Privacy Policy

1. Who we are

Bizzpuls is a product of Innovatica Technologies FZ-LLC (“Innovatica”, “we”, “us”), the company behind bizzpuls.com. Innovatica is the data controller for the information described here. The product application runs at app.bizzpuls.com.

For any privacy question, or to exercise your rights, write to privacy@bizzpuls.com.

2. What this covers

This policy covers two things: the Bizzpuls application (the product you sign in to and connect your business channels to), and this website, bizzpuls.com. Where a section applies to only one of them, we say so.

3. The channels you connect — and only those

Bizzpuls works on channels your business already has. It reads a channel only after you explicitly connect it in the app, and only the channels you connect. Today those are:

• your WordPress website — its pages, posts and the comments customers leave;
• your e-mail inbox — a mailbox you connect over IMAP/SMTP;
• your Instagram Professional account (Business or Creator) — the media and comments on your profile.

You can disconnect any channel at any time. Disconnecting a channel deletes the data Bizzpuls stored for it (see Retention and Deleting your data below).

4. How your access is secured

Bizzpuls never asks for or stores your website password. Connections use credentials you authorise on the channel’s own screen:

• WordPress: a WordPress Application Password you approve on your own site (for a content-only Editor user, or an Administrator user if you choose full management) — you approve the connection on your site and never hand us your login password.
• E-mail: an app-password issued by your mail provider, used for read access and, only when you approve a reply, to send it from your own mailbox.
• Instagram: a Meta OAuth access token obtained through Instagram’s own login and consent screen — not your Instagram password. The token is short-lived and refreshed, and you can revoke it from your Instagram/Meta settings at any time.

Every connection secret or token is encrypted at rest with AES-256-GCM using a key held only in our server configuration. It is never stored in plain text and never written to logs. Secrets are never entered into, or carried through, the chat with Bizzpuls.

5. What Bizzpuls stores, and where

To do its job, Bizzpuls keeps a working copy of the content it reads from the channels you connect — for example page and post text, customer comments, the e-mails in a connected mailbox, and Instagram media and comments. It stores this so it can search it, summarise it, and draft changes and replies for you.

• Structured data and text (metadata, message text, drafts, your approvals, an audit record of applied changes) is held in a PostgreSQL database.
• Large original files (a raw e-mail and its attachments, media) are held in Microsoft Azure Blob storage, with a link kept in the database.

Both are hosted on Microsoft Azure in the European Union (Sweden). Your business’s data is kept strictly separated from every other customer’s: every record is scoped to your account, and one customer’s data is never mixed with, or made derivable from, another’s.

6. How your data is used

Bizzpuls uses the content it reads to:

• tell you, in plain language, what customers keep asking or raising;
• draft page changes, posts, translations and replies for you to review.

To do this, the relevant content is processed by a large language model. That model runs on Microsoft Foundry, a Microsoft Azure service in the EU, which acts as our processor for this step. It is our only model provider. Your content is used to serve you — it is not used to train models, is not sold, and is not used for advertising or profiling.

Nothing is ever applied to your website or sent from your inbox without your explicit approval in the app. Every change and every reply is a proposal — shown to you as a clear before-and-after — until you approve it. There are no automatic edits, no silent publishing and no auto-replies, however a request is phrased. Applied changes are recorded in an append-only audit log, and the previous version is kept so a change can be undone.

7. Instagram and Meta data

When you connect an Instagram Professional account, Bizzpuls requests only the Meta permissions it needs to do the job you connected it for:

• instagram_business_basic — to read your account’s basic profile, media and the comments on it;
• instagram_business_manage_comments — to show you the comments that need a response and, only after you approve a reply, to post, hide or remove a comment on your behalf.

This Instagram data is used for one purpose: to show you your own comments and questions and to carry out the comment actions you approve. It is never used for advertising, profiling, resale, or any purpose beyond operating the account you connected. We follow Meta’s Platform Terms and Developer Policies for this data, including its deletion requirements (see Deleting your data below).

8. This website (bizzpuls.com)

Contact / pilot-invitation form

If you submit the form on this site, the name, e-mail address and message you enter are sent to us by e-mail (to info@innovatica.ai) through Microsoft Azure Communication Services so we can reply and, if you asked, invite you to the pilot. To keep the form free of spam and abuse it is protected by Cloudflare Turnstile, which performs a lightweight human check. We use what you submit only to respond to you.

Analytics

This site can use Google Analytics 4 to understand, in aggregate, how the site is used. It is consent-gated: nothing is sent to Google unless you click Accept in the banner. If you decline, or ignore the banner, no analytics code loads and no analytics data is collected. Your choice is remembered in your browser, and you can change it by clearing the site’s stored data. We use no other trackers or advertising cookies.

9. Who we share data with

We do not sell your data. We share it only with the service providers (processors) that make Bizzpuls work, under contracts that limit them to our instructions:

• Microsoft — Azure hosting and storage, the Foundry language model, and Azure Communication Services for e-mail (EU region);
• Cloudflare — the Turnstile anti-abuse check on this website’s form;
• Google — Analytics on this website, and only if you have given consent.

We may also disclose data where the law requires it. The channels you connect (WordPress, your mail provider, Meta/Instagram) are operated by you or by third parties under their own terms; Bizzpuls acts on them only as you direct.

10. How long we keep it

We keep the content and connection data for a channel while that channel is connected and your account is active. When you disconnect a channel, or delete your account, the stored data for it is deleted — including the large files in Blob storage, which are removed together with the database records. Our audit log keeps a record of what was changed and approved (not the content itself), which we may retain where we need it to meet legal or accountability obligations. Website analytics data is retained according to Google Analytics’ settings for our property.

11. Your rights

Subject to applicable data-protection law (including the GDPR), you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, to data portability, and to withdraw consent (for example, to website analytics) at any time without affecting what came before.

Much of this you can do yourself in the app — see Deleting your data below. For anything else, or to make a formal request, write to privacy@bizzpuls.com and we will respond within the time the law allows. You also have the right to lodge a complaint with your local data-protection supervisory authority.

12. Deleting your data

You can have the data Bizzpuls holds for you deleted in any of these ways:

In the app (fastest)

Sign in at app.bizzpuls.com and go to Settings → Connections. Disconnecting a channel deletes the data Bizzpuls stored for it — the copied content and messages in the database and the original files in storage are removed together — and discards the stored access credential or token for that channel. Deleting your account removes the data for all of your channels the same way.

From your Instagram / Meta settings

If you connected Instagram, you can also revoke Bizzpuls’s access from Instagram itself (Settings → Apps and websites / website permissions, or your Meta Business settings). Meta then sends a data-deletion request to Bizzpuls’s callback at https://app.bizzpuls.com/api/meta/data-deletion, and Bizzpuls deletes the Instagram data it stored for you and removes the connection automatically.

By e-mail

If you would rather we handle it, or you can no longer sign in, write to privacy@bizzpuls.com from the address associated with your account and tell us what to delete (a specific channel, or everything). We verify the request and delete the data, confirming when it is done, within 30 days.

Deletion removes the content and messages copied from the channel, the original files in storage, and the encrypted credential or token for the connection. We keep a minimal audit record of actions taken (what changed or was sent, and when — not the content itself) where we need it for legal or accountability reasons, and backups age out on their normal cycle. Deleting your data from Bizzpuls does not change anything already published on your own website or already sent from your own mailbox — those live on the channels you control.

13. Children

Bizzpuls is a tool for businesses and is not directed at children. We do not knowingly collect personal data from children.

14. Changes to this policy

If we change how we handle data, we will post the updated policy on this page and change the “Last updated” date above. Material changes will be communicated through the app where appropriate.

15. Contact

Innovatica Technologies FZ-LLC — privacy questions and data-rights requests: privacy@bizzpuls.com.