Privacy policy

1. Who we are

BisPlanner ("we", "us") provides business planning, forecasting, bookkeeping, invoicing and payroll software. This policy explains what personal data we handle when you use the service, why we handle it and what control you have over it.

2. Data we collect

• Account data: your name, email address and password credentials.
• Business data: business name, contact email, sector, country, plans, forecasts, transactions, invoices, clients, employees and payroll records you enter or import.
• Usage data: pages visited, features used, device and browser information, and approximate location derived from your IP address.
• Support data: messages you send us and records of our replies.

3. How we use it

We use your data to run the service, keep your account secure, generate the plans, forecasts and reports you ask for, send transactional messages such as verification codes and invoices, meet legal and tax obligations, and improve the product.

Where the service uses AI to draft narrative, interpret diagnostics or explain variances, the relevant business content is sent to our AI provider for processing only, and is not used to train third-party models.

4. Legal basis

We process data to perform our contract with you, to comply with legal obligations, on the basis of your consent (for optional analytics cookies and marketing), and for our legitimate interest in keeping the service secure and improving it.

5. Cookies

Essential cookies keep you signed in and protect forms against abuse; they cannot be switched off. Optional analytics cookies are only set after you choose "Accept all" in our cookie banner, and you can withdraw that at any time by clearing your browser storage for this site.

6. Sharing

We share data only with processors that run the service on our behalf: cloud hosting and database providers, email delivery, payment processors, banking data providers you connect and AI processing. We never sell your personal data.

7. Retention

We keep account and business records for as long as your account is active, and after closure for as long as we need for legal, tax and accounting purposes. Verification codes and similar short-lived secrets expire within minutes.

8. Your rights

Under the Nigeria Data Protection Regulation and the GDPR you can request access to your data, correction, deletion, restriction, portability, and object to certain processing. You can export or request deletion of your data from inside the app, or by contacting us. You may also complain to your data protection authority.

9. Security

Data is encrypted in transit over HTTPS and at rest. Access to business records is restricted to members of that business by database-level security rules, and staff access is logged in an audit trail.

10. Contact

Questions or requests about this policy can be sent to privacy@bisplanner.com.