Privacy Policy
Moshe-Ran Dor ("we"), trading as BizLegal AI, 100 Business Park Ln, Milton, Delaware 19968, US, is the controller of the personal data described here.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | To deliver what you bought and answer support | Contract |
| Order reference, amount, status (from the payment processor) | To fulfil, refund, and keep accounts | Contract; legal obligation |
| Input you send to a tool product | To produce your deliverable only | Contract |
| Request logs (time, path, order reference) | To run and secure the service | Legitimate interest |
| Consent choices (local to your browser) | To honour your cookie settings | Legal obligation |
We do not see or store full card numbers. We do not sell personal data and we do not use it for advertising.
Retention
Retention: account data while the account is active plus 24 months; server and consent logs 12 months; then deleted or anonymized. Tool input: deleted once your deliverable is produced. Server and consent logs: 12 months, then deleted or anonymized. Consent choices: until you change or clear them.
Your rights
You can ask for access, correction, deletion, portability, restriction, and you can object to processing based on legitimate interest. You can withdraw consent at any time without affecting earlier processing. Write to team@bizlegal-ai.com or team@bizlegal-ai.com. You may also complain to your supervisory authority.
California residents (CCPA/CPRA): you have the right to know, delete, correct, and to opt out of sale or sharing. We do not sell or share personal information as defined by the CPRA. We will not discriminate against you for exercising these rights. Authorized agents may submit requests on your behalf with proof of authority.
Processors and transfers
We use these processors: PayPal (payments), Resend (transactional email), Cloudflare (hosting and cookie-free edge analytics), and Google (web font delivery; the font request may log your IP address). Some are outside your country; transfers rely on standard contractual clauses or an adequacy decision. EU representative, where required: none appointed. This service is not directed at EU/EEA residents until one is appointed.
Security
Transport encryption, least-privilege access, signed webhook verification, and no storage of raw secrets or card numbers.
Children
Our products are for adults. We do not knowingly collect data from children under 16.
Changes and contact
We will post changes here with a new version and effective date. Contact: team@bizlegal-ai.com.