Privacy Policy

1. Who This Policy Covers

This Privacy Policy applies to BD Financial IQ ("BDFIQ," "we," "us") — a cloud accounting product operated by Best Decision Business Inc. ("BDB"), a US corporation. The policy covers the marketing website at bestdecisionfinancialiq.com and, once launched, the BDFIQ application.

BDFIQ is currently pre-launch. Until launch, this policy primarily covers visitors to the marketing site, waitlist signups, contact-form submissions, and general inquiries. The application-side terms (account data, accounting records, etc.) will become operative when the BDFIQ app opens to customers.

2. Data We Collect

We collect different categories of data depending on how you interact with us.

From the marketing site (today)

• Waitlist signups: first name, email, business name, business type, current accounting software.
• Contact form submissions: name, email, business name (optional), subject category, and your message.
• Anonymous analytics: standard web traffic data — pages visited, referring URL, browser type, approximate location (city/region from IP), and time on site. Used to understand which pages are useful.
• Meta Pixel data: see section 9.

From the BDFIQ application (post-launch)

• Account data: name, email, business name, billing address, role.
• Subscription & billing data: payment method details (tokenized via Stripe — we don't store raw card numbers), billing history, plan tier.
• Accounting records you put in: chart of accounts, customers, vendors, invoices, bills, journal entries, attachments, CSV imports of bank activity. This is your business data; you own it.
• Usage data: features used, login times, browser/device type, IP, errors encountered.

3. How We Use Your Data

We use your data only for purposes connected to running BDFIQ and supporting you. Specifically:

• To deliver the service — account creation, login, posting transactions, generating reports, sending invoices, billing.
• To support you — replying to questions, troubleshooting issues, investigating bugs.
• To improve the product — aggregated usage analytics, feature improvement, bug fixing. Aggregated and anonymized where the use case doesn't require identifying you.
• To communicate launch and product news — waitlist updates, launch announcements, optional newsletter (opt-out anytime).
• To comply with the law — respond to lawful requests, prevent fraud, enforce our Terms of Service and EULA.

We do not sell your data to advertisers, data brokers, or anyone else. We do not use your transaction data to train external AI models.

4. Who We Share Data With

We share data with a small set of operational vendors strictly to deliver the service. We do not sell your data, period.

• Payment processing — Stripe. Billing payment methods and transaction processing are handled by Stripe, Inc. Stripe receives the data necessary to charge your card or run a customer payment.
• Email delivery. Transactional emails (account verification, password reset, billing receipts) are sent via a US-based email provider.
• Marketing & analytics platforms. See sections 8 and 9 (cookies and Meta Pixel).
• Legal compliance. When required by valid legal process — subpoena, court order — we comply and notify the affected user unless legally prohibited.

BDFIQ does not share your transaction data, customer list, or financial records with advertising networks, data brokers, or any third-party AI providers.

5. Where Your Data Is Stored

All BDFIQ data lives on BDB's servers in the United States. We maintain encrypted backups in two locations:

• A primary local backup, encrypted, retained on a rolling schedule.
• An offsite encrypted backup, geographically separate, also retained on a rolling schedule.

Data is encrypted both at rest and in transit (TLS). Multi-tenant data isolation means one company's accounting data is logically and access-control separated from every other tenant. We do not co-mingle customer data across tenants.

6. AI Processing on BDB's Servers

BDFIQ uses AI for transaction categorization, voice-to-text dictation, and document parsing. This processing happens on BDB's own servers using locally-hosted models (Whisper for voice, Ollama for categorization and document parsing).

This is a deliberate architectural choice. Many cloud accounting and bookkeeping platforms send transaction descriptions to external AI APIs for categorization. BDFIQ does not.

7. Bank Data and Plaid

BDFIQ does not store bank credentials or OAuth tokens at launch. The product uses CSV imports from your bank instead of direct bank-feed connections.

This means: we do not use Plaid, Yodlee, Finicity, or any other bank-data aggregator. There is no bank credential honey-pot in BDB's infrastructure. Your bank credentials stay at your bank.

If direct bank feeds are added in a future version, this Privacy Policy will be updated to describe the data flow and the affected user controls before the feature becomes operative for any account.

8. Cookies and Tracking

The marketing site uses a small number of cookies and similar technologies:

• Essential cookies for site functionality (session, security, form submission protection).
• Analytics cookies for aggregated usage measurement.
• Meta Pixel cookies for ad campaign measurement — see section 9.

You can block or delete cookies in your browser settings. Doing so may break form submissions or login flows but does not prevent you from reading the site.

9. Meta Pixel Disclosure

This site uses the Meta (Facebook) Pixel (ID: 1218560383407495) for advertising campaign measurement. When you visit the site, the Pixel may load and send Meta:

• The page URL you visited
• Browser metadata and IP address
• Standard events: PageView, and (where applicable) Lead and Contact

Meta uses this data per its own privacy practices to measure ad performance and (depending on your Meta account settings) potentially personalize ads. To opt out at the Meta level, manage your settings at facebook.com/ads/preferences or block the Pixel via a browser extension.

10. Your Rights

Whether the BDFIQ application is operative or you've only used the marketing site, you have the following rights with respect to data we hold about you:

• Access: request a copy of the data we have about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request that we delete your data (subject to legal retention obligations).
• Export: for application accounts, export all your accounting data to Excel and PDF at any time.
• Opt-out of marketing emails: every marketing email has an unsubscribe link. Transactional emails (billing receipts, security alerts) continue regardless.

To exercise any of these rights, email privacy@bestdecisionbusiness.com.

Residents of California, Colorado, Virginia, and other states with comprehensive consumer privacy laws have additional rights under their state laws. We honor the substantive rights under those laws for all US residents regardless of state.

11. Data Retention

Marketing site data (waitlist signups, contact form submissions): retained as long as relevant for follow-up and launch communications. You can request deletion at any time.

Application data (post-launch): retained as long as your account is active and for a defined retention window after cancellation (industry-standard 12-24 months — finalized in the EULA at launch) so you can re-export or reactivate.

Backups: encrypted backups are retained on a rolling schedule. Deletion requests are honored against the live system immediately; backup snapshots age out per the rolling schedule.

Legal & financial records: billing records, tax records, and similar are retained as required by applicable US law (typically 7 years for tax/audit records).

12. Changes to This Policy

BDFIQ is pre-launch and this policy will evolve. When the application opens to customers, this policy will expand to cover the additional data flows that come with running a live SaaS product. Material changes will be announced via email to active customers and posted prominently on this page with a new "Last Updated" date.

13. Contact for Privacy Questions

Questions about this policy, requests to exercise your rights, or concerns about how we handle data:

Privacy contact: privacy@bestdecisionbusiness.com
General contact: bestdecisionfinancialiq.com/contact.html
Mailing address: Best Decision Business Inc., United States (full mailing address provided on request).