Privacy Policy

When you use Bizilio, we collect:

• Account information: your name and email address, plus a password — the password is stored as a securely hashed value that even we can't read back; your name and email are stored as regular account data, since we need them to operate your account and contact you.
• Business information: business name, description, logo, and the links you add (Google Reviews, socials, website, phone, directions, etc.).
• Activation data: the stand and activation code you claim, and when.
• Basic technical data: things like IP address and timestamps, used for rate limiting and abuse prevention.

We use this information to:

• Operate your account, dashboard, and public business page.
• Redirect scans of your stand to the destination you've configured.
• Send account-related emails, like password resets.
• Prevent abuse of the activation and login systems.

We rely on the following providers to run Bizilio. Each only receives the data needed to perform their function:

• Supabase — hosts our database and stores uploaded logo images.
• Resend — delivers transactional emails, like password resets.
• Vercel — hosts the application and its infrastructure.

We use a session cookie to keep you logged in to your dashboard. It's required for the service to function and isn't used for advertising or cross-site tracking.

Your name and email address are readable by our systems because we need them to operate your account — this is normal for any online service and isn't unique to Bizilio. What we do to protect it:

• Database connections use encrypted (TLS) connections, and data is encrypted at rest by our hosting providers.
• Only server-side code can query your data — every request is scoped to your own account, and we don't expose an API that lets one business see another's information.
• We don't sell your data or share it with third parties beyond the service providers listed above, which exist solely to run Bizilio.

We keep your account and business data for as long as your account is active. If you deactivate your account, we'll delete or anonymize your data within a reasonable period, except where we're required to retain it for legal reasons.

You can access, correct, or delete your business information directly from your dashboard at any time. If you're in the Philippines, you also have rights under the Data Privacy Act of 2012, including the right to request access to or deletion of your personal data — contact us to exercise these rights.

Bizilio is intended for business owners and isn't directed at children. We don't knowingly collect data from anyone under 18.

We may update this policy from time to time. We'll update the date at the top of this page when we do.

Questions about this policy or your data? Reach out at midasave4@gmail.com.