Skip to main content

Privacy Policy

Last updated: 2026-10-25

Bizfloo Branding ("we", "our", "us") operates bizfloo.com from Raleigh, NC 27601. This policy explains what we collect, why, and the rights you have over your information.

1. Information we collect

  • Information you give us — name, email, phone, business name, project details, and anything else you submit through our forms (Contact, Quote, Audit, Intake, Schedule, Bizfloo AI chat).
  • Payment information — handled by Square. We never see or store your full card number; Square processes payments on a PCI-compliant hosted page.
  • Automatic information — IP address, browser, device type, approximate location (country, region and city, derived from the IP address by our hosting provider — we do not store the IP address itself), pages visited, referring source, and the campaign link or QR code you arrived through. Collected via cookies and analytics tools: Google Analytics 4, Microsoft Clarity, PostHog, the Meta Pixel, OneSignal (only if you accept push notifications), and our own first-party analytics stored in our database.

2. How we use it

  • To respond to inquiries and deliver requested services.
  • To send transactional emails (quote confirmations, invoice receipts).
  • To improve site performance and content.
  • To send marketing communications you've opted into (you can unsubscribe at any time).

3. Who we share it with

  • Service providers — an email delivery service, Square (payments), hosting and database providers (data storage and hosting), and AI service providers (AI-powered chat). Each is bound by their own privacy and security terms. This does not include text messaging opt-in data and consent, which is never shared with third parties.
  • Legal compliance — when required by law or in response to valid legal requests.
  • We do not sell your personal information.

4. Cookies & tracking

We use cookies and similar technologies to keep the site working (essential), measure usage (analytics), and remember your preferences. You can disable cookies in your browser, but parts of the site may not function properly.

Session recording and heatmaps

Microsoft Clarity and PostHog reconstruct your visit — the pages you view, where you scroll, where you move and click, and how long you stay — so we can see where the site is confusing and fix it. What is stored is a recording of the page and of your interactions with it, played back later like a video. These are not video or audio recordings of you: no camera, no microphone, and we never see your screen outside this website.

Text you type into forms is masked before it leaves your browser. Names, email addresses, phone numbers and message contents are replaced with placeholder characters in the recording, so the people reviewing these sessions can see that a field was filled in but not what was written in it. Payment details are handled entirely by Square on their own hosted page and are never present in a recording.

Pages we never record, and pages we do not count

Input masking only covers text you type. It does not cover text a page already displays — your own name printed on your digital business card, for example. So rather than rely on masking alone, we switch session recording off entirely, before the recorder loads, on every page that can show or collect your personal details:

  • /portal — your client account and everything inside it.
  • /admin — our own staff area.
  • /cards and /bizfloo-cards — the digital business card builder and every published card, including the pages where you enter your name, phone number and email.
  • /products/confirmed — the page shown after a purchase.

Two of those go further. Visits to /portal and /admin are not recorded and not counted — no page view, no analytics event, nothing sent to Google Analytics, PostHog, Clarity or our own database. Signed-in activity in your account does not appear in our traffic numbers at all. Visits to the card pages are counted (we need to know the builder is being used) but are never recorded.

Campaign and QR tracking

Links we publish — on flyers, business cards, billboards, our Google Business profile, social posts and paid ads — may carry a short code (a /go/ link, often behind a QR code) or a campaign tag in the address (utm_source, utm_medium, utm_campaign, and the click identifiers Google and Meta add to their own ads). We record which one you arrived through, the site that referred you and the first page you landed on, once, at the start of your visit, and attach it to what you do afterwards. This tells us the advert worked; it does not identify you personally.

Choices and opt-out

Turn analytics off for this browser. The button below switches off Google Analytics, Microsoft Clarity, PostHog, the Meta Pixel and our own first-party analytics together, and stops any session recording already in progress. The site keeps working normally.

Loading your current setting…

We also honour the Global Privacy Control signal: if your browser or extension sends it, analytics and session recording are disabled automatically and nothing further is collected — you do not have to press anything. You can also block these tools with any standard content blocker, or disable cookies in your browser settings. Visits from our own staff and from automated bots are excluded from our reporting.

5. Your rights

Regardless of where you live, you can request that we:

  • Show you a copy of the personal information we hold about you.
  • Correct or update inaccurate information.
  • Delete your information (subject to limited legal retention).
  • Stop using your information for marketing.

To exercise any of these, email info@bizfloo.com. California residents have additional rights under the CCPA; EU/UK residents under the GDPR. We honor both.

6. Children

Our services are not directed to anyone under 13. We do not knowingly collect information from children. If you believe a child has submitted information, contact us and we'll delete it.

7. Data retention & security

We keep submitted information only as long as needed to provide the service or as required by law. Data in transit is encrypted via TLS; data at rest is encrypted by our service providers.

Messages sent through the forms on websites we build for our clients are stored for that business and deleted automatically after 12 months.

8. Google user data

If you run a website with us, you can connect your Google account in your admin portal or your Bizfloo account. You can also sign in with Google. This section explains what we get from Google and how we handle it. It applies only to data we receive through Google APIs.

  • What we access. Your Google account ID and email address, so we can link the connection to your account and show which Google account is connected. If you connect Google Calendar, we can add, change and remove events on calendars you own, and see when you are busy. If you allow sending mail, we can send email from your Gmail address. We cannot read, search or delete your email, and we never see the details of events we did not create, only when you are busy.
  • How we use it.Only to run the features you turned on. Bookings made on your website are added to your Google Calendar and kept up to date when they change or are cancelled. Times you are already busy are hidden from your booking page so customers can't double-book you. Booking confirmations and estimates that you send to your customers go out from your own Gmail address. The portal does not store or manage your mailbox. "Sign in with Google" only confirms who you are.
  • What we store and where.The access keys Google gives us, encrypted, in your website's own database. We also store the connected email address and the ID of each booking event we add to your calendar, so we can update it later. Your busy times are checked live when someone views your booking page and are not saved. We do not keep copies of email sent through Gmail. Sign-in with Google stores nothing beyond the link to your account.
  • Who we share it with. No one, except as needed to provide these features (for example, the booking details you send to your own calendar, or the email you send to your customer). We do not sell Google user data. We do not use it for advertising, analytics or to train AI or machine-learning models, and people at Bizfloo do not read it unless you ask us for help with a problem, it is needed for security, or the law requires it.
  • Disconnecting and deletion.You can disconnect Google anytime from Business Settings → Google in your admin portal, from your Bizfloo account, or at myaccount.google.com/permissions. When you disconnect, we revoke our access with Google and erase the stored keys right away. Events already on your calendar stay there until you remove them. To have us delete all Google data linked to your account, email info@bizfloo.com or follow our Data Deletion page. We do it within 30 days.
  • Bizfloo Cards. If you connect Google Calendar to a Bizfloo Cards account, the same rules apply: we only add, change and remove your booking events on the calendar you choose, and you can disconnect at any time.

Limited Use disclosure.Bizfloo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Facebook and Instagram messages

You can message Bizfloo on Facebook Messenger or Instagram, or comment on our posts. When you do, Meta (the company behind Facebook and Instagram) sends us some of your information. This section explains what we get and how we use it.

  • What we receive. Your public profile name. The user ID Meta gives you for our Page or Instagram account. This ID only works for Bizfloo and is not your Facebook or Instagram login. We also receive the messages and comments you send to our Page or account, and links to any photos, files or other attachments you send.
  • What you may tell us. We may ask about your business: its name, what it does, where it is, your website, and how to reach you. We save what you share.
  • Why we use it.To answer your questions, put together a quote, build or update your website, and follow up with you about your project. If you've already filled out a form on our site, we link your messages to that request so we don't ask you twice.
  • An automated assistant may answer you.Some replies come from an AI assistant that answers for Bizfloo. A person at Bizfloo reads the conversations and can step in at any time. If you'd rather talk to a person, just say so in the chat and someone will take over.
  • Where it's stored. We save your name, Meta user ID, messages, attachment links and business details in our database. When a new message comes in, we send our team an alert.
  • Who sees it.Bizfloo staff. Our service providers also handle it to make the service work: Meta (delivers the messages), our hosting and database providers (store our data and host our website and systems) and an AI service provider (which writes the assistant's replies). Each one is bound by its own privacy and security terms.
  • What we never do.We do not sell your information. We do not share it with data brokers or advertisers. We do not use it to target ads, except through Meta's own ad tools inside Meta's platforms. We do not use it to decide whether you qualify for housing, jobs, credit, insurance or anything like that.
  • How long we keep it.We keep your conversation while we're working with you or talking about a project. If there's no activity for 24 months, we delete it. If you ask us to delete it, we do so within 30 days. We may keep records the law requires, such as invoices and payment records.
  • How to delete your data. Follow the steps on our Data Deletion page, or email info@bizfloo.com.

10. Referral programs

If you join a business's referral program, we store your name, email, referral code, the payout handle you give (Cash App, Zelle or PayPal), and a record of referrals credited to you. When someone uses your link, we record the referral and whether their payment through Square completed, so the business can reward you. The business pays rewards directly; we only keep the totals. We email you when a referral pays, and you can leave the program at any time.

11. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted with an updated "Last updated" date at the top.

12. Text messages (SMS)

If you opt in, we text you about your account: sign-in links, portal invites, invoice and payment notices, and replies to your messages. How often varies. Message and data rates may apply. Reply STOP to opt out or HELP for help, or contact info@bizfloo.com. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Agreeing to texts is not a condition of any purchase.

13. Contact

Bizfloo Branding
Raleigh, NC 27601
Email: info@bizfloo.com

This policy is provided as a general framework and does not constitute legal advice. For binding compliance, consult a licensed attorney.

← Back to home