1. Introduction

Business in Pocket ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at businessinpocket.app.

2. Information We Collect

We collect information you provide directly, including:

• Account information: name, email address, password (hashed), profile picture
• Business information: business name, type, location, services, currency
• Content you generate: marketing strategies, AI chats, booking data, website content
• Payment information: processed securely through Stripe and PayPal (we do not store card details)
• Usage data: log files, device information, IP address, browser type

3. Google Sign-In

When you sign in with Google, we receive your basic profile information (name, email, profile picture) via Google's OAuth 2.0 protocol. We use this only to create and authenticate your account. We do not access any other Google services on your behalf.

4. How We Use Your Information

• To provide, maintain, and improve our services
• To process transactions and send transactional emails (verification, password reset)
• To send push notifications related to your bookings and AI activity (opt-in)
• To detect and prevent fraud, abuse, and unauthorized access
• To comply with legal obligations

5. Third-Party Services

We use the following third-party services to operate Business in Pocket:

• Google OAuth (authentication)
• OpenAI & Anthropic (AI content generation)
• Stripe, PayPal (payment processing)
• Resend (transactional email)
• Meta (Instagram, WhatsApp) & TikTok (social media integrations, opt-in)
• PostHog (anonymous product analytics)

6. Data Retention

We retain your information as long as your account is active. You may delete your account anytime by contacting privacy@businessinpocket.app. Backups may persist for up to 30 days after deletion.

7. Your Rights (GDPR / CCPA)

You have the right to:

• Access, correct, or delete your personal data
• Export your data in machine-readable format
• Withdraw consent for processing at any time
• Lodge a complaint with your data protection authority

8. Security

We implement industry-standard security measures including HTTPS, password hashing (bcrypt), JWT tokens, and security headers (HSTS, CSP, X-Frame-Options). No method of transmission over the Internet is 100% secure, so we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website.

10. Contact Us

Questions? Email privacy@businessinpocket.app.

Note: This is a template Privacy Policy. Please consult a qualified attorney to ensure full compliance with applicable laws in your jurisdiction (GDPR, CCPA, etc.) before relying on it for production use.