1. Scope and Controller Identity
This Privacy Policy describes how [Operator Name] ("we," "us," or "our"), the operator of Beezy.FYI, collects, uses, and discloses personal information when you use the Service. For purposes of applicable privacy law, [Operator Name]is the data controller.
2. Information We Collect
2a. Information You Provide
- Account registration: email address, username, password (hashed).
- Payment: billing name, billing address. We do not store full payment card numbers — all payment data is handled directly by Stripe, Inc. under Stripe's own privacy policy and PCI DSS compliance program.
- Support communications: any information you include in emails or support requests.
2b. Information Collected Automatically
- Usage data: pages visited, features used, timestamps, referring URL.
- Device and browser data: IP address, browser type, operating system, device identifiers.
- Cookies and similar technologies: session cookies required for authentication; analytics cookies (see Section 5).
2c. Information We Do Not Collect
We do not collect Social Security numbers, government-issued ID numbers, biometric identifiers, precise geolocation, or health information.
3. How We Use Personal Information
We use personal information to:
- Provide, maintain, and improve the Service.
- Process payments and subscriptions.
- Send transactional communications (account confirmations, receipts, renewal notices).
- Send service-related announcements (e.g., material changes to Terms or pricing).
- Enforce geographic restrictions required by applicable law.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
We will not sell your personal information to third parties.
4. Legal Basis for Processing
We process personal information on the following bases: (a) performance of a contract (your subscription agreement with us); (b) compliance with legal obligations; and (c) our legitimate interests in operating and improving the Service, where those interests are not overridden by your rights.
5. Cookies
We use strictly necessary session cookies to authenticate logged-in users. We may use analytics cookies (e.g., Vercel Analytics, Google Analytics) to understand aggregate usage patterns. Analytics cookies are not required for the Service to function. You may disable cookies in your browser settings; doing so may impair authentication functionality.
6. Disclosure of Personal Information
We share personal information only in the following circumstances:
- Service providers: Stripe (payment processing), Vercel (hosting and analytics), Clerk (authentication — if enabled), and similar vendors who process data on our behalf under written data processing agreements.
- Legal process: in response to a valid subpoena, court order, or other legal demand, or to protect the rights, property, or safety of [Operator Name], our users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of all or substantially all of our assets, provided the successor agrees to honor this Privacy Policy.
- With your consent.
7. Data Retention
We retain account data for as long as your subscription is active and for a reasonable period thereafter for legal, tax, and dispute-resolution purposes (generally no more than 3 years post-cancellation, unless a longer period is required by law). Aggregate, de-identified analytics data may be retained indefinitely.
8. Security
We implement industry-standard technical and organizational measures to protect personal information, including TLS encryption in transit, hashed password storage, and access controls. No system is completely secure; we cannot guarantee absolute security of your information.
9. Children
The Service is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it promptly.
10. Your Rights (Illinois and U.S. Federal)
Under the Illinois Personal Information Protection Act (815 ILCS 530/) and applicable federal law, you have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate personal information.
- Request deletion of your account and associated personal information, subject to legal retention obligations.
- Opt out of marketing communications at any time via the unsubscribe link in any marketing email or by contacting us directly.
To exercise any of these rights, contact us at [legal@beezy.fyi]. We will respond within a reasonable timeframe consistent with applicable law.
11. Data Breach Notification
In the event of a security breach affecting your personal information, we will notify affected users in accordance with the Illinois Personal Information Protection Act (815 ILCS 530/10), which requires notification in the most expedient time possible and without unreasonable delay.
12. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on the Service at least 14 days before the changes take effect.
14. Contact
Privacy inquiries: [legal@beezy.fyi]