Privacy Policy

This Privacy Policy explains how The Business AI Doctor (“The Business AI Doctor,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use our business visibility, website analysis, treatment, integration, and monitoring services (the “Service”).

Information we collect

Account information. We collect information such as your name, email address, password credential, plan, and session information. Passwords are stored as one-way hashes rather than readable passwords.

Security activity. We record limited login, failed-attempt, and diagnostic activity for fraud prevention, troubleshooting, and account protection. Email addresses are masked in administrator reports, and network addresses are stored only as salted one-way fingerprints rather than raw addresses.

Business information. We collect the business facts you provide, including business name, website, contact information, location, category, services, descriptions, and website-management details.

Analysis and treatment records. We store checkup evidence, scores, diagnoses, discovery scenarios, proposed website treatments, approvals, verification results, monitoring history, audit records, and notifications.

Integration information. If you connect Google, WordPress, or another supported provider, we receive authorized account data and tokens needed to operate the integration. Integration credentials are encrypted before storage where supported and are excluded from customer data exports.

Technical information. We may process IP address, browser and device information, request logs, security events, and cookies or similar session technologies needed to authenticate users, prevent abuse, and operate the Service.

Optional public website analytics

Our public homepage offers an optional Google Analytics control. The Google tag loads only after you choose “Allow visitor analytics” for that page visit. It is not installed on login, account, billing, business dashboards, or other private app pages. The tag receives the public homepage URL, a fixed page title, and, when available, the external referring site's domain; we omit URL query strings, fragments, and referring paths. Advertising personalization and Google signals are disabled. Google may process browser/device information and set analytics cookies after you opt in. You can choose “No thanks” or leave the control untouched to keep this optional tag off, and each new page visit requires a new choice. Previously set analytics cookies can be removed through your browser settings.

How we use information

• Provide, secure, maintain, and improve the Service.
• Perform requested checkups, generate recommendations, apply owner-approved treatments, verify results, and run monitoring.
• Authenticate users, prevent fraud and abuse, troubleshoot failures, and maintain audit records.
• Communicate service notices, alerts, support responses, and material policy changes.
• Comply with law and protect users, the public, and our legal rights.

How we share information

We do not sell personal information. We may share information with hosting, database, email, AI, analytics, security, payment, and integration providers only as reasonably necessary to operate the Service; with professional advisers under appropriate duties; when required by law; to protect rights and safety; or in connection with a merger, financing, acquisition, or sale of assets.

Connected providers process information under their own terms and privacy policies. You choose whether to connect optional integrations and may disconnect them.

AI processing and accuracy

When AI features are enabled, relevant verified business facts and requested treatment context may be sent to an AI service provider to generate draft content. Do not submit sensitive personal, medical, financial-account, or confidential third-party information unless the Service expressly requests and authorizes it. AI output may be incomplete or inaccurate and must be reviewed before use.

Retention and deletion

We retain information while your account is active and as reasonably needed to provide the Service, maintain security and audit records, resolve disputes, and meet legal obligations. The Account page provides a data download and permanent account deletion workflow. Deletion may not immediately remove limited information retained in protected backups, fraud-prevention records, or records we must keep by law; such information remains restricted until deletion or expiration.

Security

We use reasonable administrative, technical, and organizational safeguards, including hashed passwords, encrypted integration credentials, secure cookies in production, access controls, request protections, rate limiting, and dependency monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices

You may update business information, disconnect optional integrations, download your account data, or permanently delete your account through the Service. You may also contact us regarding access, correction, deletion, or privacy questions.

Children

The Service is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children.

United States service

The Service is operated from the United States. Information may be processed in the United States and other locations where our service providers operate, subject to applicable law.

Policy changes

We may update this Policy. We will post the revised version with a new effective date and provide additional notice when legally required.

Contact

Email privacy and support requests to support@businessaidoctor.com.

This private-beta draft should be reviewed by qualified legal counsel before paid public launch.