Biz Made Clear / Legal

Privacy Policy

Last updated 2026-11-03

Draft revision — review before publishing

This policy explains what Biz Made Clear (Milestone Consulting and Management Ltd.) collects about you, why, how AI processing works, and your choices. We follow Canada’s PIPEDA and, where it applies, Quebec’s Law 25.


What we collect

Account details: your name, email address, password (stored as a one-way hash for email/password sign-in) and sign-in activity.

Purchase details: what you bought, when, the amount, and billing address and country for tax. Card numbers are handled by Stripe and never reach our systems.

Business information you give us: questionnaire answers, uploaded files, your business profile, and your conversations in Business Support. This can include commercially sensitive information, and we treat it that way.

Technical information: IP address, browser, and privacy-conscious usage analytics on the public site. We do not use advertising trackers.

Proposed Google sign-in disclosure — confirm before publishing

Proposed wording: When you choose Google sign-in, the account information you authorize in Google’s consent flow is used to authenticate you and give you access to your Biz Made Clear account. Google processes information under its own privacy policy. Your Google password is not shared with Biz Made Clear.

Review note: Google sign-in is planned, not yet implemented. Confirm the exact fields/scopes and retention before publication. This proposed wording does not verify current backend behavior.

Why we use it

To create your account, process payments, deliver what you bought, and send transactional emails about your orders, documents and access.

To prepare your personalized strategies and answer in Business Support, using the information you provided.

To keep the service secure, prevent abuse, and meet legal and tax obligations.

To send promotional email only if you opted in. You can withdraw that consent at any time from your account or the link in any such email, in line with Canada’s anti-spam law.

How AI processing works

Your questionnaire answers, business profile and chat messages are sent to Anthropic, our AI provider, to generate your documents and chat responses. Under our commercial agreement, Anthropic does not use this data to train its models. We send only what is needed for the request, not your whole history, and we keep summaries rather than resending every message.

Every generated document records which version of our instructions produced it, so we can investigate problems you report.

Who we share it with

Service providers who run parts of the platform for us: Stripe (payments and tax), Anthropic (AI generation), Resend (email delivery), Cloudflare (file storage and site hosting), Neon (database) and Fly.io (application hosting). Some of these are outside Canada, mainly in the United States, and your information may be stored or processed there.

Our technical operator, who maintains the platform under contract, has administrative access limited to what the work requires.

We do not sell your information. We disclose it to authorities only where the law requires.

How long we keep it

Purchased guides and strategy documents stay in your account for as long as you keep it. Chat conversations are kept while your account exists so the service can refer back to them; you can delete individual conversations. Order and tax records are kept for seven years as Canadian law requires. An account inactive for three years may be closed after notice.

Your rights and choices

You can see and update your profile and business information in your account. You can ask for a copy of your personal information, ask us to correct it, or ask us to delete your account by emailing contact@bizmadeclear.com or using the privacy section of your account. We answer within 30 days. Some records must be kept for legal reasons even after deletion.

Cookies: we use a session cookie to keep you signed in and a preference cookie or two. No third-party advertising cookies.

Security

All traffic is encrypted in transit. Files are stored in a private bucket and served only to the account that owns them after a server-side check. Passwords for email/password sign-in are hashed. Access by staff is limited and logged. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

Contact

Privacy questions and requests: contact@bizmadeclear.com. Our privacy officer is the business owner.