Privacy notice.

The short version

• Your tools run in your browser. Case details, uploaded files and generated documents stay on your device unless you choose to send them. You do not need an account.
• We collect only what we need to answer review requests and support email, deliver and bill website reviews, and keep the service secure.
• Accounts, cloud saving and paid AI-assisted runs were retired on October 19, 2026. If you created an account before then, email us and we will delete it.
• We do not sell your personal information, share it for cross-context behavioral advertising or use advertising trackers.
• You can ask to see, correct or delete your information by emailing hello@businesscompliancetools.com.

Who is responsible

Business Compliance Tools (businesscompliancetools.com) is responsible for the personal information described in this notice. For any privacy question or request, email hello@businesscompliancetools.com.

The service is designed for buyers in the United States.

Information that stays on your device

You can use every available tool without an account. Your records, calculations, uploaded files, filenames, extracted text, imported datasets and generated documents are stored in your browser using IndexedDB and similar browser storage. We do not receive them.

New exports do not upload a ZIP. Original evidence files enter the local ZIP only when you choose to include them.

Browser storage is not permanent. Clearing site data or browser cleanup can remove it, so download backups and keep downloaded files safe. We cannot reconstruct your documents after all local copies disappear.

The tool finder matches your description against the catalog on your device. Your description is not sent to us or to an AI service.

Information we collect

Website review requests

When you send the review request form, we receive the review you chose, your public website address, email, company and message. We store them encrypted in our own system and email a copy to our support mailbox so a person can reply. We do not send you marketing email from the form. If the form cannot reach us, it prepares an email on your device instead, and we receive that only when you send it.

Website review engagements

When you buy a review, we keep the scope confirmation, our emails about it, the report and the invoice. If you give us test access or send material such as policy documents or redacted records, we use it only for your review. Please remove personal information about your customers before you send anything.

Review payments

Online checkout is not open. After the scope is confirmed, we email you an invoice or payment details. We keep the amount, date and payment status with the invoice. The payment service named on the invoice processes the payment under its own privacy policy.

Support email

When you email us, we receive your email address, name, subject, message and any attachments. Email arrives through Cloudflare Email Routing and is kept in our mailbox, which Google hosts. We also keep messages encrypted in our own support system. A person reads and answers every message. Please do not email case facts, uploaded documents or evidence packs unless we ask for them.

Security and diagnostics

Our hosting provider and service logs process IP address, browser type, requested page, timestamps and error details to deliver and protect the service. Error logs are kept for 7 days with URL query strings removed. Usage counts are stored as daily totals without personal identifiers.

Website analytics

Cloudflare Web Analytics measures page views and page performance without analytics cookies. It never receives your tool inputs, files or reports. See the Web Analytics documentation. If you arrive from a known AI assistant, such as ChatGPT, we count the visit by service name in a daily total kept for 30 days. We do not keep the referring address or a record of you.

Earlier purchases and accounts

If you bought from us through Paddle before October 19, 2026, we keep the purchase record Paddle sent us: transaction and customer identifiers, amount, currency, country, payment status and consent timestamps. Paddle holds the payment details, and we never received full card numbers. If you created an account before that date, it may still hold the records you chose to save until you ask us to delete it.

Why we use it

• To answer website review requests, support questions and privacy requests.
• To confirm the scope of, deliver, invoice and retest the reviews you buy.
• To handle refunds, disputes and deletion requests for purchases and accounts from before October 19, 2026.
• To keep the service secure, fix problems and prevent fraud or abuse.
• To keep transaction and tax records required by law.

We do not use your information for advertising, and we do not use it to make legal or similarly significant decisions about you.

Your choice to provide information

Giving us personal information is voluntary. You can browse and use free tools without giving us anything. Without enough contact details, we cannot answer a request or deliver a review.

Who helps us provide the service

We share information only with the service providers we need to run the service, and only for that purpose:

• Cloudflare hosts the website and its server functions, stores review requests, support messages and earlier purchase records, and provides Email Routing and Email Service.
• Google hosts our support mailbox.
• Paddle was merchant of record for tool purchases made before October 19, 2026, and holds the payment records for them.
• The payment service named on your review invoice processes your payment.

We may also disclose information when the law requires it, to protect rights and safety, or as part of a sale or reorganization of the business, in which case this notice continues to apply.

These providers may process information in the United States and other countries. Their own privacy policies explain how they handle it:

• Cloudflare privacy policy
• Google privacy policy
• Paddle privacy policy

How long we keep it

• Browser data stays on your device until you delete it or clear site data.
• Review requests and inquiries that do not lead to a review are deleted 12 months after our last contact with you.
• Engagement records (the scope confirmation, the report and the invoice) are kept for 7 years after delivery.
• Test access you give us for a review is revoked and deleted when we deliver the report.
• Other material you send for a review is deleted within 30 days after delivery.
• Support email is kept for up to two years after the request closes, unless it forms part of a review, transaction or dispute. Copies in our support system are deleted 180 days after they arrive.
• Earlier purchase, tax and dispute records are kept for the period the law requires. Server archives from earlier purchases follow the expiry rules that applied when they were created. A refund ends server access but cannot remove files already saved on your device.
• Accounts created before October 19, 2026 are deleted when you ask.
• Security logs are kept only as long as needed for security and troubleshooting. Error logs are kept for 7 days.

You can ask us to delete your information sooner, apart from records the law requires us to keep.

How we protect it

We keep data collection small, store review requests and support messages encrypted, and keep tool inputs and files out of analytics and logs. No online service is perfectly secure, so keep your own files and backups protected.

United States privacy rights

Depending on where you live, you may have the right to know what personal information we hold, get a copy, correct it, delete it, and opt out of its sale, sharing or targeted advertising. We do not sell or share personal information or use it for targeted advertising, so there is nothing to opt out of.

To make a request, including deleting an account created before October 19, 2026, or to appeal a decision, email hello@businesscompliancetools.com. An authorized agent can make a request for you. We reply within 2 business days. We may ask for limited information to verify the request, and we complete it within the time the law requires. We will not treat you differently for using your rights.

Cookies and browser storage

We use only the browser storage needed to save your work in the tools and keep the website secure. We do not use advertising or cross-site tracking cookies. The cookie and browser storage policy lists what we use, including storage left from earlier purchases and accounts.

Children

The service is for adults and businesses. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email us and we will delete it.

Changes to this notice

We may update this notice as the service changes. The date at the top shows the latest version. If a change significantly affects how we use information you have already given us, we will make it clear on the website before it applies.

Contact

Email hello@businesscompliancetools.com with any privacy question or request. We reply within 2 business days.