PRIVACY
WITHOUT MYSTERY.

Who is responsible

MYBIZONLINE.AI LTD is the controller of the account, subscription, website and direct-enquiry information described in this notice.

Email: info@mybizonline.ai
Telephone: 07883 317515

What this notice covers

This notice covers visits to the public MYBIZONLINE.AI website, MyBizOnline OS account and trial creation, subscription administration, support, demonstrations and project enquiries.

When a customer organisation decides why and how to use personal information inside MyBizOnline OS, that organisation will normally be the controller and MYBIZONLINE.AI LTD will act as its processor. The customer is responsible for its own privacy information and instructions; applicable data-processing terms describe those roles in more detail. We remain a controller for our own account security, billing, legal and service-administration purposes.

Information we may receive

Account and trial details

We receive your name, work email, business name, country, selected plan and billing interval, accepted terms and usage-charge wording, email-confirmation status, account identifiers and the time and source of sign-up. Passwords are handled by our authentication provider and are not visible to MYBIZONLINE.AI staff.

Subscription and payment details

Stripe collects payment details in its secure checkout. We receive references such as the Stripe customer, checkout and subscription identifiers, selected price, payment or subscription status and relevant billing events. We do not receive or store the full payment-card number in MyBizOnline OS.

Use of MyBizOnline OS

We may receive account settings, authorised-user information, support communications, security and audit events, and business records entered into the service. Customer-controlled records are processed to provide the service and under the customer organisation’s instructions.

Demo, project and direct enquiries

Request forms may receive your contact and business details and information you choose to give about a workflow, demonstration or project. Please do not send passwords, payment-card details, special-category information or confidential client records through a first enquiry.

Technical information

Hosting, authentication and security infrastructure may process an IP address, browser or device information, requested page, date and time, session and security events needed to deliver and protect the website and platform.

Why we use information

Where we rely on legitimate interests, we consider the purpose, necessity and effect on the person concerned. We do not use these sign-up routes to make solely automated decisions that produce legal or similarly significant effects.

Providers, sharing and international handling

We use selected providers to deliver particular parts of the service. These include Vercel for application hosting and delivery, Supabase for database and account-authentication infrastructure, and Stripe for checkout, subscription and payment processing. We may also use business email, security, backup and professional-support providers.

Each provider receives only the information needed for its function and handles it under applicable contractual and privacy terms. Stripe also handles payment information under its own privacy policy. We may disclose information where law requires it, to protect legal rights, or in connection with a properly managed business transaction.

We do not sell personal information. Where information is handled outside the United Kingdom, we use an available lawful transfer mechanism and appropriate safeguards. You may ask for more information about safeguards relevant to your information.

How long information is kept

We keep account and service information while an account or subscription is active and for a proportionate period afterwards for support, security, dispute and legal purposes. Subscription, transaction and tax records may usually need to be retained for up to six years after the relevant financial period or relationship, where applicable.

Unfinished sign-ups, cancelled trials, enquiry records and technical logs are reviewed and retained only for as long as reasonably needed for follow-up, fraud prevention, service recovery, security and legal claims. Provider systems may keep backup or security copies for a limited period under their retention schedules.

Customer-controlled records are returned, deleted or retained after service termination according to applicable data-processing terms, customer instructions, technical backup cycles and legal obligations.

Security and your choices

We use access controls, tenant separation, encryption in transit, audit records and selected infrastructure providers to protect information. No online service can promise absolute security, so you should use a strong unique password, protect authentication factors and tell us promptly about suspected unauthorised access.

The public website does not use advertising pixels or embedded audience analytics. Essential storage may be used for security, account sessions and service operation. The separate cookie notice explains the current position.

Your information rights

Depending on the circumstances and lawful basis, you may have rights to ask for access, correction, erasure, restriction or transfer of personal information, and to object to particular uses.

Your right to object: you can object at any time to direct marketing. You may also object to processing based on legitimate interests; we will consider the circumstances and whether there are compelling legitimate grounds to continue.

Where processing relies on consent, you may withdraw it without affecting processing already carried out. To exercise a right, email info@mybizonline.ai. We may need proportionate information to confirm identity and scope. If your request concerns records controlled by a MyBizOnline OS customer, we may direct it to that customer or help the customer respond.

Questions, complaints and changes

Please contact us first if you have a concern so we can investigate it. You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office complaint guidance
Telephone: 0303 123 1113

We review this notice as the website, platform, providers and applicable requirements change. We will bring a materially different use of personal information to your attention before it begins where required. The date above identifies the current version.