Privacy Policy

1. Introduction

Bizmorph ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to that data. By using the Bizmorph platform, you consent to the practices described herein.

2. Age Restrictions

The Bizmorph platform is intended for use by individuals who are 18 years of age or older. We do not knowingly collect, store, or process personal data from anyone under the age of 18.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at hello@skservices.store. We will promptly delete any such data upon verification. This applies equally to lead data collected through embedded bots on third-party websites.

Under India's Digital Personal Data Protection Act 2023 (DPDP Act), processing personal data of children (under 18) requires verifiable parental consent. As our platform is not directed at minors, we do not seek or accept such consent, and we request that minors do not use or interact with our platform.

3. Data We Collect

Account Data

When you register, we collect your name, email address, and password (stored as a hashed value). This is used to authenticate you and manage your account.

Bot Configuration Data

We store your bot settings, business knowledge base, embed preferences, and WhatsApp contact details. This data is used to power your AI assistant.

Lead Data

When visitors interact with your embedded bot and submit their contact information, that data (name, email, phone, message) is stored in our database and linked to your bot and account. You are the data controller for leads collected through your bot. As a Bizmorph user, you are responsible for ensuring that your embedded bot is not directed at or used by minors, and that any lead data you collect complies with applicable laws.

Usage Data

We track the number of AI requests made each month against your plan limit. This includes timestamps and request counts, but not the content of individual conversations unless required for debugging.

Payment Data

Payments are processed by Lemon Squeezy. We do not store your card details. We receive transaction metadata (plan type, payment status, timestamp) from Lemon Squeezy for billing purposes.

Technical Data

We may collect IP addresses, browser type, and device information for security and analytics purposes.

4. AI Processing

When a visitor sends a message to your bot, that message — along with your bot's knowledge base — is sent to OpenAI's API to generate a response. This means visitor messages are processed by OpenAI in accordance with their privacy policy.

We recommend informing your website visitors that AI is in use, and that their messages may be processed by a third-party AI provider. We do not store full conversation histories by default.

5. How We Use Your Data

• To provide and maintain the Bizmorph Service
• To authenticate your account and protect against unauthorised access
• To generate AI responses using your business knowledge
• To enforce usage limits based on your subscription plan
• To process payments and manage billing
• To send important service communications (we do not send marketing emails without consent)
• To improve the platform's performance and reliability

6. Cookies and localStorage

Bizmorph uses browser localStorage to store your authentication token (JWT) on the client side. This keeps you logged in between sessions. We also use cookies for session management and analytics. See our Cookie Policy for full details.

7. Data Sharing

We do not sell your personal data. We share data only with:

• OpenAI — to generate AI responses (message content only, not account data)
• Lemon Squeezy — to process payments securely
• MongoDB Atlas — our database provider, where all data is stored securely

All third-party providers are bound by their own privacy policies and data processing agreements.

8. Data Retention

We retain your account data for as long as your account is active. Lead data is retained until you delete it from your dashboard. Upon account deletion, all associated data is removed within 30 days.

9. Your Rights

Under applicable Indian law and general data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at hello@skservices.store.

10. Account Deletion

You can request account deletion at any time via your dashboard settings or by emailing us. Upon deletion, your personal data, bot configurations, and lead data will be permanently removed within 30 days.

11. Security

We implement industry-standard security measures including password hashing, JWT-based authentication, HTTPS encryption, and rate limiting. However, no system is completely secure and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the dashboard. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related queries, contact us at hello@skservices.store.