Privacy Policy for iTrepreneur

1. Information We Collect

We collect information about you when you use iTrepreneur. This includes:

1.1 Information You Provide

• Account Information: When you register, we collect your name, email address, phone number, business name, and other relevant details.
• Business Data: You may provide information about your business operations, goals, and strategies for personalized coaching.
• Payment Information: If you subscribe to paid features, we collect payment details, which are securely processed by third-party payment providers.

1.2 Information Collected Automatically

• Usage Data: We collect information about your interactions with the Platform, such as login times, feature usage, and navigation patterns.
• Device Information: This includes your device type, operating system, browser type, IP address, and unique device identifiers.
• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience and analyze Platform performance. See Section 8 for details on cookies.

1.3 Information from Third Parties

• Google Sign-In: If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account to create and authenticate your iTrepreneur account.
• Google Calendar: If you choose to connect Google Calendar, we access your calendar events and calendar list to enable two-way sync between iTrepreneur goals/tasks and your Google Calendar. Your Google Calendar OAuth tokens are stored securely and used solely for this integration.
• Intuit QuickBooks Online: If you choose to connect QuickBooks, we receive read-only access to your company's accounting data to bring your real figures into iTrepreneur. See Section 10 for exactly what we access and how it is handled.
• Integrated Services: If you connect other third-party tools, we may collect data from these integrations to provide the connected functionality within iTrepreneur.

2. How We Use Your Information

We use your information to:

1. Provide, maintain, and improve iTrepreneur's functionality and user experience.
2. Deliver personalized business coaching insights powered by D.O.R.E and third-party large language models (LLMs).
3. Process transactions, manage billing, and communicate subscription details.
4. Analyze usage trends to optimize the Platform's performance and develop new features.
5. Communicate with you regarding updates and service announcements.
6. Ensure compliance with legal and regulatory requirements.

3. AI-Driven Data Processing

As part of iTrepreneur's AI-powered functionality, user data is processed by D.O.R.E and third-party LLMs. This allows us to generate personalized recommendations, insights, and business strategies.

Data obtained from third-party services such as Google (including Google Calendar data) is explicitly excluded from this AI processing unless strictly required to fulfill a user-initiated feature, and is never used for AI model training or improvement.

Financial data from a connected QuickBooks account is processed by D.O.R.E and our AI provider so that D.O.R.E can answer your questions and coach you from your real numbers. It is never used to train or improve AI models (see Section 10).

3.1 How AI Handles Your Data

1. Data input by users is processed securely to create actionable insights.
2. Aggregated and anonymized data (excluding data obtained from third-party services such as Google and Intuit QuickBooks) may be used to improve AI models.
3. We employ safeguards to ensure that your personal data is not exposed or misused during AI processing.

3.2 Limitations

While AI enhances our Services, it is not infallible. Users should validate recommendations and understand that results are generated based on algorithms and available data.

4. Sharing Your Information

We may share your data with third parties under the following circumstances:

4.1 Service Providers

We engage trusted third-party vendors for payment processing (Stripe), cloud hosting (Amazon Web Services), AI-powered coaching (OpenAI), and push notifications (Firebase Cloud Messaging). These providers are bound by confidentiality agreements and are only permitted to use your data to provide the specified services on our behalf. We do not share Google user data with these providers except as necessary to provide user-facing features within iTrepreneur.

4.2 Legal Requirements

We may disclose your data if required to comply with applicable laws, regulations, or legal processes, or to protect the rights, safety, and property of ByNanAI, its users, or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor organization, subject to the terms of this Privacy Policy.

4.4 Aggregated or Anonymized Data

Non-identifiable, aggregated data (excluding data obtained from Google and Intuit QuickBooks) may be shared for product improvement and Platform development purposes.

5. Your Data Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

5.1 Access and Correction

You have the right to access your data and request corrections if the information is inaccurate or incomplete.

5.2 Deletion

You may request that we delete your personal data, subject to legal or operational retention requirements.

5.3 Data Portability

Where applicable, you can request a copy of your data in a portable format for transfer to another service.

5.4 Restriction of Processing

You can request to restrict the processing of your data under certain conditions, such as during dispute resolution.

5.5 Objection to Communications

You have the right to opt-out of non-essential communications at any time by clicking "Unsubscribe" in our emails or contacting us directly.

To exercise these rights, please contact us at coach@itrepreneur.ai.

6. Data Security

We take the protection of your data seriously and implement industry-standard security measures, including:

1. Encryption of data in transit and at rest.
2. Regular security audits and vulnerability assessments.
3. Access controls to limit data exposure to authorized personnel only.

While we strive to protect your data, no system is completely secure. By using iTrepreneur, you acknowledge and accept this inherent risk.

7. International Data Transfers

If you are located outside Canada, your data may be transferred to and processed in Canada or other countries where ByNanAI operates. By using iTrepreneur, you consent to such transfers, which are subject to appropriate safeguards in compliance with applicable data protection laws.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

1. Remember user preferences and improve functionality.
2. Analyze Platform performance and usage patterns.
3. Deliver relevant content and personalize your experience.

You can manage cookies through your browser settings, but disabling them may limit certain features of iTrepreneur. For more information, see our Cookie Policy.

8.1 Your Consent Choices

We ask for your choice about analytics and marketing cookies on this website and in the iTrepreneur app at coach.itrepreneur.ai. If you are in the European Economic Area, the United Kingdom, Switzerland or Quebec, none of them are used until you accept. Elsewhere, on this website, the Meta Pixel described in section 8.2 runs from your first visit until you decline. Your choice applies to both, and you can change it at any time from the "Cookie settings" link at the bottom of every page on this website, or from Account → Settings in the app. If your browser sends a Global Privacy Control signal, we treat it as a refusal of marketing cookies. We keep a record of each choice so that we can show consent was given: the choice, when and on which page it was made, which site it was made on, whether your browser sent Global Privacy Control, and a random identifier also stored in your browser. The record contains no account or contact information. Like every request to our servers, the request that saves it is also logged with your IP address and browser details for security and troubleshooting.

Session recordings made with Microsoft Clarity, which help us see where the app is hard to use, run only if you accept analytics cookies.

8.2 Advertising Measurement with Meta

We use the Meta Pixel on this website, and if you accept marketing cookies, on the app's sign-in and sign-up pages and through Meta's Conversions API from our servers, to measure whether our advertising on Facebook and Instagram leads people to start a free trial. This information is shared with Meta Platforms, Inc.:

1. Which pages you view on this website and on the app's sign-in and sign-up pages, which sign-up and trial buttons you click (including the button's label), and that a trial account was created.
2. Meta's advertising cookie identifiers, your IP address, and your browser's user agent.
3. When you create an account: your email address and account identifier in one-way hashed form (SHA-256), which Meta uses to match the sign-up to an ad it showed you.

We never share your coaching conversations, business information, financial figures, Google user data, or QuickBooks data with Meta or any other advertising platform. Meta processes the information above under its own terms and privacy policy. On this website, the Pixel runs from your first visit unless you are in the European Economic Area, the United Kingdom, Switzerland or Quebec, or your browser sends Global Privacy Control; in those cases it waits until you accept. If you decline marketing cookies, from the cookie banner or the "Cookie settings" link, nothing more is sent from then on.

9. Google User Data

iTrepreneur offers Google Sign-In for account authentication and an optional Google Calendar integration. This section describes how we handle data received from Google APIs.

9.1 What Google Data We Access

• Google Sign-In: Your name, email address, and profile picture, used solely to create and authenticate your iTrepreneur account.
• Google Calendar (optional): Your calendar list and calendar events, used solely to sync your iTrepreneur goals and tasks with your Google Calendar, and the email address of the Google account you connect, so we can show you which account is connected.

9.2 How We Use Google Data

Google user data is used exclusively to provide and improve user-facing features within iTrepreneur:

• Google Sign-In data is used to authenticate your identity and display your name and profile picture within the app.
• Google Calendar data is used to display your calendar events and sync iTrepreneur goals and tasks to your calendar.

9.3 What We Do Not Do with Google Data

We do not use Google user data for any purpose other than providing or improving iTrepreneur's user-facing functionality. Specifically, we do not:

• Transfer or sell Google user data to third parties, advertising platforms, data brokers, or information resellers.
• Use Google user data for serving advertisements, including retargeting, personalized advertising, or interest-based advertising.
• Use Google user data to determine creditworthiness or for lending purposes.
• Use Google user data for surveillance purposes.
• Use Google user data to train, fine-tune, or improve any artificial intelligence or machine learning models.
• Process Google user data through third-party AI systems (such as large language models), except where strictly necessary to provide a user-requested feature, and in such cases, the data is not retained or used for training.

9.4 Google Data Storage and Security

Your Google Calendar connection is held on our servers: the refresh token is encrypted (AES-256) before it is stored, and our Google application credentials are kept in a secure secrets store, never in the app. Your browser only ever receives a short-lived access token, which it uses to read and update your calendar and keeps in memory only. You may disconnect Google Calendar at any time from the Integrations settings, which revokes iTrepreneur's access with Google and deletes the connection from our servers. Google Sign-In authentication is managed through AWS Cognito and no Google access tokens are stored on our servers.

9.5 Google API Services Limited Use Disclosure

iTrepreneur's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Intuit QuickBooks Data

iTrepreneur offers an optional connection to Intuit QuickBooks Online. Only you can connect it, by signing in to QuickBooks and approving access. This section describes how we handle data received from QuickBooks.

10.1 What QuickBooks Data We Access

• Company information: your company name and home currency.
• Financial reports: your profit and loss, balance sheet, chart of accounts, and bank-account transactions from the general ledger, covering up to the last 24 months, refreshed daily and when QuickBooks notifies us of a change.
• Receivables and payables: amounts owed to and by your business, with their due dates and ageing.
• On request: summaries such as sales by customer or expenses by account, read live when you ask D.O.R.E a question that needs them.

10.2 How We Use QuickBooks Data

QuickBooks data is used only to provide features to you within iTrepreneur:

• To fill in your financial tools, such as your income statement, balance sheet and cash flow forecast, with your real figures.
• To show your trends and your progress over time.
• To let D.O.R.E answer your questions and coach you from your actual numbers. To do this, relevant figures are sent to our AI provider (OpenAI) to generate D.O.R.E's responses to you.

10.3 Read-Only Access

iTrepreneur only reads from QuickBooks. It never creates, changes or deletes anything in your books.

10.4 What We Do Not Do with QuickBooks Data

• We do not sell QuickBooks data or share it with advertisers, data brokers or information resellers.
• We do not use QuickBooks data for advertising, to determine creditworthiness, or for lending purposes.
• We do not use QuickBooks data to train, fine-tune or improve any artificial intelligence or machine learning model, and our AI provider does not use it for training.
• We do not show your QuickBooks data to anyone other than you. If an organization sponsors your iTrepreneur subscription, it sees only engagement information, such as how many tools you have used, never your financial figures.

10.5 QuickBooks Data Storage and Security

Your QuickBooks connection tokens are encrypted (AES-256) before they are stored, and are used only to maintain your connection. Our application credentials for QuickBooks are held in a secure secrets store and are never included in the app. All data is encrypted in transit. The figures we bring in are stored with your business's records in iTrepreneur so that your tools, history and coaching can use them, in a database that is encrypted at rest (AES-256), as are its backups.

10.6 Disconnecting and Deletion

You can disconnect QuickBooks at any time from the Integrations settings in iTrepreneur, or from within QuickBooks. Disconnecting revokes our access and deletes your connection tokens from our servers. Figures already brought in remain part of your business's records in iTrepreneur, so your history stays intact. To have them deleted, contact us at coach@itrepreneur.ai.

Intuit and QuickBooks are trademarks of Intuit Inc. iTrepreneur is not affiliated with or endorsed by Intuit.

11. Retention of Data

We retain your data only as long as necessary for the purposes outlined in this Privacy Policy. Retention periods depend on:

1. The type of data collected.
2. Legal and regulatory requirements.
3. Operational needs, such as resolving disputes or enforcing our Terms of Service.

When data is no longer needed, it is securely deleted or anonymized.

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Significant updates will be communicated to you through email or notifications on the Platform. Continued use of iTrepreneur after an update constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us:

Email: coach@itrepreneur.ai