Privacy Policy

Business Genius LLC
30 N Gould St, Ste R
Sheridan, WY 82801
(307) 429-4019
[email protected]
Website: https://mybusinessgenius.com

Effective Date: 12/6/24
Last Updated: 12/6/25

1. Introduction

This Privacy Policy explains how Business Genius LLC (“Business Genius,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our website, software, AI automation tools, and related services (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, you must not use the Services.

2. Scope

This Privacy Policy applies to information we collect:

• Through our website at https://mybusinessgenius.com;
• Through our SaaS platforms, integrations, and AI tools;
• Through email, forms, and other communications with us.

3. Information We Collect

3.1 Information You Provide Directly

• Contact details (name, email address, phone number, company name, job title);
• Account registration data (login credentials, profile details);
• Billing and payment details (billing address, transaction information – processed by third-party payment processors);
• Support communications and any other information you choose to provide.

3.2 Information Collected Automatically

• Device information (IP address, browser type, operating system);
• Usage data (pages viewed, features used, timestamps, referring URLs);
• Cookies and similar tracking technologies, as described in our Cookies section below.

3.3 Information from Third Parties

• Data from integrations (e.g., CRM, marketing platforms, communication tools) that you authorize us to connect;
• Service providers providing analytics, security, or fraud prevention.

4. How We Use Your Information

We use information for the following purposes:

• To provide, operate, and maintain the Services;
• To configure and run AI automations and workflows at your direction;
• To process transactions and manage subscriptions;
• To communicate with you, including sending service-related notices and responding to support requests;
• To personalize your experience and improve our Services;
• To perform analytics, debugging, and security monitoring;
• To comply with legal obligations and enforce our Terms of Service.

5. Legal Bases for Processing (GDPR/UK GDPR)

Where GDPR or similar laws apply, we process personal data under the following legal bases:

• Contract: To provide the Services you request;
• Legitimate Interests: To improve Services, secure systems, and prevent fraud, where these interests are not overridden by your rights;
• Consent: For certain marketing, cookies, or other processing where required by law;
• Legal Obligation: To comply with applicable laws and regulations.

6. AI, Automated Processing & Training

Our Services use AI to generate content, make recommendations, and automate workflows. We may use your data to:

• Generate AI Output at your request or according to your configurations;
• Improve model performance and system reliability, using aggregated and/or de-identified data;
• Analyze usage patterns to enhance user experience and security.

We do not use your identifiable personal information to train generalized AI models in a way that would allow other customers to identify you, unless:

• We have your explicit consent; or
• We are permitted or required to do so by applicable law.

You may contact us if you wish to object to or restrict certain types of AI-related processing where your local law grants such rights.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings;
• Authenticate users and secure sessions;
• Understand how our website and platforms are used;
• Improve performance and user experience.

You can manage cookie preferences through your browser settings and, where required, via our cookie banner or settings tool. Disabling certain cookies may impact functionality.

8. How We Share Information

We may share information as follows:

• Service Providers: With trusted vendors who perform services on our behalf (e.g., hosting providers, payment processors, analytics services, email delivery);
• Integrations: With third-party services you choose to connect (e.g., CRM, communication, or marketing tools);
• Legal & Compliance: With regulators, law enforcement, or others when required by law or to protect our rights, property, and safety or that of others;
• Business Transfers: As part of a merger, acquisition, or other corporate transaction, subject to appropriate confidentiality safeguards.

We do not sell personal information as “sell” is defined under CCPA/CPRA.

9. International Data Transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries with data protection laws that may differ from those in your region. Where required, we use appropriate safeguards, such as standard contractual clauses, for cross-border data transfers.

10. Data Retention

We retain personal information only as long as reasonably necessary to achieve the purposes described in this Privacy Policy, including:

• Providing Services to you;
• Complying with legal and accounting obligations;
• Resolving disputes and enforcing agreements.

We may retain aggregated or de-identified data for longer periods, which does not identify you personally.

11. Security

We implement commercially reasonable technical and organizational measures to protect personal information, including encryption, access controls, and secure hosting practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your Privacy Rights

12.1 EU/UK (GDPR/UK GDPR)

If you are located in the European Union or United Kingdom, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data in certain circumstances;
• Restrict or object to processing under certain conditions;
• Request data portability;
• Lodge a complaint with a supervisory authority.

12.2 California (CCPA/CPRA)

California residents may have the right to:

• Know what categories of personal information we collect, use, and disclose;
• Request access to specific pieces of personal information we hold about you;
• Request deletion of personal information, subject to legal exceptions;
• Correct inaccurate information;
• Not be discriminated against for exercising privacy rights.

We do not sell personal information, and therefore no opt-out of sale is required for that purpose.

12.3 Exercising Your Rights

To exercise your rights, contact us at [email protected]. We may need to verify your identity before fulfilling your request. Where permitted, you may use an authorized agent to submit requests on your behalf, subject to verification.

13. Data Processing Addendum (DPA) for Business Customers

For business customers who require contractual data processing terms (such as under GDPR/UK GDPR), we may enter into a separate Data Processing Addendum that supplements this Privacy Policy and our Terms of Service. The DPA will describe:

• The subject matter and duration of processing;
• The nature and purpose of processing;
• The types of personal data and categories of data subjects;
• Our obligations as a “processor” or “service provider” under applicable law;
• Security measures and subprocessor obligations.

To request a DPA, please contact us at [email protected].

14. HIPAA and Health Information

Our Services are not designed to handle Protected Health Information (“PHI”) as defined under the U.S. Health Insurance Portability and Accountability Act (“HIPAA”), unless we have explicitly agreed in writing and executed a Business Associate Agreement (BAA) with you.

If you are a covered entity or business associate under HIPAA and wish to use our Services with PHI, you must contact us to discuss whether a HIPAA-compliant configuration and BAA are available. Otherwise, you agree not to upload or process PHI through the Services.

15. Children’s Privacy

Our Services are intended for business users and are not directed to children under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will take reasonable steps to delete it.

16. Third-Party Sites & Services

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party sites or services you use.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will update the “Last Updated” date at the top of this page and, where required, provide additional notice. Your continued use of the Services after any changes become effective constitutes your acceptance of the revised Privacy Policy.

18. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Business Genius LLC
30 N Gould St, Ste R
Sheridan, WY 82801
(307) 429-4019
[email protected]