Privacy Policy

Biz Flow Connect LLC runs this website, the Biz Flow Connect learning platform, and the BizFlow Connect expense and mileage tools, including the mobile app. This policy explains what information we collect when you use them, what we do with it, and the choices you have.

The short version: we collect what the product needs to work, we do not sell it, we do not use it for advertising, and the most sensitive thing we could touch — where you drive — stays on your phone unless you choose to save a drive.

What we collect

• Account details — your name, email address, and password. The password is stored only as a cryptographic hash; nobody at Biz Flow Connect LLC can read it.
• Purchase records — what you bought, when, and the order reference. Payments are processed by Stripe. Your card number goes to Stripe, never to us, and we do not store it.
• Learning activity — the courses you are enrolled in, your progress through lessons, your quiz attempts and results, and any certificates you earn.
• Business records you enter — trips, expenses, income, vehicles, jobs, and the receipt photos you attach. These are your records, kept so you can produce them at tax time.
• Text read from receipts — when you photograph a receipt, software running on our own servers reads the image and suggests an amount and a date for you to confirm or correct. The text it reads is stored with the receipt. No outside service sees your receipt images.
• Sign-in records — the IP address and browser or device type of each signed-in session, kept so you can see your own signed-in devices and sign one out.
• Messages you send us — contact-form submissions and support email.

Location data and drive detection

The mobile app can detect business drives automatically. Because where you drive is the most sensitive information the app could touch, the rules are strict, and they are built into the software rather than promised on top of it:

• Detection is off until you turn it on. Automatic drive detection is disabled by default and starts only after you have read and accepted an explicit consent notice in the app.
• While the app is detecting, the GPS trail stays on your phone. Nothing about your movements is sent anywhere during a drive.
• Only drives you keep are uploaded, and only as a simplified shape. When you review a detected or tracked drive and choose to keep it, a simplified route line of at most 500 points is uploaded and stored with that trip, for your own records and mileage substantiation.
• Dismissed drives are deleted. A drive you dismiss is removed from the phone entirely and is never uploaded.
• The raw GPS stream is never uploaded — for any drive, kept or not.
• The app’s diagnostic log never contains coordinates, and it leaves your phone only if you choose to share it with support.
• If we change what drive detection does with your data, detection pauses until you have read and accepted the new terms. An earlier yes is not carried over to a promise you have not seen.

A saved route belongs to its trip: it is stored for exactly as long as the trip exists, and deleting the trip deletes the route with it.

Services we rely on

We do not sell your information, and we do not share it for advertising. The services below process data on our behalf, only to run the product:

• Amazon Web Services — hosts our servers and database, stores files such as receipt images and course media, and delivers our email (Amazon SES).
• Stripe — processes payments. Stripe receives what a payment requires, such as your card details and email, and handles them under its own privacy policy. We receive confirmation of the payment, never your card number.
• Google — powers address suggestions and road-distance estimates in the expense tools. When you type an address, the text you typed is sent from our servers to Google’s Places and Routes APIs to suggest completions and measure the driving distance. No Google account of yours is involved or linked, and these suggestions are only ever offered back for you to accept or ignore.

Cookies

We use cookies only to keep you signed in. There are no advertising cookies, no analytics trackers, and no third-party scripts watching how you use the site or the app.

How long we keep things

• Your records — course progress, trips, expenses, income, receipts — are kept while your account is active, so last year’s records are still there at tax time.
• Receipt photos are stored as two files: the untouched original and a clear, storage-friendly copy. The original is deleted 30 days after upload; the copy remains attached to the expense as its receipt.
• A route is kept exactly as long as its trip. Deleting a trip deletes its route.
• Purchase and refund records are kept as long as accounting and tax rules require, even after an account closes.
• To delete your account, email us at the address below. We delete your records except those we are legally required to keep, and we tell you which those are.

Your rights

• Access and correction — your account, learning history, and business records are visible and editable in the product itself.
• Export — you can download your business records as CSV files and as a year archive: a ZIP of your receipts, a manifest naming each one and the expense it substantiates, and your mileage log, built to hand to a tax preparer.
• Deletion — ask by email and we will delete your account and records as described above.
• A copy of your data — if the exports above do not cover what you need, ask and we will provide it.

Security

Traffic to and from our servers is encrypted. Receipt images and other files live in private storage and are only ever served after checking that the person asking owns them — there are no public links to guess. Passwords are stored as hashes. No system is perfectly secure, and we will tell you if a breach affects your information.

Children

Our products are tools for people running or starting a business. They are not directed at anyone under 18, and we do not knowingly collect personal information from children.

Changes to this policy

When our practices change, this policy changes with them, and the effective date at the top of this page shows when. Every published version of this document is retained, so what the policy said on any given date is always on record.

Contact

Questions about this policy, or requests concerning your information, go to support@bizflowconnection.net or through the contact page on this website.