BizWizard Privacy Policy

Effective date: October 5, 2026

BizWizard AI, LLC ("BizWizard", "we", "us") is a Delaware limited liability company. This policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. "Personal information" means information that identifies you or could reasonably be linked to you.

This policy covers:

• our website at www.bizwizard.ai (bizwizard.ai redirects there);
• our app at app.bizwizard.ai, where you work through a business idea (a "venture") step by step, using AI features that respond to what you write;
• people who contact us through our forms or by email, whether or not they have an account; and
• people whose information our users enter in the app, such as the customers they interview.

In this policy, the "Service" means our website and our app together. This is one policy for everyone, wherever you live. If you live in the United States, or if the GDPR or the UK GDPR applies to our processing of your information, the section for your region adds to it. See If you live in the United States and If you're in the European Economic Area or the United Kingdom. Our Terms of Use govern your use of the Service.

The short version

• What we collect. Your account details, everything you enter in the app about your business idea, and the messages you send us. We also keep records of your AI usage, and our hosting provider keeps records of every request to our sites.
• AI. The app's AI features send what you write, and often details of your venture, to our AI provider, Anthropic. We don't train AI models on your content, and Anthropic's terms with us don't allow it to. Our hosting provider's terms are different: see Whether your content is used to train AI models. The AI features are software, not people, and they can be wrong.
• Who we share it with. The companies that run BizWizard for us (hosting, database, email and AI) receive the information they handle for us. People on our team with access to our production systems can read and change it. Resource suggestions, with the AI's explanations and the search queries behind them, can also be shared with other users whose ventures are described the same way, and anything entered in our shared demo account is visible to others who use it (see Other BizWizard users).
• No selling, no tracking. We don't sell or share your personal information, and we don't use advertising, analytics or tracking tools. We set one cookie, and only for Google sign-in.
• How long we keep it. We keep your account and venture content for as long as your account is open. You can delete a venture or your whole account in the app at any time, and it's removed from our database straight away. If you can't do it yourself, email us and we'll delete your account within 30 days of verifying your request. Some records and copies remain afterwards, and any copies in our database backups age out within 90 days.
• Your rights. Wherever you live, you can ask us for a copy of your information, or ask us to correct or delete it, by emailing contact@bizwizard.ai. People in the United States, and people whose information the GDPR or the UK GDPR covers, have the further rights described in their sections.
• Age. You must be at least 18 years old to use BizWizard.

Each point is explained below.

What we collect

Account information

If you sign up with an email address, you give us your email address, a password and, if you choose, your name. We don't store your password, only a one-way scrambled version of it (a hash). If you sign up with Google, your account has no password unless you set one later. We don't ask for your age, and we don't verify your email address when you sign up.

We also keep:

• when your account was created and last updated, when you last signed in, and how many times you've signed in;
• two app settings (whether sounds are muted, and whether you've dismissed a notice about the Business Plan) and whether you've finished the onboarding tour; and
• your conversation with the Help Assistant, the app's AI help chat. It has no length limit, and it's removed only when your account is deleted.

If you sign in with Google

When you use "Continue with Google", the app asks Google for your basic profile and email address. Google sends us a sign-in token, and from it we read only your Google account ID, your email address, your name and whether Google has verified that address. We refuse the sign-in if Google hasn't verified the address. We keep your Google account ID and email address to connect Google sign-in to your BizWizard account. We don't keep Google's access token, and we don't receive a token that would let us reach your Google account later. We use your Google name only if your BizWizard account doesn't already have a name.

How Google sign-in finds your account:

• If your Google account's verified email address matches an existing BizWizard account, we connect Google sign-in to that account automatically and sign you in to it. Any password already set on that account keeps working.
• If the email address doesn't match, you're signed in to a separate BizWizard account, which is created if it doesn't exist. The same happens when you use the "Connect" button for Google on the Account page: it connects Google to your account only if your Google email address is the same as your BizWizard email address.

We don't verify email addresses when someone signs up with an email address and a password. See Security for what that means for your account.

Password resets

If you ask to reset your password, we email you a link containing a one-time code. We store only a scrambled version (hash) of that code, when it expires and when it was used. The link works once, and only for 60 minutes, and asking for a new link cancels earlier ones. You can also use a reset to set a first password on an account you created with Google. The reset page leaves the link, code included, in your browser's address bar and history, and our hosting provider receives that address when you open it.

Venture content

Venture content is everything you type, paste, upload or generate for a venture in the app, including:

• the venture's name, description, industry and other profile details;
• your answers to each step, including answers about yourself, such as your skills and experience, how much time you can commit and how much you can afford to risk. In the step tutor (the chat on each step page), the AI can tidy the wording of some of your answers, and the tidied version is saved as your answer;
• your assumptions, evidence notes and market research, including notes on customer interviews and surveys;
• emails or messages you paste into the app, kept in full whether or not you confirm them as evidence;
• your conversations with the app's AI features, their replies, and Expert Guild reviews;
• Venture Viability Test scores, with a saved record of every run;
• financial information, such as your financial model inputs (including your own pay and starting cash) and pro forma financials (including planned salaries for hires), with saved snapshots;
• your email address, when you attest to parts of your market research. It's saved with the research and appears in the market research documents you export;
• your business plan and pitch deck, including your founder story, quotes and who said them, the Pitch Coach's feedback, and any logos or images you upload;
• suggested resources, the AI-written search queries used to find them, and when you saved, dismissed or clicked each one; and
• your Company Creation Checklist:
  • entity type, number of owners and state;
  • key details you enter, such as your EIN, state tax and payroll account numbers, license and permit numbers, insurance policy numbers, merchant ID, registered agent and who does your books;
  • who recorded each key detail: when you save one, we record your account email address (or your name or account ID) next to it as "Recorded by"; and
  • when you click, dismiss or change the status of checklist items, including which vendor you clicked.

Images. Images you upload are stored exactly as uploaded, including any details embedded in the file, such as where a photo was taken and on what device. The pitch deck file you export includes your logo and slide images in the same form, and the business plan file you export includes your logo in that form too. We don't read or use that embedded information. If you don't want it stored, remove it from the file before you upload it.

Pro forma imports. If you import a pro forma spreadsheet, we read it to suggest figures and don't keep the file.

Finance items in your browser. Your finance-page approvals and balance-sheet assumptions are stored only in your browser, not on our servers (see Cookies and browser storage).

Information about other people

The app asks about the people you interview and the customers you talk to. You can also paste emails, add quotes, name people such as your registered agent or bookkeeper, upload images that show people, and type anything into any free-text field. We handle this information like the rest of your venture content, and text about other people can reach our AI provider (see How the AI features use your content). Our Terms of Use explain what we expect of you before you enter other people's information. If you think a BizWizard user has entered information about you, you can contact us at contact@bizwizard.ai.

AI usage records

For every AI request, we record the date, your account ID, which feature made the request, the AI model used, the amount of text processed, how many web searches it ran, and the cost. For business plan generation, new Expert Guild reviews, market research and resource suggestions, we also record the venture ID. We also keep a daily count, per account, of certain AI actions. These records don't contain your name, your email address or what you wrote.

Contact form

When you use the contact form on www.bizwizard.ai, we collect your name, your email address, your organization (optional), the topic you choose and your message. We don't store these in our database. Our email provider, Resend, emails them to our contact@bizwizard.ai mailbox, with your address as the reply-to address. Please don't include passwords, payment details or confidential business documents. Contact form messages from before October 3, 2026 went to another of our mailboxes, which still holds them.

Request Access form

When you request access on www.bizwizard.ai, we collect your name, your email address, what you're thinking of starting, where you are with it (just an idea, working on it, or already making sales) and your school or program (optional). These are emailed to our mailbox in the same way and aren't stored in our database. Requesting access doesn't create an account.

Both forms have a hidden field that catches spam bots, and we limit how many messages can be sent from one IP address. If you enter an access code on our website, it's checked in your browser. It isn't sent to us or stored.

Emails you send us

If you email us directly, we receive your email address and your message in our mailboxes, which Google Workspace hosts.

Technical information and logs

• Our hosting provider. Vercel, which hosts our sites, receives every request your browser makes to them, including your IP address, your browser details, the page address (including anything after a "?" in it) and anything you submit. Vercel keeps its own records of these requests under its own terms and privacy notice.
• Our app's logs. These are available to us for a limited time. For each request to the app's server, we log the method, the full address requested (including anything after a "?"), an IP address, the response status, how long it took and a request ID. We don't log the contents of what you send, but error details can occasionally include part of the data involved. Some log lines also include:
  • your account ID, and sometimes a venture ID, in records of each AI request's size and cost and when a daily AI limit is reached;
  • a partly hidden version of an email address, when an email fails to send, with the topic or stage chosen on the form it came from;
  • up to about 320 characters of an AI result that failed our checks; and
  • error details.
• Request limits. We use IP addresses, held only in memory, to limit how often some requests can be made, such as sign-ins, sign-ups, password resets, form messages and AI requests.
• What we don't store. We don't store IP addresses, browser or device details, or location in our database, apart from any such details embedded in images you upload (see Venture content).

Analytics

We don't use third-party analytics, advertising, tracking or error-monitoring tools. No page loads analytics scripts, and neither site loads scripts or fonts from other companies. Our website loads no images from other companies, and images you upload in the app are stored with your venture, not loaded from other sites. Inside the app, the records of your activity described above (resources you saved, dismissed or clicked, and your Company Creation Checklist clicks, dismissals and status changes) are kept as part of that venture's content. We don't add tracking images or tracked links to the emails our app sends.

Information we don't ask for

We don't ask for your date of birth or age, phone number or postal address. BizWizard doesn't take payments, so we don't ask for payment card or bank details. If you type details like these into the app, or they're in an email you paste there, they're stored with your venture content like anything else you enter. We don't run a newsletter or a marketing email list.

How we use your information

We use personal information to:

• create and run your account, keep you signed in, and let you sign in with Google;
• save your venture content, show it back to you, and produce the documents you export, such as your business plan, financial model and pitch deck;
• run the AI features (see the next section);
• email you a password-reset link when you ask for one. That's the only email the app sends you: we don't send marketing emails, and we don't email you when your password changes, when Google sign-in is connected or when your account is deleted;
• read and reply to messages and access requests you send us, through our forms or by email;
• record AI usage and costs, and enforce daily limits per account and request limits per IP address;
• protect our forms and the Service from abuse, for example with request limits and a hidden spam-trap field;
• provide support, respond to requests, investigate problems, and measure and control the cost of the AI features, which can involve sending a copy of a venture's content to our AI provider;
• run internal reports, for example a list of accounts showing each account's email address, activity and AI costs;
• keep the Service working, fix problems and improve it, using the logs and records described above;
• remember your settings;
• enforce our Terms of Use and keep the Service, our users and their information secure, including investigating misuse and closing accounts; and
• comply with the law, respond to lawful requests, and establish, exercise or defend legal claims.

We don't use your content to train AI models, and we don't use your information for advertising.

How the AI features use your content

Our AI provider

The app sends AI requests to Anthropic, PBC, which runs its Claude AI models. For market research and resource suggestions, the app also uses Anthropic's web search tool (see Web search).

The app's AI features are the step tutor (the chat on each step page), Ask BizWizard, the AI Mentor Chat, the Help Assistant, the Pro Forma Advisor, the Deck Advisor, the Pitch Coach, Expert Guild reviews, business plan and pitch deck generation, branding and founder-story suggestions, financial suggestions, market research and resource suggestions. All of them are software, not people. Expert Guild reviewers appear with human names and job titles, such as a startup attorney or a CFO, but they're AI personas, not real people or licensed professionals. AI answers are generated automatically and can be wrong or incomplete, so check factual statements independently before you rely on them.

There's no setting to turn the AI features off, and some AI requests run automatically, such as resource suggestions.

What we send

Several features add a short "venture voice" summary of your venture in your own words: some of your wording about your product, customers and competitors, a few figures you entered, and short excerpts of your strongest confirmed customer evidence. The list below says which features add it.

What else is sent depends on the feature:

• Ask BizWizard (the mentor panel) sends a summary of your venture: its name and description, funding path, pace, current step, strongest evidence level, every saved step answer, and your open assumptions. With it, it sends your question.
• Expert Guild reviews send the same summary, the venture voice summary and your review request. Each follow-up message resends the review and the whole follow-up conversation.
• The AI Mentor Chat sends a longer summary: your venture's name, description, industry, current step, funding path and pace, every step answer, each step's output, and every assumption with its status. It also sends your question and recent messages from that chat.
• The step tutor sends your message, basic details of your venture (its name, description, industry, type, funding goal and pace), the step you're on, and what you've answered so far in that step.
• The Help Assistant sends your question and recent messages from your Help Assistant conversation. It doesn't add your venture's details.
• Business plan generation sends your venture's details, every saved step answer and each step output, your locked market research and the venture voice summary, plus any instruction you give when you regenerate a section.
• Financial suggestions send your venture's name, description, industry, current step, funding path and pace, every saved step answer and each step output.
• The pitch deck features. Slide generation sends each slide's content (which can include figures, and quotes with who said them), your venture's name, the venture voice summary and any instruction you give. Branding suggestions send your venture's name, the kind of business it is, its industry and description, and signals about tone from your answers. Founder-story suggestions send your answers about yourself (your skills, time and personal risk) and your venture's name and industry. The Pitch Coach sends each slide's text, any direction you give and the venture voice summary. The Deck Advisor sends your deck (its colors and fonts, founder story, quotes, milestones and slide text, and whether it has a logo, but not the logo itself) and recent messages from that chat.
• The Pro Forma Advisor sends your venture's name and the kind of business it is, a benchmark for its sector, your saved pro forma figures for the current phase (including planned salaries), the findings of your market research once it's locked, the venture voice summary, and your question and recent messages from that chat.
• Market research sends your venture's name, industry and type; your research objective, target segment, hypotheses and research methods; answers from several steps, including your answers about yourself (your skills, time and what you can risk); and the evidence you've confirmed from your customer research, including up to 2,000 characters of any email or message you pasted and confirmed as evidence. The AI writes web searches from this, and Anthropic runs them.
• Resource suggestions run automatically when you first complete certain steps, and again when you refresh them. They send your venture's industry, business model, customer segment, pricing, sales channel and stage, and they use web search.

In every case, the personal information sent comes from what you've entered in the app, your messages and earlier AI replies.

What we don't send

We don't add your name, email address, account ID, venture ID or IP address to AI requests. We don't send uploaded images (AI requests carry text only), your Company Creation Checklist details, or the email addresses recorded on checklist entries and market research. But your venture's name is included in most requests, and anything you type into answers and chats is sent as written, including your own details or anyone else's.

Web search

For market research and resource suggestions, the AI writes search queries from your venture's details, and Anthropic runs them using its own search subprocessors, which it lists on its subprocessors page. The queries that were run are saved with your venture, in its market research and its resource history. Resource suggestions and the queries behind them can be shared between ventures (see Other BizWizard users).

Whether your content is used to train AI models

• BizWizard doesn't use your content to train, fine-tune or evaluate AI models.
• Anthropic's Commercial Terms, which cover our use of its API, say Anthropic may not train models on the content we send it or the replies it generates for us. We don't send Anthropic feedback, such as ratings of its replies.

Our hosting provider, Vercel, handles every request to our sites. Its terms for our current plan let it use data from hosting accounts to train its own AI models, and to share that data with other companies to train theirs, unless the account opts out. Vercel says it removes personal information first.

What Anthropic keeps

Anthropic deletes what we send it, and its replies, within 30 days. It can keep content flagged for breaking its usage policy for up to 2 years, and longer where the law requires. Anthropic stores this data in the United States, but may process requests in other countries. Deleting a venture or your account with us doesn't delete copies Anthropic still holds; those are deleted on Anthropic's schedule.

What we keep

Some AI results are saved with your venture: step tutor conversations, Ask BizWizard and AI Mentor Chat conversations, Pro Forma Advisor and Deck Advisor conversations, Expert Guild reviews and follow-ups, the business plan, the pitch deck (including the Pitch Coach's feedback), market research (including its search queries), and resource suggestions with their search queries. The AI Mentor Chat page says nothing there is saved to your venture, but its conversations are saved with your venture like the others and shown to you again when you return. Your Help Assistant conversation is saved with your account.

The step tutor keeps about the last 200 messages for each step. The other chats have no length limit.

Financial suggestions, branding suggestions and founder-story suggestions are shown to you without being saved. If you apply a suggestion or use the text, what you save is kept like any other venture content.

We don't write your prompts or the AI's replies to our logs as a matter of course. The exceptions are the short excerpt of an AI result that failed our checks, and error details, which can occasionally include part of a prompt or reply. Both are described under Technical information and logs.

Who we share it with

Service providers

We use these companies to run BizWizard. Each receives the information shown.

Google sign-in

If you use "Continue with Google", your browser goes to Google with a sign-in request for your basic profile and email address, and Google sets its own cookies on google.com during that visit. Google then sends us a sign-in token, from which we read only the details listed under If you sign in with Google. Google acts under its own privacy policy for your Google account and that sign-in.

Other BizWizard users

The app is designed so that other users can't see your account or your ventures, with two exceptions.

Shared resource suggestions. Resource suggestions are cached and shared between ventures whose industry, business model, stage and customer segment are worded the same way. If your venture matches another user's, you may be shown resources, and the AI's explanations of why each one is relevant, that were first produced for that venture, and you may receive the AI-written search queries behind them. Other users may likewise be shown ones first produced for yours. Because the AI writes those explanations and queries from a venture's details, including its pricing and sales channel, they can reflect those details. The shared cache stores those four details as written, isn't linked to any account, and isn't deleted.

The shared demo account. If we let you use our shared demo account, anyone else with its sign-in details can see and change what you enter there. When the demo is reset, the demo venture and any other venture in the account named "BizWizard" are deleted, a fresh demo venture is created, and the account's name and password are reset. Other ventures created in the account, and its Help Assistant conversation, stay. Don't enter personal or confidential information in it.

Our team

BizWizard has no admin screen. People on our team who hold production credentials, for our database, our hosting provider's dashboard and our other providers' consoles, can read and change data directly. They do this to provide support, respond to requests, investigate problems, and measure and control the cost of the AI features, which can involve sending a copy of a venture's content to our AI provider. For example, they can produce a report of every account's email address, activity and AI cost, set a new password on an account, or merge duplicate accounts.

Legal reasons and business transfers

We may disclose personal information if the law or legal process requires it; to protect the rights, property or safety of our users, BizWizard or others; or as part of a merger, sale or other transfer of all or part of our business. If our business is transferred, the successor will be bound by this policy for the personal information it receives. These disclosures aren't a sale or sharing of personal information.

We don't sell or share personal information

We don't sell personal information. We don't share it for cross-context behavioral advertising either, meaning advertising aimed at you based on your activity across other companies' websites and apps. We don't show ads, and we don't use your information for targeted advertising.

Past providers

Until September 28, 2026, our previous website sent its contact and newsletter forms to Formspree, which may still hold those messages, and loaded fonts from Google Fonts, so visitors' browsers sent requests to Google.

Links to other sites

Our sites link to other websites, such as our social media pages and the sources in your research. Nothing loads from those sites until you click a link, and their own policies apply once you're there.

Where we process it

We're based in the United States. The app's server functions run in the United States (US East). Our hosting provider's network may handle your requests at servers in other countries. Anthropic stores the data we send it in the United States, but may process requests in other countries. Resend stores data in the United States and sends email through Amazon Web Services. Our mailboxes are on Google Workspace. Some information is stored in your own browser (see Cookies and browser storage).

If you use the Service from outside the United States, your information is processed in the United States and may be processed in other countries where our providers operate, whose data protection laws may differ from those where you live.

How long we keep it

• Account information is kept for as long as your account is open. We don't delete inactive accounts.
• Venture content is kept for as long as your account is open, unless you delete it sooner. Some records can't be deleted one at a time:
  • pasted emails, evidence notes and a venture's chat conversations are removed when you reset or delete the venture, or delete your account; and
  • Venture Viability Test history, pro forma and market research snapshots, checklist activity, resource history, and uploaded images (including ones you removed or replaced) are removed only when you delete the venture or your account.
• Chats. The step tutor keeps about the last 200 messages for each step. Other chats, including the Help Assistant, have no length limit. The Help Assistant conversation is removed only when your account is deleted.
• Password-reset records. Used records, and records more than a day past their expiry, are cleared the next time you ask for a reset. Otherwise they're kept until your account is deleted.
• Sign-in tokens expire 7 days after they're issued, and we can't end them sooner (see Security).
• AI usage records and daily usage counts are kept with no end date, including after your account is deleted, for accounting and to control costs. They hold your account ID and, for some features, a venture ID, but not your name, email address or content.
• The shared resource cache isn't linked to any account and isn't deleted (see Other BizWizard users).
• Messages you send us through our forms or by email are kept in our mailboxes for as long as we need them to respond and follow up. Resend deletes its copies of the emails it sends for us after 30 days.
• Logs. Vercel keeps its own records of requests to our sites under its own terms. Our app's logs are available to us for a limited time.
• Copies at Anthropic are deleted within 30 days, with the exceptions described under What Anthropic keeps.
• Backups. Any copies in our database backups age out within 90 days.

Deleting your information

• You can delete a venture, or your whole account, in the app (see Your choices and rights). When you do, it's removed from our database immediately.
• If you can't delete your account yourself, email us from the account's email address and we'll delete it within 30 days of verifying your request.
• If you ask us to delete the messages you sent us, we'll delete them from our mailboxes within 30 days of verifying your request. Our mailbox provider, Google, may keep deleted messages in its own systems for a limited time afterwards.

What remains after deletion

Deleting your account doesn't remove:

• the AI usage records and daily usage counts described above, which hold your former account ID and some venture IDs, but not your name, email address or content;
• the shared resource cache, which isn't linked to any account, so we can't find or delete your entries in it. It may contain your industry, business model, stage and customer-segment answers as you wrote them, and AI-written search queries and explanations;
• items stored in your browser, such as each venture's finance-page approvals and balance-sheet assumptions and your sidebar and sound settings, until you clear your browser's site data; or
• copies outside our database:
  • Vercel's records, kept under its own terms;
  • Resend's copies of the emails it sent, deleted after 30 days;
  • messages in our mailboxes, deleted if you ask, within 30 days of verifying your request;
  • Anthropic's copies, deleted within 30 days, with the exceptions described under What Anthropic keeps;
  • any copies in our database backups, which age out within 90 days; and
  • for a small number of accounts, the account's email address where it appears in our source code and engineering notes on GitHub.

Deleting your account also doesn't end sign-ins that have already started on other browsers or devices (see Delete your account).

Cookies and browser storage

We use one cookie and a small number of browser storage items. In short:

• One cookie, for Google sign-in only. When you start Google sign-in, we set a cookie for up to 10 minutes to check that the sign-in started in your browser. It holds a signed random value, not personal information, and it's deleted when you return from Google and the check passes. We set no other cookies.
• On www.bizwizard.ai, apart from the Google sign-in cookie, which is set for all of our bizwizard.ai addresses, and the unusual case described below, we store only your light or dark theme choice, and only after you click the theme toggle.
• In the app, we store your sign-in token (which contains your account ID, email address, sign-in time and expiry), your selected venture and some interface settings. For each venture, we also store your finance-page approvals and balance-sheet assumptions there, and these exist only in your browser. While you work through the gaps a Venture Viability Test flagged, the app also keeps that list, with the test's notes on each gap, until you finish the list or close the tab. The settings that remember whether a chat panel is open end when you close the tab.
• Signing out or deleting your account removes the sign-in token and the selected venture from that browser. The sidebar and sound settings and the finance items stay until you clear your browser's site data, including after you delete or reset a venture.
• An unusual address. If you open the app at an unusual www.bizwizard.ai address (for example, a mistyped link) and sign in there with your email address and password, the app's items are saved under www.bizwizard.ai. Clearing site data for bizwizard.ai, www.bizwizard.ai and app.bizwizard.ai removes them everywhere.
• No analytics or advertising cookies. None of these items is shared with other companies. Our hosting provider may set its own security cookie if its platform shows you a security check.

For the full list, see our Cookies and Browser Storage Notice.

Your choices and rights

These choices are open to everyone, wherever you live.

Delete your account

In the app, open the Account page from the account button at the bottom of the sidebar, go to "Danger zone", choose "Delete account", type DELETE to confirm, and choose "Permanently delete". This immediately and permanently deletes your account, your ventures and everything in them, the connection between your Google account and BizWizard, your Help Assistant conversation and any password-reset records. It can't be undone. We don't ask for your password again, and we don't send a confirmation email.

If you can't delete your account yourself, email us from the account's email address and we'll delete it within 30 days of verifying your request.

Some records and copies remain after deletion (see What remains after deletion). Deleting your account also doesn't end sign-ins on other browsers or devices. A browser that still holds a sign-in token can keep using the Help Assistant until the token expires: those messages go to Anthropic, and an AI usage record is written under the deleted account's ID.

Delete or reset a venture

You can delete a venture. This removes it and its content from our database, except for its AI usage records and any details in the shared resource cache. Copies outside our database, and the venture's finance items in your browser, also stay, as they do when you delete your account.

You can also reset a venture. A reset deletes its step answers, assumptions, evidence, step outputs, conversations, pasted emails, Expert Guild reviews, financial model and business plan, but keeps its pro forma, market research, pitch deck and images, resources, Company Creation Checklist and Venture Viability Test history. You can reset a single step, which deletes that step's answers, assumptions, output and tutor conversation. And you can delete individual assumptions and Expert Guild reviews.

Correct your information

You can change your name on the Account page; change, set or reset your password; and edit much of your venture content in the app. Some items can't be edited or deleted one at a time in the app, such as pasted emails, evidence notes and chat conversations; they're removed as described under How long we keep it. You can't change your email address in the app. To ask us to change it, email contact@bizwizard.ai.

Get a copy of your information

There's no tool in the app that downloads all of your personal information at once. Email us at contact@bizwizard.ai and we'll send you a copy by email, in a commonly used electronic format.

Download your work

You can export business documents from the app: your business plan, financial model, step outputs, Venture Viability Test, pro forma, market research and pitch deck. These are documents about your venture, not a copy of all your personal information.

Other choices

• You can sign up with an email address and password instead of Google.
• You decide what you enter. Anything you enter may be sent to our AI provider, as described in How the AI features use your content, and there's no setting to turn the AI features off.
• You can clear your browser's site data for our sites at any time. In that browser, this signs you out and removes the interface settings stored there. It also removes, for each venture, your finance-page approvals and balance-sheet assumptions, which are stored only in your browser. Settings saved to your account stay.

How to make a request

To make any request about your personal information, such as a request to access, correct or delete it, email contact@bizwizard.ai. You don't need an account to make a request.

We verify a request by confirming that it comes from, or is confirmed by a reply from, the email address on the account. For messages you sent us without an account, we use the address you sent them from. If we hold information about you that isn't linked to an account or to a message you sent us, such as details another user entered about you, we'll ask you only for the information we need to find it and to confirm that it relates to you. We respond within the time the law that applies to you allows; for the United States and for the EEA and the UK, those times are set out in the sections below.

If you live in the United States

This section applies to all US residents, including California residents. We give everyone in the United States the rights below, whether or not a state privacy law requires us to.

Your US privacy rights

You can ask us to:

• Know and access the personal information we have about you: the categories we collect, where it comes from, why we use it and who receives it, and a copy of the specific pieces of personal information, in a portable, commonly used electronic format where technically feasible.
• Delete personal information we hold about you, including information you gave us and information another user entered about you, subject to exceptions the law allows and as described under What remains after deletion.
• Correct inaccurate personal information.

You also have the right to:

• Opt out of the sale or sharing of your personal information. We don't sell or share it, so there's nothing to opt out of.
• Limit the use of sensitive personal information. We don't use it beyond providing the Service and keeping it secure, so there's nothing to limit.
• Opt out of profiling used for decisions that have legal or similarly significant effects. We don't use personal information that way.
• Appeal our decision on your request.
• Not be discriminated against for using these rights.

Categories of personal information we collect

In the past 12 months, we've collected the categories of personal information below, which use the category names in California law.

We don't ask for characteristics of protected classifications, biometric information or education records, but anything you type into the app is stored as you enter it. Any backups of our database age out within 90 days.

Sources. We collect personal information from you, when you use the Service, fill in our forms or email us; from your browser and device; from Google, if you use Google sign-in; from other BizWizard users, who may enter information about you; and from the Service itself, which generates AI replies and records from what you enter.

Disclosures. In the past 12 months, we've disclosed each category above, for the purposes shown, to the service providers listed under Service providers, which run the Service for us. Until September 28, 2026, our previous website also sent what visitors entered in its contact and newsletter forms (identifiers such as names and email addresses, and their messages) to Formspree, and it loaded fonts from Google Fonts, so visitors' browsers sent their IP addresses and browser details to Google (see Past providers). Some venture details can also reach other users through shared resource suggestions and the shared demo account (see Other BizWizard users).

Sensitive personal information

The sensitive personal information we collect is your account log-in (your email address together with your password) and the contents of emails or messages you paste into the app. We use your log-in only to sign you in and keep accounts secure, and we handle pasted emails and messages like the rest of your venture content. Photos you upload can also contain a precise location embedded in the file; we store it as part of the image but don't read or use it. Other information you choose to type or paste into the app could also be sensitive, such as health details; we handle it like the rest of your venture content. We don't use sensitive personal information to infer characteristics about you.

Sale and sharing

We haven't sold or shared personal information in the past 12 months. We don't sell or share the personal information of consumers under 16, or of anyone else.

Making a request

Email contact@bizwizard.ai. You don't need an account to make a request.

Verification. We verify your request by confirming that it comes from, or is confirmed by a reply from, the email address on your account. For messages you sent us without an account, we use the address you sent them from. If we hold information about you that isn't linked to an account or to a message you sent us, such as details another user entered about you, we'll ask you only for the information we need to find it and to confirm that it relates to you.

Authorized agents. You can ask someone else to make a request for you. The agent must give us your signed permission to act for you, and we may ask you to verify your identity with us directly or to confirm with us that you gave the agent permission.

Timing. We'll confirm that we've received your request within 10 business days and respond within 45 days. If we need more time, we may extend that once, by up to 45 more days. If we do, we'll tell you within the first 45 days and explain why.

Appeals. If we decline your request, in whole or in part, we'll explain why and tell you how to appeal. You can appeal by replying to our decision with "Appeal", or by emailing contact@bizwizard.ai with the subject "Privacy appeal". We'll decide your appeal within 45 days and tell you what we decided and why. If we deny your appeal, we'll tell you how to contact your state's attorney general to submit a complaint.

Do Not Track and Global Privacy Control

We don't sell or share personal information, and we don't track you across other websites, so there's nothing for a Global Privacy Control or Do Not Track signal to turn off. Our sites don't change how they work in response to Do Not Track signals.

Apart from the two companies named next, other companies don't collect information through our sites about your online activities over time and across other websites: we don't load their scripts, tracking pixels or advertising cookies. Our hosting provider, Vercel, receives every request to our sites and keeps its own records of them under its privacy notice. If you use Google sign-in, Google receives your sign-in request under its privacy policy.

Non-discrimination

We won't discriminate against you for using your privacy rights. For example, we won't deny you the Service, or give you a different level or quality of service, because you made a request.

If you're in the European Economic Area or the United Kingdom

If the GDPR or the UK GDPR applies to our processing of your information, this section applies to you as well.

Who is responsible for your information

BizWizard AI, LLC is the controller of your personal information. You can contact us at contact@bizwizard.ai.

If a BizWizard user has entered information about you, such as notes from an interview with you, we received it from that user (see Information about other people).

Legal bases

Your rights under the GDPR and the UK GDPR

You have the right to:

• access your personal information and get a copy of it;
• have inaccurate personal information corrected;
• have your personal information erased;
• restrict how we use your personal information;
• object to our use of your personal information, including where we rely on legitimate interests; and
• receive personal information you gave us in a structured, commonly used, machine-readable format, and have it sent to another company (data portability).

Your right to object. Where we rely on legitimate interests, you can object at any time, on grounds relating to your particular situation, to our use of your personal information. If you do, we'll stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the information to establish, exercise or defend legal claims.

We respond within one month. If a request is complex, or you've sent us several, we may extend that by two more months; if we do, we'll tell you within the first month and explain why. To make a request, see How to make a request.

International transfers

We're based in the United States. Information you give us directly, through the Service or by email, is collected by us in the United States. When we pass it to Anthropic and Resend, we rely on the EU Standard Contractual Clauses and the UK Addendum included in their data processing terms. You can read those terms in Anthropic's Data Processing Addendum and Resend's Data Processing Addendum. Our other service providers, Vercel, Prisma Postgres (Prisma Data, Inc.), Google Workspace and GitHub, also receive personal information, as described under Service providers, and handle it under their own terms, in the United States or other countries where they operate. Those disclosures don't currently rely on Standard Contractual Clauses. For where our providers process information, see Where we process it.

How long we keep your information

See How long we keep it.

Whether you have to give us information

To create an account, you need to give us an email address and a password, or sign in with Google. Without them, we can't create an account for you. To reply to a message or an access request, we need your name and email address. Everything else you enter in the app is up to you, though some features need certain information to work.

Automated decisions

We don't make decisions about you that have legal or similarly significant effects based solely on automated processing. Venture Viability Test scores and Expert Guild reviews are feedback on your venture, which you're free to use or ignore.

Complaints

If you have a complaint about how we handle your personal information, please contact us first at contact@bizwizard.ai. We'll acknowledge your complaint within 30 days, look into it and tell you the outcome. You also have the right to complain to a data protection supervisory authority, in particular in the EEA country where you live or work. In the UK, that's the Information Commission, which took over from the Information Commissioner's Office on September 30, 2026. You don't have to contact us before you complain to a supervisory authority.

Children

You must be at least 18 years old to use BizWizard. We don't ask for your age when you sign up, and we don't check it. If we learn that an account belongs to someone under 18, we'll delete the account. If you're under 18, please don't send us personal information through our forms or by email. If you believe someone under 18 has given us personal information, contact us at contact@bizwizard.ai.

Security

We use these measures to help protect your information:

• We store passwords only as one-way scrambled versions of them (hashes).
• Password-reset links work once, for 60 minutes, and we store only a hash of the code they carry. Asking for a new link cancels earlier ones.
• A signed, short-lived cookie checks that a Google sign-in started in your browser.
• The app checks that a venture belongs to the signed-in account before showing or changing it.
• Our sites work only over HTTPS, and they tell browsers to always connect to them securely.
• Our sites run scripts only from our own sites, and they have no third-party trackers.
• Sign-in, sign-up, password resets, both of our forms and the AI features limit how often they can be used.

Email addresses and Google sign-in. We don't verify email addresses when someone signs up with an email address and a password. And if you use "Continue with Google" with a verified email address that matches an existing BizWizard account, we connect Google sign-in to that account automatically, and any password already set on it keeps working. So someone could create an account with an email address that isn't theirs, and if the address's owner later signs in with Google, the person who created the account could still sign in with the password they set. If you sign in with Google and find content in your account that you didn't enter, reset your password from the sign-in page (the reset link goes to your email address) and tell us at contact@bizwizard.ai. A reset stops the old password from working, but a sign-in the other person already has can continue for up to 7 days (see "Sign-in sessions" below).

Sign-in sessions. When you sign in, your browser receives a sign-in token that our servers accept for 7 days. Signing out removes the token from that browser. But our servers keep accepting a token that has already been issued until it expires, even after you sign out, change or reset your password, or delete your account. So signing out, or changing your password, doesn't end a sign-in on another browser or device.

No system is completely secure. If you find a security problem, or think someone else has used your account, please tell us at contact@bizwizard.ai.

Changes to this policy

We may update this policy from time to time. When we do, we'll post the new version on this page with a new effective date. If we make a material change, we'll give you reasonable advance notice by posting a notice on our website before the change takes effect.

Contact us

For questions or requests about this policy or your personal information, email contact@bizwizard.ai.

BizWizard AI, LLC