Privacy Policy

1. Information We Collect

2. How We Use Your Information

• •To provide, maintain, and improve our services
• •To send transactional and promotional communications to business owners (with your consent)
• •To analyze usage patterns and enhance user experience
• •To comply with legal obligations
• •To detect, prevent, and address technical issues and fraud

4. Information Sharing

We do not sell your personal data or your business customer data to third parties. Your data is stored securely in our database and is not exposed to external parties except for service providers listed below who assist us in operating our platform. Business customer data remains the exclusive property of you and your business.

5. Third-Party Service Providers

We use the following third-party services:

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information and business customer data against unauthorized access, alteration, disclosure, or destruction. Data is encrypted both in transit and at rest. However, no method of transmission over the Internet is 100% secure. You remain responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your account information and business data for as long as necessary to provide our services and fulfill the purposes outlined in this policy. You can request deletion of your account and associated data at any time. When you delete data through the platform, it is permanently removed from our systems.

9. Lawful Basis for Processing (GDPR Article 6)

Biznifly processes your personal data based on the following lawful bases:

• •Contractual necessity: Processing is necessary to perform the services you have requested
• •Legitimate interests: We process data to improve our services, prevent fraud, and ensure platform security
• •Legal obligations: Processing is required to comply with applicable laws and regulations
• •Consent: For marketing communications and certain tracking technologies, we rely on your explicit consent

10. Children's Data Protection

Biznifly is not intended for users under 16 years of age (or the age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you are under 16, please do not use our services. If we become aware that a child has provided us with personal data, we will take steps to delete such information and terminate the child's account.

11. Automated Decision-Making

Biznifly does not currently use automated decision-making (including profiling) that produces legal effects concerning you. If we implement such processing in the future, we will provide notice and comply with all applicable legal requirements, including giving you the right to object and obtain human review.

12. International Data Transfers

Our service provider Railway processes data in the United States. Biznifly relies on Standard Contractual Clauses (SCCs) to ensure an adequate level of protection for data transferred outside the EU/Hungary. You can request a copy of these safeguards by contacting us. We ensure that any transfer of personal data outside the EU complies with GDPR Article 46.

13. Your Customers' Privacy Rights (Data Controller)

14. Your Data Subject Rights (GDPR Articles 15-22)

Under GDPR, you have the following rights regarding your personal data processed by Biznifly:

• •Right to access: Request a copy of all personal data we hold about you
• •Right to rectification: Correct inaccurate or incomplete personal data
• •Right to erasure ('right to be forgotten'): Request deletion of your data under certain conditions
• •Right to restrict processing: Limit how we process your data
• •Right to data portability: Receive your data in a structured, portable format (JSON/CSV)
• •Right to object: Oppose processing of your data for marketing or other purposes
• •Right to withdraw consent: Withdraw consent for data processing at any time
• •Rights related to automated decision-making: Not be subject to decisions based solely on automated processing

15. How to Exercise Your Rights

To exercise any of your privacy rights, please contact us in writing at privacy@biznifly.app with:

• •Your name and email address associated with your Biznifly account
• •A clear description of the right you wish to exercise (access, deletion, portability, etc.)
• •Any relevant details (such as the date range for which you want data)

We will respond to your request within 30 days (extendable by two months for complex requests). We may ask for additional information to verify your identity.

16. Data Processing Agreement (DPA)

For business owners who are data controllers, Biznifly is a data processor under GDPR Article 28. A Data Processing Agreement is available upon request and specifies:

• •Processing scope and instructions
• •Security measures and technical safeguards
• •Sub-processor management and notification procedures
• •Your rights to audit and inspect our processing
• •Data return and deletion upon termination
• •International transfer mechanisms (SCCs)

17. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, Biznifly will:

• •Notify you without undue delay (within 72 hours of discovery)
• •Report the breach to the Hungarian Data Protection Authority (NAIH) if required by law
• •Provide information about the nature of the breach, affected data, and mitigation measures
• •Assist you in fulfilling your own breach notification obligations to your customers

18. Sub-processors

Biznifly uses the following sub-processors who may process personal data on our behalf:

20. Supervisory Authority (DPA)

You have the right to lodge a complaint with the Hungarian Data Protection Authority (NAIH) if you believe Biznifly has violated your privacy rights or GDPR obligations:

• •Name: National Authority for Data Protection and Freedom of Information (NAIH)
• •Email: budapest@naih.hu
• •Website: www.naih.hu
• •You also have the right to lodge a complaint with the data protection authority of your country of residence or place of work.

21. Contact Us