Privacy Policy

1. Introduction

BusinessDone ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our OCR document processing service. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and password when you create an account
• Profile Information: Any additional information you choose to add to your profile
• Documents: PDF files and other documents you upload for OCR processing
• Payment Information: Billing details processed securely through Stripe
• Communications: Information you provide when contacting us for support

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and actions taken within the Service
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our OCR services
• Process your documents and deliver results
• Process payments and manage your subscription
• Send you service-related communications
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Document Processing and Storage

We take the security of your documents seriously:

• Processing: Documents are processed using AWS Textract for OCR extraction
• Storage: Documents are stored securely in encrypted cloud storage (AWS S3)
• Access: Documents belong to the organisation they were uploaded into, and every request is scoped to it. Within an organisation, project membership and role decide who can open a given file; nobody outside it can
• Retention: Organisation owners choose a retention window of at least 30 days, after which processed documents are deleted automatically. A legal hold suspends that deletion for as long as a matter requires, and you can delete a document yourself at any time unless a hold applies
• No Training: We do not use your documents to train AI models or for any purpose other than providing the Service

5. Cloud Drive Integration

You can connect a Google Drive or OneDrive account to BusinessDone from your profile. Today that connection stores an authorisation and nothing else. No documents are read from, or written to, your drive:

• OAuth tokens are encrypted and stored securely
• You can disconnect a cloud service at any time from your settings, which deletes the stored token
• We do not read your drive's contents. If that changes, this policy will say so before the feature ships, and we will only ever access files you explicitly select

6. Information Sharing

We do not sell your personal information. We may share your information only in these circumstances:

• Service Providers: With third-party vendors who assist in providing our services (e.g., AWS for processing, Stripe for payments)
• Legal Requirements: When required by law or to respond to legal process
• Protection of Rights: To protect the rights, property, or safety of BusinessDone, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure authentication with session management
• Regular security assessments and updates
• Access controls and audit logging
• Secure data centers with physical security measures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your processed documents
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us or use the relevant features in your account settings.

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and security
• Preference Cookies: Remember your settings and preferences
• Analytics: Understand how users interact with our Service

You can control cookies through your browser settings, but disabling essential cookies may affect the functionality of the Service.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Processed documents may be automatically deleted after a period of inactivity as specified in your subscription plan, or after the retention window the organisation's owner has set.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to our facilities and to third-party facilities as described in this policy.

12. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our website's contact form or at the email address provided on our site.