Privacy Policy

This Privacy Policy explains how The Business AI Doctor (“The Business AI Doctor,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use our business visibility, website analysis, treatment, integration, and monitoring services (the “Service”).

Information we collect

Account information. We collect information such as your name, email address, password credential, plan, and session information. Passwords are stored as one-way hashes rather than readable passwords.

Business information. We collect the business facts you provide, including business name, website, contact information, location, category, services, descriptions, and website-management details.

Analysis and treatment records. We store checkup evidence, scores, diagnoses, discovery scenarios, proposed website treatments, approvals, verification results, monitoring history, audit records, and notifications.

Integration information. If you connect Google, WordPress, or another supported provider, we receive authorized account data and tokens needed to operate the integration. Integration credentials are encrypted before storage where supported and are excluded from customer data exports.

Technical information. We may process IP address, browser and device information, request logs, security events, and cookies or similar session technologies needed to authenticate users, prevent abuse, and operate the Service.

How we use information

• Provide, secure, maintain, and improve the Service.
• Perform requested checkups, generate recommendations, apply owner-approved treatments, verify results, and run monitoring.
• Authenticate users, prevent fraud and abuse, troubleshoot failures, and maintain audit records.
• Communicate service notices, alerts, support responses, and material policy changes.
• Comply with law and protect users, the public, and our legal rights.

How we share information

We do not sell personal information. We may share information with hosting, database, email, AI, analytics, security, payment, and integration providers only as reasonably necessary to operate the Service; with professional advisers under appropriate duties; when required by law; to protect rights and safety; or in connection with a merger, financing, acquisition, or sale of assets.

Connected providers process information under their own terms and privacy policies. You choose whether to connect optional integrations and may disconnect them.

AI processing and accuracy

When AI features are enabled, relevant verified business facts and requested treatment context may be sent to an AI service provider to generate draft content. Do not submit sensitive personal, medical, financial-account, or confidential third-party information unless the Service expressly requests and authorizes it. AI output may be incomplete or inaccurate and must be reviewed before use.

Retention and deletion

We retain information while your account is active and as reasonably needed to provide the Service, maintain security and audit records, resolve disputes, and meet legal obligations. The Account page provides a data download and permanent account deletion workflow. Deletion may not immediately remove limited information retained in protected backups, fraud-prevention records, or records we must keep by law; such information remains restricted until deletion or expiration.

Security

We use reasonable administrative, technical, and organizational safeguards, including hashed passwords, encrypted integration credentials, secure cookies in production, access controls, request protections, rate limiting, and dependency monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices

You may update business information, disconnect optional integrations, download your account data, or permanently delete your account through the Service. You may also contact us regarding access, correction, deletion, or privacy questions.

Children

The Service is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children.

United States service

The Service is operated from the United States. Information may be processed in the United States and other locations where our service providers operate, subject to applicable law.

Policy changes

We may update this Policy. We will post the revised version with a new effective date and provide additional notice when legally required.

Contact

A dedicated support email is being established during the private beta. Until it is published, use the Account page to download or delete your data. Do not enroll paying customers until a monitored privacy contact is configured.

This private-beta draft should be reviewed by qualified legal counsel before paid public launch.