Privacy notice

Data we collect and why

• Account data — email address, authentication identifiers, sign-in provider, password hashes held by our authentication provider, and account timestamps. Used to create and secure your account and to give you access. Legal basis: performance of our contract with you.
• Plan and workspace content — the plans, figures, notes, checklists, project names, workspace members and shared report links you create while signed in. Used to store and display your work and to share it when you choose. Legal basis: performance of our contract with you.
• Local drafts — when you are signed out, your entries stay in your browser's local storage on your device and are not sent to us.
• Subscription data — plan tier, billing interval, subscription status, period dates, and the customer and subscription references issued by our payment provider. Used to give you the features you paid for. Legal basis: performance of our contract and compliance with legal obligations.
• Payment data — card and billing details are collected and processed by Paddle, not by us. We never see or store full payment card details; we receive only the outcome, amounts and receipt references.
• Support and contact messages — your name, email and message when you write to us or use the contact form. Used to answer you. Legal basis: our legitimate interest in supporting customers.
• Security and usage data — IP address, request timestamps, rate-limit records, error reports and simple product events such as "a calculator was completed". Used to keep the service secure and to improve it. Legal basis: our legitimate interest in security and service improvement. Business figures and free-text answers are not included in product events.

Who we share data with

• Paddle.com — our online reseller and Merchant of Record for all orders. Paddle handles checkout, payment, subscription management, tax compliance, invoicing, and customer enquiries about orders and returns.
• Hosting, database, authentication and email providers — service providers that run the platform and deliver account and transactional emails on our instructions.
• AI provider — if you use the planning assistant, your prompt is sent to our AI provider to generate a response.
• Professional advisers and authorities — legal, accounting or tax advisers, and public authorities where the law requires it.

We do not sell personal data and we do not use advertising or cross-site tracking pixels.

International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

How long we keep data

Account, plan and workspace data is kept while your account is open and deleted or anonymised within 90 days of account deletion. Support messages are kept for up to 24 months. Security and rate-limit logs are kept for up to 12 months. Records relating to orders and tax are kept for as long as the law requires, typically six to ten years, mostly by Paddle as Merchant of Record. Local drafts stay on your device until you clear them.

Your rights

Subject to local law, you can ask for access to your personal data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interests. Where we rely on consent you may withdraw it at any time. Write to support@businessstarttools.com and we will respond within one month. You can also delete your account and its plans from your account page, and each tool has a reset control for local drafts. If you are in the UK or EEA you may complain to your data protection supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls so accounts can only reach their own records, server-side handling of credentials, and rate limiting. No system is perfectly secure, but we take these obligations seriously.

Cookies and browser storage

We use essential cookies and browser storage only: to keep you signed in, to remember your country and currency choice, and to hold your local drafts. Paddle sets cookies necessary to operate checkout. We do not use advertising or marketing cookies. You can clear this storage in your browser settings, though signing in and drafts will then not persist.

Contact

CONVERENTIS DIGITAL VENTURE — support@businessstarttools.com. See also our terms and refund policy.