Privacy policy

Who we are

BizLonix is provided by MIV Consulting, trading as BizLonix, KvK 42201890, Hallenweg 16, 5683 CT Best, Netherlands. Privacy contact: contact@bizlonix.com.

Who this is for

• Our customers: businesses using the app and their team members. For their data we decide how it is used (controller).
• People who write to our customers' social media accounts. We process their messages on behalf of that business (processor), under the data processing agreement with the business.

What we use and why

• Account: email, name, language, active sessions. To provide the service (contract) and for security (legitimate interest). We store no passwords: you sign in with an email link valid for 15 minutes, stored only as a cryptographic hash.
• Your business: profile, facts you confirmed (hours, prices, delivery), brand voice, goals, autopilot rules. To write correct posts and replies (contract).
• Connected accounts: account identifiers and names; access tokens are encrypted with AES-256-GCM. To publish and read messages, only on your instruction (contract).
• Content: posts, photos and videos. Location (GPS) and other metadata are removed from photos and videos on upload. AI-made images and videos with an AI voice are labelled as such.
• Your customers' messages and reviews: text, author name and platform identifier. To sort them, suggest replies and find potential customers, on behalf of your business.
• Platform statistics: followers, views, interactions.
• Billing: plan, subscription status, Stripe customer id. Card details are processed by Stripe; we never see them. Invoices and VAT: legal obligation.
• Activity log: who did what and when, for security and to explain automatic actions (legitimate interest).

Data from Google, Meta and the other platforms

We receive it only when you sign in or connect an account, only with the permissions you accept on the platform's own page, and we use it only to provide the features below.

• Sign in with Google: your name, email address and profile picture, to create and protect your BizLonix account.
• YouTube (only if you connect your channel): the channel name and statistics (youtube.readonly), uploading the videos you schedule or approve (youtube.upload), reading the comments on your videos and replying to them (youtube.force-ssl).
• Google Business Profile (only if you connect it): your locations, their reviews and statistics, so you see reviews in the app, can reply to them and publish the updates you approve.
• Facebook and Instagram (Pages and professional accounts): the page or account name, the posts published through BizLonix, the comments and private messages your page or account receives, and their statistics.
• LinkedIn and TikTok: your profile name and publishing the posts or videos you approve.
• We never sell this data, never use it for advertising and never use it to train AI models. The text of comments and messages may be sent to Anthropic only to sort it and suggest a reply; the provider does not use it for training.
• BizLonix's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
• You can withdraw access at any time: disconnect the account in BizLonix (Setup, Accounts) or in the platform's settings (myaccount.google.com/permissions, Facebook or Instagram settings). Access tokens are deleted immediately. If you ask for deletion through Facebook or Instagram, we do it automatically and give you a code to check the status of the request.

Artificial intelligence

We use Anthropic (Claude) to write posts, sort messages, suggest replies and research the market, and OpenAI to generate images and the AI voice in short videos. For images we only send a description of the picture, no personal data; for the voice, only the text you wrote for the video. Under these providers' API terms, data sent through the API is not used to train their models by default.

The AI uses only the facts you confirmed for prices, hours and delivery. Complaints and urgent messages always reach a person.

Who we share data with

• Hosting in the European Union: OVHcloud (data centre in Germany).
• File storage: Scaleway Object Storage (Amsterdam and Paris, EU).
• Anthropic PBC (USA): texts for AI.
• OpenAI (USA): image descriptions and the text read by the AI voice.
• Stripe (Ireland/USA): payments and invoices.
• Sending email: Scaleway Transactional Email (France).
• The platforms you connect (Meta, Google, LinkedIn, TikTok): only what you publish or read through them, on your instruction.

Transfers outside the EU

For providers in the USA, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep data

• As long as your account is active.
• After you ask to delete your account: 30 days in which you can cancel; then we automatically delete the organization, all businesses, messages, posts and files, and users who no longer belong to another organization.
• Data export: the file stays available for 7 days.
• Sessions: 30 days after last use. Sign-in links: 15 minutes.
• Billing records: as long as Dutch tax law requires (7 years), mainly at Stripe.
• Database backups: encrypted, in the European Union, kept for 30 days, then deleted automatically.

Your rights

You have the right to access, export, correct, delete, restrict and object. Export and deletion you do yourself in My account, under Privacy. For the rest, write to us at the address above.

You can complain to the Autoriteit Persoonsgegevens (Netherlands) or the authority in your country.

Security

• Encrypted connections (HTTPS) everywhere.
• Access tokens for social accounts are encrypted.
• Each organization's data is separated in the database, down to the row level.
• No passwords: email-link sign-in with attempt limits.

Children

The service is for businesses and is not intended for people under 16.

Changes

We tell you by email or in the app before important changes.