DataRightsOS — Privacy Policy
Effective date: 2026-07-15 · Version 1.0
This Privacy Policy describes how Bizooma, LLC, a Texas limited liability company ("Bizooma," "we," "us," "our"), collects, uses, stores, shares, and protects information in connection with DataRightsOS — the website datarightsos.com, the dashboard, the embeddable widget, and related services (collectively, the "Service"). It applies to account holders and their authorized team members who sign in to the DataRightsOS dashboard ("you"), including those who sign in using Google.
For personal information submitted by your own website visitors through the widget (e.g., a visitor's data-rights request or cookie consent), you are the business/controller and we act as your service provider/processor; that data is governed by your own privacy policy and our agreement with you, and is described in Section 5 below.
1. Who We Are and How to Contact Us
DataRightsOS is operated by Bizooma, LLC. If you have any questions about this policy or your data, contact us at support@bizooma.com or by mail at Bizooma, LLC, Amarillo, Texas, USA. The data controller for account and sign-in information is Bizooma, LLC.
2. Information We Collect
2.1 Account and sign-in information
When you create or sign in to a DataRightsOS account, we collect:
- Your name and email address;
- Your role and organization within DataRightsOS;
- Authentication identifiers from your chosen sign-in method (Google, Microsoft, or email/password).
2.2 Configuration and content you provide
Business name, privacy contact email, site domains, brand settings, legal statement content, and internal notes you enter into the dashboard.
2.3 Billing information
If you subscribe to a paid plan, payment is processed by Stripe. We receive subscription status and identifiers from Stripe but do not store your full card number.
2.4 Usage and technical data
Log data such as IP address, browser type, pages viewed, and timestamps, collected to operate, secure, and improve the Service.
3. Google User Data
If you choose to sign in to DataRightsOS with Google, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This section comprehensively discloses how our app accesses, uses, stores, and shares Google user data.
3.1 What Google data we access
When you sign in with Google, we request only your basic profile information through Google's OAuth sign-in: your name, your email address, and your Google account identifier. We do not request or access your Gmail messages, Google Drive files, Google Contacts, Calendar, or any other Google service data. We do not access your Google password — authentication is handled entirely by Google.
3.2 How we use Google data
We use the Google profile information described above solely to:
- Create and authenticate your DataRightsOS account;
- Identify you within your organization and display your name to your team;
- Send you account-related and service emails at your Google email address.
We do not use Google user data for advertising, and we do not use it to build user profiles for purposes unrelated to providing the Service.
3.3 How we store Google data
Your name, email, and Google account identifier are stored in our secured application database (hosted on the Base44 platform) for as long as your account is active. Data in transit is encrypted using TLS. We retain this information until you delete your account or request its deletion, after which it is removed as described in Section 6.
3.4 How we share Google data
We do not sell Google user data, and we do not transfer or share it with third parties except:
- With infrastructure sub-processors that host and operate the Service on our behalf (e.g., our application hosting platform and our email delivery provider), solely to provide the Service and under confidentiality obligations;
- Where required by law, legal process, or to protect our rights and users' safety.
We do not transfer Google user data to third parties for their own purposes, for advertising, or for any use unrelated to the DataRightsOS features you use.
3.5 Revoking access
You can revoke DataRightsOS's access to your Google account at any time via your Google Account permissions page. You may also delete your DataRightsOS account by contacting support@bizooma.com.
4. How We Use Your Information (Generally)
- To provide, maintain, and secure the Service;
- To authenticate you and manage your account and organization;
- To process subscriptions and billing;
- To send transactional and service communications;
- To respond to support requests;
- To detect, prevent, and address fraud, abuse, and security issues;
- To comply with legal obligations.
We do not sell your personal information or share it for cross-context behavioral advertising.
5. Data Submitted by Your Website Visitors
The Service captures data-rights requests and cookie-consent records from your website visitors on your behalf. For that visitor data, you are the controller/business and we act as your processor/service provider under our agreement with you. We process it only to provide the Service and do not use it for our own purposes, sell it, or share it for advertising. Your own privacy policy governs your collection of that visitor data.
6. Data Retention and Deletion
We retain account and sign-in information for as long as your account is active. When you delete your account or request deletion, we delete your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. To request deletion of your data, contact support@bizooma.com.
7. Security
We use commercially reasonable technical and organizational safeguards to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Sub-processors and Service Providers
We rely on trusted providers to operate the Service, including our application hosting and database platform (Base44), our payment processor (Stripe), and our email delivery provider (Resend). These providers process data only as needed to provide their services to us and under confidentiality obligations.
9. Your Rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact support@bizooma.com. We will respond as required by applicable law. You will not be discriminated against for exercising your rights.
10. Children's Privacy
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.
11. International Users
The Service is operated from the United States. If you access it from outside the U.S., you understand your information will be processed in the United States.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we change how our app uses, accesses, stores, or shares Google user data, or make other material changes, we will update the "Effective date" above and notify affected account holders by email and/or an in-dashboard notice before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
Questions about this policy or your data? Contact support@bizooma.com.