our systems and linked to your organization.
• Your access token is stored securely on our servers. It is never shown in your browser.
• We do not sell Instagram information. We do not use it for advertising. We do not share it with other organizations. It is visible only to members of the organization that connected the account.

4.4 Sharing

We do not share information received from Instagram with third parties, other than the service providers that host and operate bizzOS on our behalf (see Section 6, Information Sharing, and Section 7, Data Security), and where required by law. Your information is not visible to other bizzOS organizations.

4.5 Retention

• We keep your Instagram information while your account stays connected.
• When you disconnect, syncing stops and your access token is deleted.
• Posts and images already imported stay in your organization's Uploads library and bizzOS account until you delete them there, unless you also submit a deletion request as described in 4.7.
• When a deletion request is completed, we delete the access token, the connection, and all posts, images, thumbnails and insights imported from that Instagram account.

4.6 How to Disconnect

You can disconnect at any time. In bizzOS:

• Sign in to bizzOS as an owner or admin of your organization.
• Go to Content Generation, then Brand Settings, then Connected Accounts.
• Select Disconnect next to Instagram.

Disconnecting stops all syncing and deletes our access token.

You can also remove bizzOS from inside Instagram: go to Settings, then Apps and websites, find bizzOS, and remove it.

4.7 How to Request Deletion of Your Instagram Information

You can ask us to delete everything we imported from your Instagram account. There are two ways.

Option A. Through Instagram (automatic):

• Open Instagram and go to Settings, then Apps and websites.
• Find bizzOS and remove it.
• Choose the option to delete the information bizzOS has received, and confirm.
• Meta notifies bizzOS of your request automatically.
• We then delete the access token, the connection, and all posts, images, thumbnails and insights we imported from that Instagram account.
• You receive a confirmation code and a link to a status page where you can check your request.

Option B. By email:

• Email privacy@bizzos.io from the address on your bizzOS account.
• Put "Instagram data deletion" in the subject line.
• Include your Instagram username and the name of your organization in bizzOS.
• We will confirm by reply once the deletion is complete.

Deletion covers the information imported from your Instagram account. It does not remove other information in your bizzOS account. To delete your wider account information, see Section 8 (Your Rights & Choices), or contact privacy@bizzos.io.

4.8 Meta's Terms

Your use of the Instagram connection is also subject to Instagram's and Meta's terms and policies. Information Instagram holds about you is governed by their privacy policy, not ours.

5. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the bizzOS platform and Services
• Personalize your experience and surface relevant insights
• Process transactions and manage billing
• Communicate with you about your account and Services
• Ensure security and prevent fraud
• Comply with legal obligations
• Conduct research and product development

We do not sell your personal information to third parties.

6. Information Sharing

We do not sell, rent, or trade your personal information. We may share information:

• With your consent or at your direction
• With service providers who assist in our operations (payment processors, cloud infrastructure, email delivery, AI providers)
• With white-label partners operating on your behalf, with your consent
• To comply with legal requirements or protect the rights of NeuroFinancial Inc. and our users
• In connection with a business transfer, merger, or acquisition

Information received from your connected Instagram account is not sold, is not used for advertising, and is not shared with other organizations. See Section 4.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• 256-bit SSL encryption for data in transit
• Secure data storage with encryption at rest via Google Cloud (Firebase/Firestore)
• Regular security audits and assessments
• Strict access controls and authentication requirements

While we strive to protect your information, no system is completely secure. We encourage you to use strong passwords and protect your account credentials.

8. Your Rights & Choices

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete data
• Request deletion of your account and associated data
• Opt out of marketing communications at any time
• Disconnect third-party integrations at any time
• Export your data in a portable format

To disconnect an Instagram account or request deletion of what we imported from it, follow the steps in Section 4.

To exercise any of these rights, contact us at privacy@bizzos.io.

9. Data Retention

We retain your information for as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce agreements. Financial and transaction data is retained in accordance with applicable regulations, typically seven years. Upon account termination, non-legally-required data is deleted or anonymized within a reasonable period. Retention of information from a connected Instagram account is described in Section 4.5.

10. Children's Privacy

bizzOS is designed for use by adults and business operators. We do not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

12. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the platform. Your continued use of bizzOS after changes indicates acceptance of the updated policy.

14. SMS & Text Messaging

When you opt in to our text messaging program, we collect and process your mobile phone number and related messaging data (such as the content of messages you send to us, timestamps, and delivery status) in order to operate the program. We use this information to:

• Send the messages described in our Terms of Service, including verification codes, appointment and booking notifications, task and calendar reminders, account and service notifications, and conversational support
• Authenticate your identity and protect the security of your account
• Respond to your two-way messages and provide customer support
• Maintain delivery records and improve the reliability of the service

We use a third-party messaging provider (Twilio) to deliver text messages. Your mobile number and message content are shared with this provider solely to transmit messages on our behalf.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

You may opt out of receiving text messages at any time by replying STOP to any message. To request help, reply HELP to any message or contact us at privacy@bizzos.io.

15. Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

NeuroFinancial Inc.
Email: privacy@bizzos.io