Legal

Privacy Policy

This page describes what data BizPass collects, why we collect it, how we use it, and the choices you have. We've kept it short on purpose — clarity matters more than length.

Effective: June 14, 2026 · Version 0.1 (beta)

This is an interim privacy policy for our beta period. We're collecting limited data and operating with a small group of users while we finalize the product. A full legal-team-reviewed version will replace this notice before BizPass is broadly available to the public. If you have specific concerns in the meantime, email support@bizpass.co.

— 01

What we collect

BizPass collects only the data needed to run the product. We do not buy data from anyone, and we do not sell data to anyone.

If you sign up for the waitlist

Email address (required)
Name, role, and free-form responses (optional)
The browser User-Agent string for spam detection

If you create an account

Email address and a hashed password (handled by Firebase Authentication — we never see your plaintext password)
The cards you create: name, title, company, contact info, custom fields, logo / background images you upload, design choices
Cards you save from other people (your "Received Cards") plus any notes or context you attach
Survey responses, if you publish a survey on one of your cards
Subscription status, plan, and billing dates (we never see your card number — Stripe handles payments)

Automatically, when you use the app or web

Device identifiers used for abuse prevention (Firebase App Check tokens, identifierForVendor on iOS)
A random browser ID we store in localStorage to deduplicate analytics on the public share viewer
Anonymous crash reports and performance traces (Firebase Crashlytics + Performance Monitoring)
Usage analytics (Firebase Analytics) — counts of views, saves, and similar product metrics. We do not link these to your real identity for marketing purposes.

— 02

How we use it

Run the service: store and sync your cards, render public shares, process payments, and send transactional emails (e.g. password reset, payment confirmation).
Keep it safe: detect abuse, prevent bot traffic on the public share viewer, and identify accounts violating the terms.
Improve the product: aggregate, de-identified analytics tell us which features are used. We do not run advertising and we do not sell any user list.
Talk to you: if you email us, we reply.

— 03

Who sees your data

The short list of third parties that receive any of your data, and what they receive:

Google (Firebase): hosts our database, authentication, cloud functions, and storage. Your cards live in Google Cloud (us-central region).
Stripe: processes Pro subscriptions paid by card. They receive your email and payment details directly; we never see your card number.
Apple: if you buy Pro or Advanced through the iOS App Store, Apple handles billing under their own privacy policy.
Anyone with your share link: the public share page (bizpass.co/s/…) is intentionally readable by anyone you give the URL to. You can revoke a share at any time from the app or dashboard.

We do not share your data with advertisers, data brokers, or marketing networks. Period.

— 04

Your rights and choices

See your data: the Dashboard shows everything we have on file for you. The iOS Settings screen lets you export a CSV of your analytics archive.
Correct it: edit any card or account detail from the iOS app or web dashboard at any time.
Delete it: the Settings screen has a Delete Account option. Email support@bizpass.co if anything goes wrong with that flow and we'll wipe your data manually.
Revoke a share: any public share URL can be revoked from the Shared Cards screen. The URL stops working immediately for new visitors.
Opt out of analytics: if you want us to disable Firebase Analytics for your account, email us and we'll exclude your user ID from collection.

— 05

Retention

We keep your data while your account is active. If you delete your account, we remove personal data from our databases within 30 days (some backups roll off over 90 days). Aggregated, fully anonymized usage stats may be retained longer for product analysis.

Waitlist signups are kept until either (a) you become an account or (b) BizPass launches publicly, after which the waitlist list is archived and then deleted within 6 months.

— 06

Children

BizPass is intended for users aged 13 and older (16 and older in the European Economic Area). We do not knowingly collect data from anyone younger. If you believe a child has signed up, email support@bizpass.co and we'll remove the account.

— 07

International transfers

BizPass is operated from the United States. By using the service, you understand that your data may be processed in the US and other countries where our service providers (Google, Stripe, Apple) operate. We rely on standard contractual clauses and the providers' own compliance programs where required.

— 08

Changes to this policy

We'll post changes here and update the "Effective" date at the top. If a change is material (for example, a new category of data collection), we'll email account holders before it takes effect.

— 09

Contact

Questions, requests, or concerns about your data:

Email support@bizpass.co — security disclosures are welcome here too
Or use the contact page