Privacy Policy

This policy covers two kinds of people: the staff users of an organization that signs up for Bizor AI (owners, admins, and team members — "you," when you're using the app directly), and the clients of those organizations who use the customer portal to view invoices and quotes ("portal users"). Where the two are treated differently, we say so.

If you're a client of a business that uses Bizor AI, that business — not Netjex — is the one who decided to store your name, email, and invoice details here. For that data, the business generally determines the purposes for which it's processed, and Netjex processes it on the business's behalf. Questions about why your information is in Bizor AI at all should go to that business first.

Within an organization, owners and admins control who has access to the organization's workspace and are responsible for managing their own team members' permissions.

Account information. When you register, we collect your name, email address, and a password (stored as a bcrypt hash — we never see or store it in plain text). If you sign up or log in with Google, we receive your name, email, and Google account ID from Google; we don't receive your Google password.

Organization information. The business name, country, tax ID, logo, currency, and timezone you enter when setting up an organization.

Client records. Names, emails, phone numbers, addresses, and tax IDs that an organization enters for its own clients, so it can send them invoices and quotes.

Business content. Invoices, quotes, tasks, notes, and calendar events created inside the app — whatever an organization's staff enter to run their business.

AI Assistant conversations. If you use the AI Assistant, the messages you send it (and the business data it needs to answer you — e.g. a client's outstanding balance) are sent to our AI processing provider to generate a response, and the conversation itself is stored in our database as part of your account, tied to your individual user login — it isn't shown to other members of your organization through the app. It's retained until you delete your account, and authorized Netjex personnel may access it as necessary to operate, maintain, secure, or troubleshoot the service. See "Third-Party Service Providers and Subprocessors" below.

Payment information. If an organization connects a Stripe account to accept online payments, we never see or store card numbers — Stripe handles the payment directly, and we only receive confirmation that a payment succeeded, its amount, and an identifier for the transaction.

Automatically collected data. Standard web log data (IP address, browser type, pages visited, timestamps) collected by our infrastructure for security and troubleshooting.

Cookies. A single session cookie used to keep you signed in. We don't use advertising or cross-site tracking cookies.

• To provide the service — create your account, run your organization's workspace, generate invoices, send emails on your behalf (e.g. an invoice to your client).
• To power the AI Assistant when you choose to use it.
• To process payments when an organization enables online invoice payments.
• To send account-related email (password resets, invite emails, overdue-invoice reminders you've configured).
• To keep the service secure — detect abuse, enforce plan limits, investigate incidents.
• To respond when you contact support.

We do not sell personal information, and we do not use your data to train third-party AI models.

We rely on the following subprocessors to run Bizor AI. Each only receives the data it needs to do its job:

• Groq — processes AI Assistant conversations to generate responses. Groq's own retention and handling of that data is governed by Groq's privacy policy and terms, not ours.
• Stripe — processes online invoice payments, when an organization enables that feature. Card details go directly to Stripe; we never receive or store them.
• Google — provides "Sign in with Google" authentication, if you choose to use it.
• Resend — delivers transactional email (verification, password reset, invoices, reminders).
• Hetzner Online GmbH — hosts our servers and file storage, in the European Union.
• Zoho Corporation — powers our support desk if you contact us for help.

Each of these providers has its own privacy policy governing how it handles data on our behalf.

Data is stored on servers hosted by Hetzner in the European Union. Passwords are hashed with bcrypt and never stored or logged in plain text. Traffic between your browser and our servers is encrypted with TLS. Two-factor authentication (TOTP) is available and we recommend enabling it, especially for organization owners and admins.

No system is perfectly secure, and we can't guarantee absolute security of information transmitted to or from Bizor AI.

Netjex Inc. is based in Canada, our infrastructure is hosted in the European Union, and some of our service providers (including Stripe, Google, and Groq) are based in or process data in the United States. By using Bizor AI, you understand that your information may be transferred to and processed in countries other than your own, which may have different data protection laws than your country of residence.

We retain account and business data for as long as an organization's account is active. If an account is closed, we retain data for a limited period afterward — to handle disputes, comply with legal obligations, or allow the account to be reactivated — and then delete or anonymize it. We don't yet publish a fixed number of days for this; contact us using the details below if you need a specific answer for your organization.

Depending on where you live, you may have rights to access, correct, or request deletion of your personal information. We don't yet have a self-serve tool for this inside the app — until we do, contact us using the details below and we'll handle your request manually.

If you're a portal user (a client of an organization using Bizor AI), we recommend contacting that organization directly first, since they control what information about you is stored here.

Bizor AI is a business tool and isn't directed at, or intended for use by, children. We don't knowingly collect information from anyone under 18.

We may update this policy as the product changes. If we make a material change, we'll update the effective date above and, where appropriate, notify account owners by email.

Questions about this policy or your data can be sent to us via our support desk at netjex.zohodesk.ca, or by mail to Netjex Inc., Ontario, Canada.