Privacy Policy

Last updated: May 29, 2026

BizSide, Inc. ("BizSide," "we," "us," or "our") operates bizside.ai and provides business assessment, growth, and operations services for independent service professionals — barbers, stylists, and other small business owners. This policy explains what information we collect, how we use it, how we handle the information of the clients you serve, and the rights you have.

We wrote this to be readable, not to bury things in legal language. If anything isn't clear, email us at support@bizside.ai.

Two kinds of people, two different roles

This policy covers two groups, and our responsibilities differ for each:

• Business owners who use BizSide (we call you "operators," or "you"). For your own information, BizSide is the "controller" — we decide how it's used, within the limits of this policy.
• The clients of those businesses. When you engage us to run parts of your business — for example, reaching out to your past clients or requesting reviews — we handle your clients' personal information on your behalf and under your direction. For that information, you are the controller and BizSide acts as your "service provider" (sometimes called a "processor"). We use your clients' information only to provide the services you've asked us to perform — never for our own purposes.

If you're a client of a business that contacted you through BizSide and you want to reach that business, the fastest path is to reply to it directly. You can also email us at support@bizside.ai and we'll route your request to the right business.

Information we collect

When you request a free assessment, we collect:

• Your email address
• Your booking page or website URL
• Your zip code

When we prepare your assessment, we also collect publicly available information about your business from sources like Google, Yelp, Instagram, and your booking platform. This is the same information any potential client would see when searching for you.

If you become a BizSide customer, we also collect:

• Account and contact details (name, business name, phone number, mailing address)
• Access you grant us to your booking platform (such as Vagaro or Booksy) so we can do the work you've hired us for
• Information from your business systems — appointments, services, pricing, and your client list
• Records of our communications with you
• Billing information, which is handled by our payment processor (we don't store full card numbers ourselves)

Your clients' information. To do the work you engage us for, we may process personal information about your clients that comes from your booking platform or that you provide to us — typically names, phone numbers, email addresses, and appointment history. We handle this information only to provide your services (see "How we handle your clients' information" below).

Website analytics. We collect standard, privacy-focused analytics (pages visited, referring site, browser type) to understand how people use our site. We do not use third-party advertising trackers, and we do not sell or share this data for advertising.

How we use your information

We use the information above to:

• Prepare and deliver your personalized business assessment
• Provide the services you engage us for (which may include client outreach, review requests, appointment and booking management, online-presence updates, and related operations)
• Communicate with you about your account and our services
• Process payments
• Improve our services and develop new features — when we analyze data across businesses to build benchmarks or improve our service, we use only anonymized, aggregated information, and never in a way that exposes one business's data to another
• Meet legal and compliance obligations

We do not sell your personal information, and we do not share it with third parties for their own marketing.

How we handle your clients' information

This is the part operators care about most, so we're explicit:

• We process your clients' information only on your behalf and under your instructions, to deliver the services you've engaged us to perform.
• We do not use your clients' information for our own marketing, and we do not sell it to anyone.
• We never share one operator's client information with another operator. Your client list is yours.
• When we use data to build market benchmarks, we use only anonymized and aggregated figures, with safeguards so that individual businesses and individuals can't be identified.
• You are responsible for having the right to contact the clients in your list and for the accuracy of the information you provide to us.
• The detailed terms governing how we handle your clients' data are set out in the services agreement (including a data processing addendum) you enter into when you become a customer. That agreement, together with this policy, governs that relationship.

Text messages and phone calls

If you engage us to contact your clients — for example, appointment reminders, re-engagement messages, or review requests — those messages are sent on your behalf. We follow applicable communications laws:

• Recipients can opt out at any time (for example, by replying STOP to a text), and we honor those requests promptly.
• We send messages only to the contacts you provide or authorize, within the hours and frequency limits we agree on with you.
• You are responsible for ensuring you have the necessary consent to contact your clients. We provide opt-out handling and reasonable safeguards, but the underlying relationship and permission are yours.

Service providers we rely on

We use a limited set of third-party services to operate. They process information on our behalf, under contracts that require them to protect it and use it only for the services they provide to us:

• Formspree — processes form submissions from our website
• Cloudflare — website hosting, content delivery, and security
• Google Workspace — email and document storage
• Anthropic — the AI that helps generate your assessment and power our services; business and public data is processed to produce your reports and run your services
• Amazon Web Services (AWS) — secure cloud hosting and storage, including where your reports are stored
• Supabase — secure database for operator and service data
• Twilio — delivery of text messages and other communications sent on your behalf
• Your booking platform (such as Vagaro or Booksy) — accessed with your permission to read and manage your business data

We only work with providers that maintain reasonable security practices, and we update this list as our services evolve.

How we share information

We share information only:

• With the service providers listed above, to operate our services
• When you direct us to (for example, posting a review request on your behalf)
• To comply with the law, respond to lawful requests, or protect our rights, our users, or the public
• In connection with a business transfer (such as a merger or acquisition), in which case we'll require the recipient to honor this policy

We never sell your personal information or your clients' personal information.

Data retention and deletion

We keep information for as long as needed to provide our services or as required by law. If you ask us to delete your information, we'll do so within 30 days, except where we have a legal obligation to keep it. When you stop being a customer, you can ask us to delete or return your business and client data — your data is yours, and we make it easy to take it with you.

Your choices and rights

You can:

• Request a copy of the personal information we hold about you, in a portable format
• Ask us to correct inaccurate information
• Ask us to delete your information
• Opt out of marketing communications at any time

Depending on where you live, you may have additional rights under state privacy laws. For example, California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct their information, and to opt out of the "sale" or "sharing" of personal information — which we don't do. We don't discriminate against anyone for exercising these rights.

To exercise any of these, email support@bizside.ai. We'll respond within 30 days. If you're the client of a business we work with and want to exercise rights over your information, contact that business directly, or reach us and we'll route your request to them.

Data security

We use commercially reasonable measures to protect information, including encrypted connections (HTTPS), access controls, and vetted third-party services. No system is perfectly secure, but we take this seriously and limit access to the information we hold.

Where your data is handled

BizSide serves U.S.-based businesses, and we process and store information in the United States.

Health information

BizSide is built for general service businesses, and we do not seek to collect health or medical information. If our services expand into areas where such information could be involved, we'll update this policy and our practices accordingly.

Children's privacy

Our services are designed for business professionals. We do not knowingly collect information from anyone under 18. If you believe we have, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll note the updated date at the top. Continued use of our services after changes constitutes acceptance.

Contact

BizSide, Inc.
Bellevue, WA
support@bizside.ai