Privacy Policy

Effective date: July 13, 2026

This Privacy Policy explains how PDJ Tax Experts LLC ("BizTrip", "we", "us") collects, uses, and shares personal information when you use the BizTrip website and application (the "Service"). We are the data controller for personal information processed through the Service.

1. Information we collect

• Account information: name, email address, password hash, and authentication provider identifiers.
• Business travel and financial data you provide: trips, itineraries, expenses, merchants, amounts, categories, mileage, notes, and business profiles.
• Receipt images: uploaded receipts that our AI processes to extract merchant, date, amount, tax, and category information.
• Location data: collected only during user-initiated mileage logging (start/stop drives). We do not track your location in the background.
• AI conversation history: the questions you ask the BizTrip assistant and the answers it returns, stored to give you continuity across sessions.
• Basic usage data: feature usage, device type, crash and performance logs, and approximate location derived from IP for security.
• Payment metadata: subscription tier, status, and Stripe customer identifiers. We never see or store full card numbers — those are handled by Stripe.

2. How we use your information

• To provide the Service — power trips, expenses, mileage, receipts, exports, and the AI assistant on your own data.
• AI processing solely to serve you. Your data is processed by AI models to answer your questions and organize your expenses. Your financial data is not used to train AI models for others.
• Payments are processed by Stripe — we never see full card numbers.
• Service notifications (renewals, receipts, security alerts) and, with consent, product updates.
• Security, fraud prevention, and abuse detection.
• Legal, tax, and accounting compliance.

What we do NOT do: We do not sell your personal information. We do not use your data for advertising. We do not use your financial or receipt data to train AI models for other customers.

3. Sharing with your accountant / advisor

Sharing with an accountant, tax advisor, or bookkeeper is opt-in, read-only, and revocable at any time from Settings. You will receive notifications when an advisor views your data or downloads exports. Revoking access takes effect immediately.

4. Service providers we use

• Supabase — database, authentication, and file storage, hosted in the United States. Data is protected by row-level security, and receipt images live in private storage buckets accessed via short-lived signed URLs.
• Stripe — payment processing, subscription management, and invoicing.
• AI model providers — used to process your prompts and receipts under contracts that prohibit using your data to train their general models.
• Email, error monitoring, and analytics providers — for transactional email, crash logs, and aggregate product usage.
• Legal, tax, and accounting advisers under confidentiality, and authorities where required by law.

5. Retention and deletion

We retain your account and trip data for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where we must retain limited records for legal, tax, accounting, or fraud-prevention purposes (for example, invoice records held by Stripe).

6. Your rights (CCPA / GDPR and similar laws)

Subject to applicable law, you have the right to access, correct, export, and delete your personal information, to restrict or object to certain processing, to withdraw consent, and to lodge a complaint with your data-protection authority. California residents have additional rights under the CCPA, including the right to know and the right to delete; we do not sell personal information. You can exercise most rights from account settings or by emailing us at support@biztrip.app.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest, row-level security in the database, private storage buckets with signed URLs, hardened authentication, and access controls with audit logging. No system is perfectly secure — please keep your credentials safe and enable strong authentication.

9. International transfers

Your data is stored and processed in the United States. Where personal data is transferred from outside the US, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Cookies

We use strictly necessary cookies to keep you signed in and to remember preferences, plus limited analytics cookies to understand aggregate usage. You can manage cookies through your browser settings.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in-app or by email.

12. Contact

PDJ Tax Experts LLC · BizTrip · support@biztrip.app (placeholder support address — will be updated at go-live)

See also our Terms of Service and Refund Policy.