Privacy Policy
Bizpara Inc. ("Bizpara," "we," "us") provides executive-assistant services supported by a client portal at portal.bizpara.com and a public website at bizpara.com. This policy explains what information we collect, how we use it, whom we share it with, and the choices you have. It applies to website visitors, portal users (clients — "Business Partners" — executive assistants, and administrators), and anyone whose information is processed in the course of our services.
1. Information we collect
Account information. When a portal account is created for you, we store your name, email address, role, and a securely hashed password. Portal accounts are created by Bizpara administrators; we do not offer public self-registration.
Profile and working information. Clients and their executive assistants may add information needed to deliver the service: contact details (phone, postal address), date of birth, passport number, travel preferences, working hours and time zone, and additional custom fields they choose to add. Date of birth and passport details are provided so an executive assistant can book travel and complete forms on the client's behalf.
Work product. Tasks, messages between a client and their assigned executive assistant, meeting and scheduling information, time records, invoices, and documents created or shared in the course of the engagement.
Communications you connect or forward. If a client connects a Google account or designates a Slack channel (see Sections 4 and 5), we process the content of those communications to provide the service: triage, summaries, draft responses and documents, scheduling, and extraction of action items. Drafts are always reviewed and approved by a human executive assistant (or, for drafts written on a client's behalf, by the client) before anything is sent.
Technical and usage information. We record sign-in events (including unsuccessful attempts, without ever recording password content), and activity within the portal needed to operate, secure, and support the service. Access to usage reporting is restricted to Bizpara administrators.
Website information. Our website is a static site. We do not run advertising trackers. The site stores a single local flag in your browser so an introductory video is shown only on your first visit. If you submit our intake form, we receive the information you provide (name, contact details, and your message) by email so we can respond.
2. How we use information
We use information solely to: provide and operate the executive-assistant service; prepare drafts, schedules, and action items for human review; communicate with you about your account and engagements; bill for services; secure the platform (including detecting failed sign-ins); and comply with legal obligations. We do not use client communications or Google user data for advertising, and we never sell personal information.
3. Artificial intelligence processing
Our portal includes an AI assistant ("Bizpara Agent") that helps executive assistants draft, summarize, and organize work. Text from tasks and connected communications may be processed by our AI provider for this purpose. Sensitive profile fields — including date of birth and passport numbers — are never sent to the AI provider. The AI does not send messages or take actions on its own: a human reviews and approves everything.
4. Google user data — Limited Use disclosure
If you connect a Google account to the portal, Bizpara requests only the access needed for the features you use:
- Gmail (read-only): to display, search, triage, and summarize your email for you and your assigned executive assistant.
- Gmail (compose): to create draft replies. Drafts are never sent by the system; a human reviews and sends them.
- Google Calendar (free/busy and events): to check availability, propose times, and create or update events you or your executive assistant request.
- Basic profile (name and email address): to identify the connected account.
Bizpara's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Google user data is used only to provide and improve the user-facing features described above; it is not transferred except as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you; it is not used for advertising; and humans read it only with your consent, for security purposes, to comply with law, or where the data has been aggregated and anonymized — in practice, your assigned executive assistant works with your email and calendar as part of the service you engaged us for.
OAuth access tokens are stored encrypted; refresh tokens are encrypted at rest (AES-256-GCM). You may disconnect a Google account at any time from the portal's Connections settings, which revokes our access and deletes the stored tokens. You may also revoke access from your Google Account security settings.
5. Slack data
Where a client has explicitly opted in and designated a channel, our Slack app reads messages in that channel to identify action items for the client's executive assistant. The app never posts or replies in client channels. Detected items appear only to the executive assistant as proposals requiring human confirmation. You may end this processing at any time by removing the app or contacting us.
6. How we share information
- Service providers: hosting (Render), website hosting and form handling (Netlify), email delivery (Google Workspace), and AI processing. Providers receive only what their function requires.
- Within your engagement: your information is visible to you, your assigned executive assistant, and Bizpara administrators who oversee service quality. Other clients and unassigned assistants cannot access it.
- Legal and safety: if required by law, or to protect the rights, property, or safety of Bizpara, our users, or others.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice where required.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
7. Security
We protect information with encryption in transit (TLS) and at rest for stored credentials and tokens, hashed passwords, role-based access controls scoped per client engagement, sign-in auditing (administrator-only), and least-privilege access for our team. No system is perfectly secure, but we design and test access controls before features are released.
8. Retention and deletion
We retain account and work information while your account is active and as needed to provide the service. When an account is deactivated, its records are retained for a 120-day restoration window and then permanently deleted, except records we must keep for legal, tax, or accounting purposes. Disconnected Google accounts have their stored tokens deleted immediately upon disconnection. You may request access to, correction of, or deletion of your personal information at any time via the privacy contact above; we respond within 30 days.
9. Your choices
You can: update your profile information in the portal; disconnect connected accounts at any time; opt out of optional summary emails; and contact us to exercise the rights described in Section 8. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA/CPRA, including the right to know, delete, correct, and port your information, and the right not to be discriminated against for exercising them. We honor verifiable requests as those laws require.
10. Children
Our services are for businesses and are not directed to children under 16. We do not knowingly collect information from children.
11. Changes to this policy
We will post changes on this page and update the "Last updated" date. Material changes will be announced to portal users before they take effect.
12. Who we are
Bizpara Inc., a Wyoming corporation. Privacy contact: team@bizpara.com.