Privacy Policy

Last updated: June 18, 2026

This Privacy Policy explains how Bizdivers LLC (“Bizdivers,” “we,” “us”), a Limited Liability Company formed in Maryland, United States, collects, uses, discloses, and protects information when you use the Bizdivers application and website at bizdivers.com (the “Service”).

Bizdivers is an AI-powered accounting and finance-operations platform for businesses. Our customers connect their own business bank and credit-card accounts and upload financial documents so we can automate their bookkeeping, reconciliation, and general-ledger workflows on their behalf.

Your access to and use of the Service is conditioned on your acceptance of and compliance with this Privacy Policy. By accessing or using the Service, you agree to this Privacy Policy. If you disagree with any part of it, you do not have our permission to access or use the Service.

1. Information we collect

Account & profile information. Name, email address, hashed password, company name, role, phone number, billing address, and similar details you provide when registering, billing, or administering your account.

Financial account data (via Plaid). When you connect a bank or credit-card account, our data-connectivity provider Plaid Inc. (“Plaid”) accesses information from your financial institution on your behalf, including: the institution name, account names, types and subtypes, masked account numbers, account and routing numbers, account balances, and transaction details (amount, date, description, merchant/counterparty, and category). We use Plaid’s Transactions, Balance, and Auth products. See Section 6.

Documents you upload. Invoices, receipts, contracts, W-9/1099 forms, and similar financial documents, which may contain personal or business information about you, your vendors, or your customers — including, in the case of tax forms, Social Security Numbers or Taxpayer Identification Numbers. These are processed with optical character recognition and large language models to extract structured data. See “Sensitive personal information” in Section 2.

Payment information. Payments are processed by our payment processor, Stripe, Inc. (“Stripe”), which collects and processes your payment-card or bank details directly. We do not store full payment-card numbers; we receive limited billing and subscription metadata from Stripe.

Usage, device, and log data. Product-analytics events, error reports, IP address, approximate location inferred from your IP address, browser/device information, and application logs, collected to operate, secure, and improve the Service.

Cookies and similar technologies. Used for authentication, preferences, and product analytics. See Section 9.

2. Categories of personal information and how we use it

For transparency and to support rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), the categories of personal information we collect, and the business purposes for which we use each, are:

• Identifiers (name, email address, phone number, billing address, account name, IP address, device and online identifiers) — to provide and host the Service, authenticate users, communicate with you, provide customer support, secure the Service and prevent fraud, and perform analytics.
• Commercial information (products or services purchased or considered, subscription and transaction history) — to process transactions, provide the Service, maintain records, and audit transactions you have entered into.
• Financial information (bank and credit-card account names, masked and full account/routing numbers, balances, and transactions accessed via Plaid) — to provide bookkeeping, reconciliation, and general-ledger features, and to maintain accurate financial records on your behalf.
• Internet or other electronic activity (your interactions with the Service, analytics events, error reports) — to operate, secure, debug, and improve the Service and develop new features.
• Professional and financial documents (invoices, receipts, contracts, tax forms, and the data extracted from them) — to perform the accounting and document-processing services you request.
• Inferences (categorizations, suggested classifications, and similar derived data) — to automate bookkeeping and reconciliation, which you review and approve.
• Sensitive personal information — financial account numbers together with the credentials enabling access to them, and Social Security Numbers / Taxpayer Identification Numbers contained in tax documents (e.g. W-9/1099) you upload. We use sensitive personal information only to perform the services you request, maintain accurate records, verify information, and meet legal, tax, and compliance obligations. We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law, and we do not sell or “share” it.

3. How we use information

We use the information we collect to:

• Provide the Service — import, categorize, and reconcile transactions; generate journal entries; manage payables, receivables, and month-end close;
• Process uploaded documents using OCR and AI/LLM providers to extract accounting data;
• Maintain accurate financial records and audit trails;
• Authenticate users, secure the Service, prevent fraud, and meet legal and compliance obligations;
• Analyze usage and diagnose errors to maintain and improve the Service;
• Communicate with you about your account, security, and service updates.

We do not use Plaid-derived financial data to initiate payments or transfers, for lending or underwriting decisions, or for advertising. We do not sell or “share” your personal information.

4. How we share information

We share information only as needed to operate the Service, with the following categories of recipients (service providers / subprocessors that process data on our behalf under contract):

• Account-connectivity providers — Plaid (financial account connectivity).
• Payment processors — Stripe (subscription billing and payment processing).
• Cloud hosting and database providers — DigitalOcean (cloud hosting and managed database, US East / New York).
• AI / large-language-model providers — OpenRouter and Groq (document and transaction processing).
• Analytics and error-tracking providers — PostHog (product analytics and error tracking).
• Email providers — Postmark (transactional email).

We also share information:

• Within your organization — financial data you connect is visible only to your company’s own authorized users, according to their role.
• Legal and safety — when required by law, legal process, or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell or rent personal information, and we do not share Plaid-derived data with third parties except the service providers above.

5. Sale or sharing of personal information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding twelve (12) months. See Section 12 for how to exercise your rights, including rights regarding sales of personal information.

6. AI and automated processing

We use third-party large-language-model providers (OpenRouter and Groq) to extract data from uploaded documents and to suggest categorizations for transactions. Document and transaction content may be transmitted to these providers solely to perform these tasks. AI-generated suggestions are surfaced for human review; you remain in control of what is posted to your books. We do not use your data to train third-party foundation models except as described in this Policy.

7. Plaid

We use Plaid to connect your financial accounts. By connecting an account, you authorize Plaid to access and transmit the financial data described in Section 1 on your behalf. Plaid’s handling of your information is governed by Plaid’s End User Privacy Policy, available at https://plaid.com/legal/#end-user-privacy-policy. We use this data only to provide accounting and reconciliation features within the Service.

You can disconnect a linked account at any time from within the Service, which revokes our ongoing access and removes the associated stored data as described in Section 8.

8. How we protect information

• Encryption in transit — all traffic between clients and our servers uses TLS 1.2 or higher.
• Encryption at rest — our managed database encrypts data at rest, and we additionally encrypt sensitive credentials (such as Plaid access tokens and stored account numbers) at the application layer using AES-256-GCM.
• Access controls — role-based access scoped per company, least-privilege access to production systems, secrets managed outside source control, and audit logging of sensitive actions.
• Monitoring — application logging and error tracking to detect and respond to issues.

No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

9. Cookies and analytics

A cookie is a small piece of data sent from a website and stored on your device by your browser. We use cookies and similar technologies for authentication, to remember preferences, and for product analytics and error tracking (via PostHog). Cookies may be used to identify whether you are signed in, store your preferences, analyze Service traffic, and recognize you when you return.

Most browsers accept cookies automatically, but you can modify your browser settings to decline cookies. Disabling some cookies may affect functionality. To learn about opting out of analytics, visit the PostHog website.

10. Do Not Track

Do Not Track (“DNT”) is a preference you can set in your browser to tell websites you do not want to be tracked. We do not currently respond to DNT signals. You can enable or disable DNT in your browser’s preferences or settings.

11. Data retention and deletion

We retain personal and financial information for as long as your account is active and as needed to provide the Service. When you disconnect a linked financial account, the associated Plaid access credentials and synced account/transaction data are deleted. When you close your account or request deletion, we delete or de-identify your personal information within 90 days, except that we may retain accounting and transaction records for up to 7 years where required to comply with legal, tax, or accounting obligations. To request deletion, contact admin@bizdivers.com.

12. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to opt out of certain processing. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, the right to limit the use of sensitive personal information, and the right to opt out of the “sale” or “sharing” of personal information — we do not sell or share your personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.

Nevada residents have the right to opt out of the sale of certain personal information. We do not sell personal information; Nevada residents may nonetheless submit a verified request directing us not to sell their information.

Exercising your rights. To exercise any of these rights, contact us using the details below. We will need to verify your identity before acting on your request and may ask you to provide information for that purpose. You may use an authorized agent to submit a request on your behalf.

Privacy Contact — Bizdivers LLC
admin@bizdivers.com
5000 Thayer Center, Ste C, Oakland, MD 21550
United States
https://bizdivers.com/privacy-policy

13. International users

The Service is operated from the United States and your information is stored and processed in the United States (US East / New York). If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States.

14. Children’s privacy

The Service is intended for businesses and a general audience and is not directed to individuals under 18. We do not knowingly collect personal information from children. If a child under 18 sends us personal information, we will use it only to inform them that they may not use the Service.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a revised date and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

16. Contact us

Bizdivers LLC
Email: admin@bizdivers.com
5000 Thayer Center, Ste C, Oakland, MD 21550, United States
Governing law: State of Maryland, USA