Privacy Policy

When you create a tradesperson account, we collect:

• Account credentials — email address and password (or Google / Apple Sign-In tokens)
• Profile details — name, trade type, location, postcode, bio
• Contact details — phone number, contact email, website URL
• External review links — your Checkatrade and Trustatrader profile URLs
• Profile image — if you choose to upload one
• Calendar & availability data — jobs, holidays, non-working days, and availability blocks you enter
• Job information — customer names, addresses, contacts, dates, pricing, payment status, and notes
• Financial documents — quotes, invoices, and line-item details you create
• Material receipts — receipt images or PDFs and associated metadata (merchant, amount, date, category)
• Calendar integration — webcal feed URLs or Google Calendar OAuth tokens you connect
• Voice recordings — audio clips you dictate when using Voice-to-Quote or Voice-to-Pre-Quote (Pro AI only)
• Non-working day preferences and unit preferences (miles/km)

Customers do not need an account. No personal information is required to search or view public profiles. If you contact a tradesperson directly (phone, email) that communication happens outside our platform and we do not collect it.

When you use our Services, we automatically collect:

• Device & browser information — device type, operating system, browser type
• Usage data — pages visited, features used, time spent, search queries entered
• Log data — IP address, access timestamps, error reports
• General location — approximate location inferred from IP address (not GPS)

Certain features involve data from external providers:

• Google Calendar — job titles, dates, and locations from your connected Google Calendar when you enable bidirectional sync
• ICS / webcal feeds — event data from any calendar feed URL you provide
• postcodes.io — postcode geolocation data used for search distance calculations (no API key required; no personal data sent)
• Nominatim — place names used in Featured Listing search (open-source; no personal data sent)
• Google Routes API — job addresses submitted for route optimisation (Pro AI only)
• OpenAI Whisper — audio transcription for Voice-to-Quote and Voice-to-Pre-Quote; recordings are sent to OpenAI for transcription (Pro AI only)
• Anthropic Claude — transcripts, receipt images, and job data sent for AI processing (Pro AI only)

Subscription payments are handled entirely by Stripe. We do not store your card number, CVV, or full payment details on our servers. Stripe provides us with a customer ID and subscription status. See Stripe's Privacy Policy for details.

We use essential cookies and browser localStorage to maintain sessions, remember your preferences (dark/light mode, units), and store your cookie consent choice. We do not use third-party advertising or tracking cookies.

Your tradesperson profile — name, trade type, location, postcode, bio, contact details, Checkatrade/Trustatrader links, and availability calendar — is publicly visible to anyone who uses the customer search. You control this information via your Profile settings. Toggling "Pause Listing" hides your calendar from public view while keeping your account intact.

We share data with the following third-party providers who process it only on our behalf:

• Supabase — database hosting, authentication, file storage (receipt images), and real-time services
• Stripe — subscription billing and payment processing
• Anthropic — Bizzy Day AI processing for Pro AI features (voice-to-quote, voice-to-pre-quote, OCR, debt chasing, semantic search)
• OpenAI — Whisper audio transcription for Voice-to-Quote and Voice-to-Pre-Quote (Pro AI)
• Google — Calendar API for bidirectional sync; Routes API for route optimisation
• postcodes.io / Nominatim — postcode and place name lookups (no personal data transmitted)

If Bizzy Day is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We may disclose your information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We will share your information with third parties only when you give us explicit consent beyond what is described above.

You control what appears on your public profile. You can edit or remove your name, bio, contact details, photo, and external review links at any time via the Profile screen.

Toggling "Pause Listing" in Settings hides your calendar from customers and replaces it with an "Currently unavailable" banner. Your profile data is preserved and you can reactivate at any time.

You can disconnect your Google Calendar OAuth or remove your webcal URL at any time from the External Calendars screen. Revoking Google access removes our ability to sync with your Google Calendar but does not delete previously imported jobs.

Pro AI features (Voice-to-Quote, Voice-to-Pre-Quote, Receipt OCR, Debt Chasing, Smart Search) only send data to Anthropic or OpenAI when you explicitly trigger them. You can use the app fully without ever using these features.

You can delete your account from the Settings screen. This permanently removes your profile, jobs, receipts, quotes, invoices, and associated data within 30 days. Backups may retain data for up to 90 days for security and legal compliance.

You can withdraw your cookie consent at any time by clearing your browser's localStorage for bizzy.day. Note that some essential cookies are required for the app to function.

We process your data on the following legal bases:

• Contract — processing necessary to provide the Services you have subscribed to
• Legitimate interests — analytics, fraud prevention, and service improvement
• Consent — optional features such as cookie preferences and AI processing of voice/image data
• Legal obligation — financial record-keeping and responding to lawful requests

In addition to the rights in Section 10, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your local supervisory authority if you are in the EEA.