Privacy Policy
Last Updated: January 11, 2026
This Privacy Policy explains how Bispull collects, uses, discloses, and safeguards your information. We have separate sections for App Users (consumers) and Business Users (business staff).
Introduction
Bispull ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, mobile application (the "App"), and business management platform.
We serve two distinct types of users:
- App Users: Consumers who use our marketplace platform to discover businesses, book appointments, place orders, and interact with businesses
- Business Users: Business staff (admins, managers, employees) who use our business management platform to manage operations, inventory, appointments, orders, and customer relationships
Please read this Privacy Policy carefully. By using our services, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our services.
Privacy Policy for App Users
This section applies to consumers who use our marketplace platform and mobile application.
1. Information We Collect
1.1 Account Information
When you create an account with Bispull, we collect:
- Email address (required)
- Password (encrypted and stored securely on our servers)
- First name and last name (optional)
- Phone number (optional)
- Address information including address, city, state, and zip code (optional)
1.2 Booking and Order Information
When you book appointments or place orders through the App, we collect:
- Customer contact information (name, email, phone number)
- Delivery or pickup address (if applicable)
- Service or product selections
- Appointment dates and times
- Order details (items, quantities, prices, tax information)
- Special instructions or notes you provide
- Order history and booking history
1.3 Location Information
With your permission, we may collect and use information about your device's location to:
- Show businesses near you
- Provide location-based search results
- Improve our services
You can enable or disable location services through your device settings at any time. If you disable location services, some features of the App may not function properly.
1.4 Device Information
We automatically collect certain information about your device, including:
- Device model and operating system
- Device identifiers
- IP address
- App version
- Usage data (how you interact with the App)
1.5 Communication Data
When you communicate with businesses through the App (via messaging/chat), we collect:
- Messages sent and received
- Conversation history
- Attachments (if any)
1.6 User-Generated Content
We collect content you voluntarily provide, including:
- Reviews and ratings you submit for businesses
- Comments on reviews
- Saved/favorite businesses
1.7 Push Notification Data
If you enable push notifications, we collect:
- Push notification tokens to deliver notifications about messages from businesses, order and appointment updates, and account-related notifications
1.8 Analytics and Tracking Information
We collect information about how you use the App, including:
- Pages/screens viewed
- Features used
- Actions taken (bookings, orders, searches)
- Time spent in the App
- Crashes and error reports
This information helps us improve the App and provide better service. We may use third-party analytics services for this purpose.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App - Enable you to browse businesses, book appointments, place orders, and use all features
- Process transactions - Handle your bookings, orders, and payments
- Communicate with you - Send you updates about your orders, appointments, messages, and account
- Improve our services - Analyze usage patterns to enhance user experience
- Personalize your experience - Show relevant businesses and content based on your preferences and location
- Customer support - Respond to your inquiries and provide technical support
- Legal compliance - Comply with legal obligations and protect our rights
- Safety and security - Detect and prevent fraud, abuse, and illegal activities
3. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
3.1 With Businesses
- When you book appointments or place orders, we share your contact information (name, phone, email) and order details with the relevant business
- When you message a business, we share your messages with that business
- When you write reviews, your review content (with anonymized or partial name display) is shared with the business and other users
3.2 With Service Providers
We may share information with third-party service providers who perform services on our behalf, including:
- Cloud hosting and database services (Supabase)
- Payment processing (as applicable)
- Analytics services (to understand App usage)
- Error tracking services (to identify and fix bugs)
- Push notification services
- Customer support tools
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
3.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).
3.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
3.5 With Your Consent
We may share your information in other circumstances with your explicit consent.
4. Data Storage and Security
4.1 Where Your Data is Stored
Your data is stored on secure servers. Our primary data storage is provided by Supabase, which uses industry-standard security measures. Data may be stored in various locations, including within your country/region.
4.2 Security Measures
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of sensitive data in transit and at rest
- Secure authentication methods
- Access controls to limit who can access your data
- Regular security assessments and updates
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
4.3 Data Retention
We retain your information for as long as necessary to:
- Provide you with the App and services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.
5. Your Rights and Choices
5.1 Access and Update
You can access and update your account information at any time through the App's Account settings.
5.2 Delete Your Account
You can request to delete your account at any time through the App's Settings. Upon deletion:
- Your account information will be deleted
- Your bookings and orders will be retained as business records (but anonymized)
- Your reviews may remain visible but will be anonymized
- Some information may be retained as required by law
5.3 Location Services
You can enable or disable location services through your device settings at any time.
5.4 Push Notifications
You can opt out of push notifications through your device settings. Note that disabling notifications may impact your ability to receive important updates about your orders and appointments.
5.5 Analytics and Tracking
Some analytics and tracking features may be disabled through your device settings (e.g., iOS App Tracking Transparency).
5.6 Communication Preferences
You can control certain communications from us through your account settings.
Privacy Policy for Business Users
This section applies to business staff (admins, managers, employees) who use our business management platform.
1. Information We Collect
1.1 Account Information
When you create a business account or are added as a staff member, we collect:
- First name and last name (required)
- Email address (required)
- Password (encrypted and stored securely on our servers)
- Phone number (optional)
- Role (admin, manager, or employee) and associated permissions
- Business association (which business and location(s) you are assigned to)
1.2 Business Information
When you register a business or manage business settings, we collect:
- Business name, address, and contact information
- Industry type
- Location information (if multiple locations)
- Subscription plan and billing information
1.3 Payment and Billing Information
For subscription and payment processing, we collect:
- Payment method information (processed securely through Stripe)
- Billing address
- Subscription details (plan, billing cycle, status)
- Transaction history
1.4 Business Operations Data
As you use the platform, we collect data related to your business operations, including:
- Customer information (names, contact details, purchase history)
- Inventory data (products, stock levels, pricing)
- Appointment schedules and booking information
- Order and sales data
- Employee and staff management information
- Business communications and messages
1.5 Usage and Analytics Data
We collect information about how you and your team use the platform:
- Login history and session data
- Feature usage and platform activity
- IP addresses and device information
- Error logs and system diagnostics
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the platform - Enable you to manage your business operations, including inventory, appointments, orders, customers, and staff
- Process payments and subscriptions - Handle billing, subscription management, and payment processing through Stripe
- Communicate with you - Send you account-related notifications, billing information, platform updates, and support communications
- Provide customer support - Respond to your inquiries, troubleshoot issues, and provide technical assistance
- Improve our services - Analyze usage patterns to enhance platform functionality and user experience
- Enforce security and access controls - Manage user roles, permissions, and access to business data
- Comply with legal obligations - Meet regulatory requirements and protect our rights
- Prevent fraud and abuse - Detect and prevent unauthorized access, fraudulent activity, and platform misuse
3. Information Sharing and Disclosure
We do not sell your personal information or business data. We may share your information in the following circumstances:
3.1 Within Your Business
Information you provide is accessible to authorized users within your business account based on their roles and permissions (admin, manager, employee).
3.2 With Service Providers
We may share information with third-party service providers who perform services on our behalf, including:
- Cloud hosting and database services (Supabase)
- Payment processing (Stripe)
- Email services (Resend)
- Analytics and monitoring services
- Error tracking and diagnostics
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
3.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).
3.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
3.5 With Your Consent
We may share your information in other circumstances with your explicit consent.
4. Data Storage and Security
4.1 Where Your Data is Stored
Your data is stored on secure servers. Our primary data storage is provided by Supabase, which uses industry-standard security measures. Data may be stored in various locations, including within your country/region.
4.2 Security Measures
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of sensitive data in transit and at rest
- Secure authentication methods and password hashing
- Role-based access controls to limit data access based on user roles
- Multi-tenant data isolation to ensure business data separation
- Regular security assessments and updates
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
4.3 Data Retention
We retain your information for as long as necessary to:
- Provide you with the platform and services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
When you cancel your subscription or delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or business purposes (e.g., transaction records, tax obligations).
5. Your Rights and Choices
5.1 Access and Update
You can access and update your account information and business settings at any time through the platform's Settings pages. Business admins have full control over business information and staff management.
5.2 Account Management
Business admins can manage staff accounts, roles, and permissions. Individual staff members can update their own profile information. If you need to delete your account or remove staff members, contact your business admin or our support team.
5.3 Subscription and Billing
You can manage your subscription, update payment methods, and view billing history through the platform's billing settings. Business admins have full control over subscription management.
5.4 Data Export
You may request a copy of your business data in a portable format. Contact our support team to request data export.
5.5 Account Deletion
If you wish to delete your business account, please contact our support team. Upon account deletion, we will delete or anonymize your personal information and business data, except where we are required to retain it for legal purposes (e.g., transaction records, tax obligations).
Children's Privacy
Our services are not intended for children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our services, you consent to the transfer of your information to these countries.
If you are located in the European Economic Area (EEA) or the United Kingdom, we will ensure that appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know - You can request information about the categories and specific pieces of personal information we collect, use, disclose, and sell
- Right to delete - You can request deletion of your personal information
- Right to opt-out - You can opt-out of the sale of your personal information (we do not sell personal information)
- Right to non-discrimination - We will not discriminate against you for exercising your privacy rights
To exercise these rights, please contact us using the information provided in the Contact Us section below.
European Privacy Rights
If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
- Right of access - You can request copies of your personal data
- Right to rectification - You can request correction of inaccurate data
- Right to erasure - You can request deletion of your data
- Right to restrict processing - You can request limitation of how we process your data
- Right to data portability - You can request transfer of your data to another service
- Right to object - You can object to certain processing of your data
To exercise these rights, please contact us using the information provided in the Contact Us section below.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on our website
- Updating the "Last Updated" date
- Sending you a notification (for material changes)
Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Additional Information
Data Controller
For users in the EEA/UK: [COMPANY_NAME] is the data controller for your personal information.
For users in other jurisdictions: [COMPANY_NAME] is responsible for your personal information.
Data Protection Officer
If you are located in the EEA/UK, you can contact our Data Protection Officer at: [DPO_EMAIL]
Supervisory Authority
If you are located in the EEA/UK and have concerns about how we process your data, you have the right to lodge a complaint with your local data protection authority.