Privacy Policy

1. Information We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, password, and subscription tier when you register for AIBizBox
• Payment Information: Billing address and payment method details processed by Stripe (we do not store full card numbers)
• Business Data: Content you upload, create, or manage through the AI Twin, including copy, images, contact lists, and campaign data
• Subscriber Data (via your use): Email addresses and subscriber information you manage through AIBizBox's email marketing tools
• Usage Data: Platform interaction logs, feature usage patterns, and performance metrics
• Device and Connection Data: IP address, browser type, operating system, and referring URL when you access AIBizBox
• Communications: Emails and support tickets you send to us

2. Dual-List Architecture

AIBizBox operates a dual-list lead architecture for email marketing:

• Your User List: The contact lists and subscriber data you create and manage within AIBizBox for your own email campaigns. You are the data controller of this list. We process it on your behalf as a data processor.
• Platform Master List: AIBizBox's internal master list of all platform users, used for service delivery, billing, and critical platform communications. This is controlled by AFFILIATEZ_UNIVERSAL.

Your subscriber list data is never shared with third parties or combined with the platform master list for marketing purposes without your explicit consent.

3. AI Twin Data Processing

The AI Twin processes your business data — including content you upload, your subscriber lists, your branding inputs, and your marketing preferences — to generate personalized content and automate business workflows on your behalf.

This processing is performed using AI systems operating within our infrastructure. Your data is not shared with AI providers outside of our controlled pipeline. We use anonymized, aggregated data for model improvement purposes only. We do not use your private business data to train models accessible by other users.

You may request deletion of your processed data at any time by emailing support@aibizbox.polsia.app. Deletion requests are processed within 30 days.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

• Contract: Processing necessary to perform our contract with you (providing AIBizBox services)
• Legitimate Interests: Fraud prevention, platform security, and service improvement where our interests are not overridden by your rights
• Consent: Marketing communications, optional data sharing, and certain analytics — you can withdraw consent at any time
• Legal Obligation: Tax compliance, dispute resolution, and regulatory reporting

5. CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of categories and specific pieces of personal data collected about you
• Right to Delete: Request deletion of your personal data (subject to certain exceptions)
• Right to Opt-Out: Opt out of the sale of your personal data (we do not sell personal data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise any of these rights, email support@aibizbox.polsia.app with the subject line "CCPA Request." We will respond within 45 days.

6. Cookies and Tracking

We use cookies and similar tracking technologies on AIBizBox. See our Cookie Policy for full details on the cookies we use, their purpose, and how to manage them.

We also use a first-party analytics pixel (set by Polsia, our platform provider) that assigns a randomized visitor ID stored in localStorage and sends a beacon on page load. This is used for aggregate platform analytics only and does not track across third-party sites.

7. Third-Party Integrations

AIBizBox uses the following third-party services:

• Stripe: Payment processing. Stripe collects and processes payment data independently under their own privacy policy. We do not store full card numbers.
• OpenAI (via Polsia AI Proxy): AI content generation. Data sent through this proxy is processed within our controlled pipeline. Your private business content is not used to train OpenAI models.
• R2 (Polsia Object Storage): File and image storage. Files you upload are stored under your account and are not accessible to other users.
• Polsia Platform: Core infrastructure including authentication, hosting, and platform analytics. Polsia's infrastructure is covered by their own data processing agreement.

We do not share your personal data with any third party for their own marketing purposes. All third-party integrations are reviewed for GDPR/CCPA compliance.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Account data is retained for 2 years after account closure. Subscriber list data is deleted within 30 days of account termination. Usage logs are retained for 12 months.

9. Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including TLS encryption in transit, access controls, regular security audits, and secure cloud infrastructure via Polsia and Neon (PostgreSQL). No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we make reasonable efforts to protect your data.

10. International Data Transfers

If you are located outside the United States, your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.

11. Children's Privacy

AIBizBox is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

12. Your Rights

You have the right to:

• Access a copy of your personal data (free of charge within any 12-month period)
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Withdraw consent for optional processing at any time
• Lodge a complaint with your local data protection authority

To exercise any rights, email support@aibizbox.polsia.app. We respond to all verifiable requests within 30 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. The effective date at the top of this page reflects the most recent update.

14. Contact

For privacy-related questions or to exercise your data rights, contact support@aibizbox.polsia.app.