PRIVACY POLICY

It applies to the bizaitec.com website, the onboarding flow, and each product workspace you access with an alpha code. Each product may process different data depending on what you connect to it. Where a product acts on data that belongs to your organization, your business is the controller of that data and BAIT acts as a processor on your behalf.

• —Account & identity. When you sign in with Google we receive your name and email address to create your account. We do not receive or store your Google password, and we do not read your Gmail, Drive, or contacts.
• —Profile you give us. During onboarding: your full name, business name, industry, and company size — used to shape your workspace.
• —Alpha code. The invitation code you redeem, and which product it unlocks.
• —Product data. The content you put into or connect to a product — for example financial records and forecasts in Cashflow, the tools and workflow steps you author in FlowForge, employee and org information in HR Compass, and (when available) call audio and transcripts in Recepta.
• —Usage & technical data. Basic logs such as pages or actions, device and browser type, approximate location from IP, and error diagnostics — used to run and debug the alpha.
• —Support & feedback. Anything you send us directly, including bug reports and messages.

• —To provide, operate, and secure your workspace.
• —To authenticate you and keep you signed in across our products.
• —To generate the outputs each product is built for — reconciliations and forecasts, workflow runs, people-ops signals, answered calls.
• —To fix bugs, understand what breaks, and improve the alpha based on how it is used and the feedback you send.
• —To communicate with you about your account, the alpha program, and material changes.

We do not sell your personal information, and we do not use your private product data to serve you third-party advertising.

Our products use AI models to do their work. To generate a result, the relevant content is sent to trusted third-party AI model providers for processing and returned to your workspace.

• —We instruct these providers not to use your content to train their general-purpose models, and we do not use your private product data to train models for other customers.
• —Agents act inside defined capability boundaries and log their actions. AI output can be wrong — treat it as a draft and keep a human in the loop for anything consequential (see the Terms).

We share data only with service providers who help us run the alpha, under confidentiality obligations, and only as needed:

• —Google — sign-in / identity provider.
• —Supabase — authentication and database hosting for your account and workspace data.
• —Cloud infrastructure & hosting providers — compute, storage, and content delivery.
• —AI model providers — to process the content needed to produce a result (see section 04).

We may also disclose data if required by law, or to protect the rights, safety, and security of our users and BAIT. If we are ever involved in a merger or acquisition, we will tell you before your data becomes subject to a different policy.

We use a small number of strictly necessary cookies to keep you signed in and secure your session. Our authentication cookie is scoped to .bizaitec.com so a single sign-in works across our products, and is set as secure and HTTP-only. We do not use third-party advertising or cross-site tracking cookies.

Because this is an alpha, we may reset environments, wipe test data, or delete inactive workspaces as we iterate — sometimes without advance notice. Keep your own copy of anything important. When you ask us to delete your account, or when the alpha for a product ends, we delete or anonymize the associated personal data within a reasonable period, except where we must keep limited records to meet a legal obligation.

We encrypt data in transit and rely on our infrastructure providers for encryption at rest, scope access to what is needed, and isolate each account's data. During an alpha our safeguards are best-effort and evolving — read the Security overviewfor detail, and please don't upload regulated or highly sensitive data.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict some processing. You can exercise these — or withdraw from the alpha at any time — by emailing privacy@bizaitec.com. Where BAITprocesses data on your organization's behalf, we will direct individual requests to that organization.

Business AI Technology operates in the United States, and our providers may process and store data in the United States and other regions where they run infrastructure. By using the alpha you understand your data may be transferred to and processed in those locations.

Our products are business tools for adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. HR Compass is intended for lawful, consented workplace use only.

We'll update this policy as the products mature and note the date at the top. For anything privacy-related, reach us at privacy@bizaitec.com.