BuyerCopy / Biz Max
Privacy policy
Effective date: [[TODO: approved effective date]]
1. Who operates BuyerCopy
Biz Max operates BuyerCopy. Think Basis builds and runs the product’s technology for Biz Max. This policy describes how information is handled when you visit the site or use the service.
Legal operator: [[TODO: full Biz Max legal entity name]]
Address: [[TODO: legal entity address]]
Privacy contact: [[TODO: privacy contact email]]
2. Information we handle
- Account information: sign-in details and identifiers needed to create and manage your account.
- Billing information: subscription status, payment records and credit purchases. Stripe handles payment processing.
- Content: your messages, pasted copy, page URLs, captured page content and generated answers.
- Service and security information: technical information needed to operate the service and investigate abuse. Conversation content, pasted copy and fetched page content are excluded from application logs, analytics and error reports.
3. How information is used
We use information to provide Copy Fix and Website Review, save your conversations, manage sign-in and billing, provide support and protect the service from abuse. Your copy and conversations are not used to train AI models. BuyerCopy’s AI providers do not train on submitted content.
[[TODO: confirm applicable legal bases, technical data fields, cookie inventory and any consent requirements before launch]]
4. Service providers
These providers process information needed for their part of the service:
- Anthropic processes submitted content to generate answers.
- TypeSafe screens messages and page text for abuse. It does not train on them and keeps them for as long as it needs to provide its service.
- WorkOS handles sign-in.
- Stripe handles subscriptions, payments and top-ups.
- Firecrawl and Cloudflare capture pages submitted for Website Review. Cloudflare also hosts the service.
- Zipflow, a Think Basis automation service, passes sign-up, purchase and account-alert details to Biz Max's email, Slack and customer-management tools.
Think Basis has access as needed to build, operate and support BuyerCopy for Biz Max. Flagged-message records are available only to restricted reviewers at Biz Max and Think Basis. Account alerts link to the record rather than including the flagged content.
[[TODO: approve complete provider list, provider retention terms, processing locations, contractual safeguards and international transfer disclosures]]
5. Retention and deletion
BuyerCopy saves conversations while your subscription is active and for 90 days after it ends, then deletes them. You can delete any conversation at any time. Deleting a conversation removes BuyerCopy’s copy; copies held by the service providers in section 4 follow those providers’ retention terms.
The exception is messages flagged as extraction attempts, which are kept separately in a restricted store for 30 days. Restricted reviewers at Biz Max and Think Basis review these messages to investigate abuse, restore accounts and adjust detection thresholds and rules. Flagged messages are not used to train AI models.
[[TODO: confirm retention periods for account and billing records, required legal retention and backup deletion schedules]]
6. Abuse review
Confirmed attempts to extract protected instructions or misuse the service can result in a warning, then an account pause for review. Accounts may be restored or closed following review. A pause does not itself cancel the subscription. Closure for abuse ends access without refund. See the terms for details.
7. Your choices and rights
You can delete conversations in the app and cancel your subscription from your account. Contact [[TODO: privacy contact email]] for requests about your personal information. Depending on the law that applies, you may have rights to access, correct, delete or receive a copy of your information, or to object to certain processing.
[[TODO: confirm rights, request procedure, response periods, regulator details and age requirements for the jurisdictions served]]
8. Security and policy changes
We use access controls and service safeguards to protect information. No method of storage or transmission can promise absolute security. We may update this policy as the service changes.
[[TODO: approve security disclosures and the process for notifying users of material policy changes]]