Privacy Policy
Last updated October 16, 2026 · Applies to bifyo.com and the Bifyo application
Overview
Bifyo LLC ("Bifyo," "we," "us") built this policy around what the app actually stores and does - not boilerplate. If something below describes a control you can use, it's a real button in the app, not an aspiration. Questions at any point: contact us.
Information we collect
| Category | What | When |
|---|---|---|
| Account | First and last name, email, password (stored as a one-way hash, never in plain text) - or, if you sign in with Google, your Google account ID and the name/email Google gives us. Optional: avatar image, company, role. | Sign-up, Settings |
| Billing | A Stripe customer/subscription ID linking your account to Stripe's own records. Your card number never reaches our servers - Stripe collects and stores it directly. | Upgrading to a paid plan |
| Usage data | Addresses and categories you search, saved locations, generated reports, comparisons, alerts, and business-concept text you enter for a report. | Using the app |
| Support | Your name, email, and the content of any message you send us, plus any reply thread. | Contact form / support ticket |
| Affiliate program | If you join as an affiliate: name, email, referral link activity, commission history, and the details needed to pay you - account holder name, your postal address, IBAN, and your bank's name, SWIFT/BIC and address (payouts outside the US travel over SWIFT, and the sending bank requires all of these). | Affiliate sign-up |
| Technical / log data | IP address, browser user agent, and timestamps for login events - used for account security (e.g. detecting suspicious sign-ins), not sold or used for advertising. | Every sign-in |
How we use it
- To operate the Service: run your analyses, generate and store your reports, and keep your saved locations and alerts working.
- To process payments and keep a record of your purchases and report credits, via Stripe.
- To respond to support requests and send you transactional email - a reply to your ticket, a payout confirmation, or a similar account-related notice.
- To keep the Service secure - detecting fraud, abuse of the affiliate program, or unauthorized account access.
- To understand aggregate usage of the site via analytics (see Cookies), so we can see what's actually used and fix what isn't working.
We do not sell your personal information, and we do not use your saved locations, reports, or business-concept text to train models offered to other customers.
Public data we pull in
Separately from sharing your data, Bifyo's scoring pulls in public data about locations from the U.S. Census Bureau, FEMA's National Risk Index, OpenStreetMap, and Google Places - this is published, place-level data (demographics, hazard scores, nearby businesses), not information about you. See the Help centre for full source-by-source detail.
Data retention
We keep your account data for as long as your account is active, so your reports, saved locations and history stay available to you. If you ask us to delete your account (see Your rights), we delete or anonymize your personal data within a reasonable time, except where we're required to keep records (for example, billing records for tax/accounting purposes).
Your rights & controls
- Export your data - Settings → Data → Export as CSV (your profile, saved locations, and search history), any time.
- Erase your search history - Settings → Data → Erase search history, immediately, cannot be undone.
- Delete your account - there's no self-service button for this yet; contact us and we'll delete your account and associated personal data, confirmed by email.
- Correct your information - update your name and email any time from Settings.
- Opt out of the affiliate referral cookie - block or clear cookies in your browser; see the Cookie Policy.
Depending on where you live, you may have additional rights (for example, under GDPR or CCPA) to access, port, or object to processing of your data. Reach out via Contact us and we'll do our best to help, even where a fully automated process doesn't exist yet.
Security
Passwords are stored as one-way hashes, never in plain text. Traffic to the Service is encrypted (HTTPS). Card details are handled entirely by Stripe and never touch our servers. Optional two-factor authentication (an authenticator app, with backup codes) is available from Settings for extra account protection. No method of transmission or storage is 100% secure, and we can't guarantee absolute security - but we treat account and payment security as a first-class concern, not an afterthought.
Children's privacy
The Service is intended for business use by adults and isn't directed at children. We don't knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we'll remove it.
International users
Bifyo is a U.S. company and our servers are located in the U.S. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your home country.
Changes to this policy
We may update this policy as the Service changes. Material changes will be flagged with reasonable notice to active accounts. The "Last updated" date above always reflects the current version.
Contact
Questions about this policy or your data: Contact us, or write to Bifyo LLC, 30 N Gould St STE R, Sheridan, WY 82801, US.
This page is a general-purpose template describing how Bifyo actually operates today. It isn't a substitute for advice from a licensed attorney familiar with your specific business, users, and jurisdiction (including formal GDPR/CCPA compliance requirements).