Privacy policy
Bizable helps businesses run their back office. To do that it reads records from the systems a business connects. This policy says what we collect, why, who sees it, how long we keep it, and what you can ask us to do with it.
Who we are
Bizable is run by Bizable ("Bizable", "we"). A business that signs up ("the customer") decides which systems to connect and who on its team can see what. For the business records it connects, the customer controls the data and we process it on the customer's behalf. For account details like your name and email, we are responsible for that data ourselves.
What we collect
Information you give us
- Account details: your name, work email or mobile number, your role, and the business's name.
- Sign-in details: passkeys registered on your devices (we store the public key only), and one-time codes we send you. We don't use passwords.
- Billing details: handled by Stripe. We see the card brand and last four digits, never the full number.
- What you write in Bizable: questions you ask, messages, notes, tasks, rules and decisions, and files you upload.
Information from systems you connect
When the customer connects a system, Bizable reads the records it needs from that system through the system's own API. Depending on what is connected, this can include customers, invoices, payments, bills, payroll runs and employees, work orders, bank and card transactions, email and spreadsheets. A connection reads only. Bizable can change something in a connected system only after a person at the business allows a specific kind of action, and some actions it can never take (see Security).
Payroll, personnel and private compliance details are stored apart from other records and shown only to the people the customer allows.
Information collected as you use Bizable
- Device and log data: IP address, device and app version, and the time and kind of each request, used to run and secure the service.
- Product analytics: one event per action you take, recorded with your role and the size of your business only, never the content of your records.
- Error reports: when something breaks, a report with the technical details. Sensitive values are removed from logs and reports before they are stored.
The marketing site at bizable.ai doesn't use advertising or tracking cookies. Sign-in uses a cookie or token that is needed for the service to work.
Bank data and Plaid
Bizable uses Plaid Inc. to connect bank and card accounts. When you connect an account, you sign in to your bank through Plaid's own window. Bizable never sees or stores your bank username or password.
Through Plaid, Bizable receives the account's name, type and the last digits of its number, its balance, and its transactions (date, amount, description and merchant). We use this to reconcile the books, match payments to invoices, find recurring charges and forecast cash. We don't use it to move money: Bizable never initiates a transfer or payment from a connected account.
By connecting an account, you agree that Plaid may collect and use your information as described in the Plaid End User Privacy Policy. You can disconnect a bank at any time in Bizable under Connections; we stop reading it at once and delete its synced records within 30 days. You can also manage the connection at my.plaid.com.
How we use it
- To provide Bizable: read your records, find what needs attention, prepare work, answer your questions and carry out the actions you approve.
- To keep a record of every change Bizable or a person makes, so the business can see who did what.
- To sign you in, keep accounts secure and prevent abuse.
- To bill the customer and send service messages, such as sign-in codes, invites, morning briefs and notices about the account.
- To support you when you ask, and to fix and improve the service. Our staff read the content of a business's records only when the business has turned on support access, or when the law requires it.
We don't sell personal information, share it for cross-context advertising, or use a business's data to market to its customers.
AI models
Bizable uses AI models from Anthropic to write summaries, answer questions and draft work. The parts of your records needed for a task are sent to the model provider to complete that task. Under our agreement, the provider doesn't use this data to train its models. Bizable doesn't use your data to train models either. Model-written text that states a figure not found in your records is replaced or flagged before you see it.
Who we share it with
We share data only with service providers that help us run Bizable, under contracts that limit their use of it to providing their service to us:
| Provider | What for |
|---|---|
| Amazon Web Services | Hosting, storage, backups, encryption keys and logs (United States) |
| Anthropic | AI models |
| Plaid | Bank and card connections |
| Stripe | Subscription billing |
| Twilio | Text messages, such as sign-in codes |
| Apple | Push notifications and Sign in with Apple |
| Sign in with Google | |
| Sentry | Error reports |
| PostHog | Product analytics (role and business size only) |
Systems the customer connects, such as QuickBooks, Gusto, Stripe or Square, receive data from Bizable only when someone at the business approves an action that writes to them.
We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the company, in which case this policy continues to apply.
How long we keep it
- Records synced from a connected system: while it stays connected, and deleted within 30 days of disconnecting.
- Questions and AI conversations: 90 days by default. An owner can shorten this to 30 days.
- Inbound email that Bizable reads for you: 14 days.
- Deleted files: removed 30 days after deletion.
- The record of changes (audit log): kept for 7 years, because businesses need it for their own books and audits. It holds what changed, not copies of your records.
- Closing an account: everything is deleted 30 days after an owner asks, with an export offered first. Backups age out within 35 days after that.
Nothing is deleted while a legal hold applies.
Your choices and rights
You can ask for a copy of your personal information, ask us to correct or delete it, or object to how we use it. Depending on where you live, including California and the European Economic Area, you may have these rights by law, and we offer them to everyone. Owners can export a business's data or redact a person from Settings in Bizable. For anything else, email privacy@bizable.ai. We respond within 30 days and won't treat you differently for asking.
If your information came to us from a business that uses Bizable, such as your employer, we may refer your request to that business, since it controls those records.
Bizable is for businesses and isn't directed to children under 16. We don't knowingly collect their information.
Security
Data is encrypted in transit and at rest, each business's records are isolated from every other business at the database level, and every change is written to a tamper-evident log. Read the details on our Security page.
Changes and contact
If we change this policy in a way that matters, we'll tell account owners by email before the change takes effect. Questions go to privacy@bizable.ai.