Legal
Privacy Policy
We collect what we need to run your website and bill you — nothing more. We don't sell your data, we don't run ad trackers, and we don't profile your visitors. Payments live with Stripe; we never see your card number. You can export or delete your data whenever you like. Questions: privacy@bizporch.com.
1.Who this covers
This Privacy Policy explains how BizPorch ("we," "us") handles information when you:
- Hold a BizPorch account — you're the business owner building and running a site;
- Join the waitlist or browse bizporch.com;
- Visit a site built on BizPorch — someone else's business site hosted by us.
It should be read together with our Terms of Service. We keep this policy plain and honest — no legalese for its own sake.
2.What we collect
2.1 Information you give us
- Account: your email address and a password (stored only as a salted hash — we cannot read it).
- Business content: the name, address, phone number, hours, text, and images you put on your site. You choose what goes here; it is meant to be published.
- Billing: handled by Stripe. Card details go directly to Stripe; we receive only subscription status, payment outcome, and the card's brand and last four digits.
- Waitlist: the email address you enter, used to tell you when we open (and removed on request).
- Support messages: whatever you send us by email.
2.2 Information collected automatically
- Security and server logs: IP addresses, browser user-agent, timestamps, and requested pages — kept for security, rate-limiting, abuse prevention, and debugging.
- Account activity records: significant account events (logins, password changes, plan changes, domain changes) with time and network address, so we can help with support questions and investigate misuse.
- Legal acceptance records: when you agree to our Terms or this policy we record the document version, timestamp, IP address, and browser user-agent. See Section 7 for how long we keep these.
- Bot checks: our signup form uses Cloudflare Turnstile, which processes technical browser signals and your IP address to tell humans from bots. It does not track you across the web.
- Aggregate usage: feature usage patterns in aggregate, to improve the product. Never sold, never used for advertising.
2.3 From third parties
- Stripe: subscription and payment status so your plan works and invoices reconcile.
- Email delivery (Resend): bounce and complaint signals, so we stop emailing addresses that don't want or can't receive mail.
3.How we use information
| Purpose | What's used |
|---|---|
| Run the Service — host and display your site, keep you signed in | Account info, business content, session data |
| Billing — subscriptions, invoices, failed-payment handling | Billing status from Stripe |
| Transactional email — verification, password resets, billing alerts, terms updates | Email address |
| Site analytics for you — visitor counts and clicks on your own site | Aggregated visitor data (Section 5) |
| Security — rate limiting, fraud and abuse prevention, incident response | IP addresses, logs, activity records |
| Legal compliance and defense — tax and accounting duties, responding to lawful requests, proving agreement to our terms | Billing records, acceptance records |
| Product improvement | Aggregate usage patterns |
| Launch notification — one email when we open | Waitlist email |
We do not sell or rent personal information, and we do not use your data — or your visitors' data — for advertising.
4.When we share information
4.1 Service providers (subprocessors)
We use a small set of infrastructure providers who process data only to provide their service to us:
| Provider | What they do | Privacy policy |
|---|---|---|
| Stripe | Payment processing and billing | stripe.com/privacy |
| Cloudflare | Image/file storage (R2), DNS, signup bot protection (Turnstile) | cloudflare.com/privacypolicy |
| DigitalOcean | Cloud hosting for the platform and database | digitalocean.com/legal/privacy-policy |
| Resend | Transactional email delivery | resend.com/legal/privacy-policy |
| Sentry | Error and performance monitoring — receives diagnostic data when something breaks so we can fix it | sentry.io/privacy |
| Google Fonts | Serves the web fonts our pages display; because the fonts load from Google's servers, Google receives the visitor's IP address and browser user-agent for that request | policies.google.com/privacy |
4.2 Legal requirements
We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect our rights or property, investigate fraud or abuse, enforce our Terms, or protect someone's safety. Where lawful and practical, we will tell you before disclosing your information.
4.3 Business transfers
If BizPorch is acquired or merges, or its assets are sold, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
5.Visitors to BizPorch-powered sites
If you visit a site built on BizPorch, the site's owner — not BizPorch — decides its content. For those sites, we:
- Collect aggregate analytics for the site owner: page views, approximate visitor counts, and click events. We do not build visitor profiles, do not track visitors across sites, and do not use this data for anything except showing the owner how their site is doing.
- Keep standard server logs (IP, user-agent, timestamp) briefly for security and abuse prevention.
- Set no advertising or tracking cookies. A session cookie may be set for platform security functions.
Per-visit analytics records. In addition to the aggregate counts above, we store a record of each individual visit to a BizPorch-powered site. Each record can include the visitor's IP address, browser and device information (user-agent), and the referring page — the site or link the visitor arrived from. These per-visit records are shown to the site owner in their analytics dashboard so they can see who is reaching their site and how. We use this information only to provide analytics to that site owner and for security and abuse prevention; we do not use it to build cross-site visitor profiles or for advertising, and we do not sell it.
Contact form submissions. If a BizPorch-powered site includes a contact form and you submit it, the details you enter (which may include your name, email address, phone number, and message) together with your IP address are stored by BizPorch and emailed to the business owner so they can respond to you. The business owner receives and controls this information and decides how they use it; please contact that owner with questions about their handling of a specific message. We store these submissions to deliver them to the owner and for security and abuse prevention.
If a site owner collects personal information from visitors through their site (for example a phone number you call or an embedded map or booking widget), the owner is responsible for how that information is handled. Contact the site owner first with questions about a specific business's practices.
6.Cookies
BizPorch uses only cookies the platform needs to work:
| Cookie | Purpose | Lifetime |
|---|---|---|
| Session | Keeps you signed in to your account | Sign-out or expiry |
| CSRF token | Protects forms against cross-site request forgery | ~1 year |
| Turnstile (signup page only) | Cloudflare's bot check | Minutes |
No advertising cookies, no third-party analytics trackers, no cross-site anything. Because we use only essential cookies, there's no cookie banner to click — there's nothing to opt out of.
7.How long we keep things
| Data | Kept |
|---|---|
| Account and site content | While your account is active; removed within ~30 days of account deletion |
| Uploaded images | Deleted with the image or the account; copies in backups age out on rotation |
| Database backups | Rolling ~30-day rotation, then overwritten |
| Billing records | As long as tax and accounting laws require |
| Security/server logs | Short-term, routinely rotated |
| Waitlist email | Until we open and notify you, or you ask us to remove it |
| Legal acceptance records | Retained after account deletion — see below |
About acceptance records. When you delete your account we erase your content and personal data as described above, with one deliberate exception: the record that you agreed to our Terms and Privacy Policy (document version, timestamp, IP address, browser user-agent, and the email it was tied to). We keep it because it may be the only evidence of what was agreed if a dispute arises later — a legitimate interest in establishing and defending legal claims — and we keep it no longer than the limitation periods for such claims, after which it is deleted.
8.Security
Measures we use to protect your data include:
- HTTPS/TLS encryption for all traffic, including custom domains;
- Passwords stored only as salted hashes; we never see or store plaintext passwords;
- Rate limiting on sign-in, signup, and other sensitive endpoints;
- Bot protection on public forms; verification before any account is provisioned;
- Access controls and audit logging on administrative functions;
- Off-site encrypted backups and error monitoring.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as required by applicable law.
9.Your rights and choices
- Access and correction: nearly everything we hold about you is visible and editable in your account.
- Export: download your site content and settings any time with the backup/export feature.
- Deletion: delete your account (and everything with it) from account settings, or email us and we'll do it.
- Email choices: transactional email (billing, security, terms changes) is part of having an account and can't be opted out of while your account is active. Anything promotional will always include an unsubscribe link.
- Waitlist: one email asking, and you're off it.
To exercise any right, or if you believe we hold something about you we shouldn't, contact privacy@bizporch.com. We respond to privacy requests within a few business days, and in any case within the time applicable law requires. Depending on where you live (for example the EU/UK or California), you may have specific statutory rights to access, correct, delete, or receive a copy of your personal information, and the right not to be discriminated against for exercising them — we honor these regardless of where you live, and we don't sell personal information to anyone.
10.Where data is processed
BizPorch is operated from the United States and our providers process data in the U.S. (some, like Cloudflare, operate global networks). If you use the Service from outside the U.S., you understand that your information is transferred to and processed in the United States, where privacy laws may differ from your jurisdiction's.
11.Children
BizPorch accounts are for adults 18 and over, and the Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact privacy@bizporch.com and we will delete it promptly.
12.Changes to this policy
We may update this policy as the Service evolves. Each version carries the version date shown at the top, and we keep records of which version you accepted. For material changes we will notify you by email and/or ask you to review and accept the new version inside the product. Earlier versions are superseded on your acceptance of a new one.
13.Contact
Privacy questions or requests: privacy@bizporch.com
Everything else: support@bizporch.com
Website: bizporch.com