This Privacy Notice explains how LeadsGPS LLC ("LeadsGPS", "we", "us") collects, uses, shares, and protects personal data when you use Biz CommandOS (the "Service"). LeadsGPS is the data controller for personal data processed through the Service.
1. Data we collect
- Account data — name, email address, password hash, profile details.
- Organization content — the CRM records, contacts, tasks, projects, meetings, notes, documents, invoices, and other business data you or your team put into the Service.
- AI inputs & outputs — the prompts and content you submit to AI features and the outputs generated in response.
- Integrations data — data you authorize us to read from connected services (e.g. Google Calendar, PayPal, website enrichment sources).
- Support communications — messages you send us and their metadata.
- Usage & device data — IP address, browser and device information, log data, timestamps, feature usage, and diagnostic events.
- Cookies & similar technologies — see "Cookies" below.
Payment card details are collected and processed directly by Paddle, our Merchant of Record. We do not receive or store full payment card numbers.
2. How we use your data
- To create and maintain your account and organization;
- To provide, operate, and improve the Service, including AI features;
- To secure the Service and detect fraud, abuse, and policy violations;
- To respond to support requests and communicate about the Service;
- To send transactional messages (billing receipts, security alerts) and, where permitted, product updates;
- To comply with legal obligations and enforce our terms.
3. Legal bases (EU/UK users)
Where GDPR or UK GDPR applies, we rely on the following legal bases:
- Contract — to provide the Service you have signed up for.
- Legitimate interests — to secure the Service, prevent fraud, improve our product, and communicate with customers.
- Legal obligation — for tax, accounting, and compliance requirements.
- Consent — where required (e.g. certain marketing communications or non-essential cookies), which you may withdraw at any time.
4. Who we share data with
- Service providers / subprocessors — hosting, database, and infrastructure providers used to run the Service.
- AI providers — model providers that process AI prompts and generate outputs on our behalf.
- Merchant of Record (Paddle) — for sale of the Service, subscription management, payments, tax compliance, invoicing, and refund handling.
- Analytics & error monitoring — providers that help us understand usage and diagnose problems.
- Integrations you connect — third-party services you explicitly link to your account (e.g. Google Calendar, PayPal).
- Professional advisers — legal, accounting, and audit advisers under duties of confidentiality.
- Authorities — where required by law, subpoena, or to protect our rights, users, or the public.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.
We do not sell your personal data.
5. International transfers
LeadsGPS is based in the United States. If you access the Service from the EEA, UK, Switzerland, or another region, your personal data may be transferred to and processed in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the UK IDTA, and take additional measures where needed.
6. Data retention
We keep personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it. If you delete your account, we will delete or anonymise your personal data within a reasonable period, subject to backups and legal retention requirements.
7. Your rights
Depending on where you live, you may have rights to access, rectify, delete, or port your personal data; to restrict or object to certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority. EEA/UK users have these rights under the GDPR / UK GDPR and we aim to respond within one month. To exercise your rights, contact us at privacy@bizcommandos.com.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, isolated per-organization data access (row-level security), and audit logging. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your data in line with industry practice.
9. Cookies
We use essential cookies to keep you signed in, remember preferences, and secure the Service. Where used, we may also employ analytics or product-improvement cookies. You can control cookies in your browser settings; disabling essential cookies may affect core functionality.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
11. Changes
We may update this Privacy Notice from time to time. If changes are material, we will provide reasonable notice (for example, in-app or by email) before they take effect.
12. Contact
LeadsGPS LLC — email privacy@bizcommandos.com with any privacy questions or data-rights requests.