Privacy Policy

This is the privacy policy for Bizuki LLC (“we,” “us,” “our”), operated in Michigan, USA. It explains what information we collect, why, how we use it, and what your rights are. We’ve written it in plain English. If anything is unclear, email contact@bizuki.com and we’ll explain.

1. What this policy covers

This policy covers data handled by bizuki.com (the marketing site) and dashboard.bizuki.com (the product). Data your patients enter into a Bizuki AI assistant or AI voice receptionist embedded on your site is also covered. You (the practice operating the AI) are the data controller for that data. We’re the processor.

1a. Healthcare privacy safeguards

Bizuki is built with healthcare privacy in mind. We describe our approach as “built with HIPAA-aligned safeguards,” not as a blanket HIPAA compliance certification. In practice, this means:

• Minimal capture by default. The AI assistant is configured to collect only the minimum information needed for follow-up: name, phone number, and request type. Sensitive details such as symptoms, medical history, medication information, insurance member IDs, or diagnosis details are not collected unless your practice intentionally enables enhanced intake.
• Encryption before storage. Sensitive contact fields (name, phone number, email) are encrypted before being written to the database. Data is also encrypted in transit. Encryption keys are stored outside the database.
• Data stays in your dashboard. Patient details are never sent to advertising platforms, marketing tools, or analytics services. They are visible only inside your private practice dashboard.
• Clinical questions routed to your team. The AI does not diagnose, recommend treatment, or perform clinical triage. Anything clinical, urgent, or outside your approved content is routed to your dental staff.
• No patient data in notifications. Email notifications to your practice do not include patient names, phone numbers, or conversation details. They only indicate that a new inquiry is waiting in your dashboard.

If your practice requires a Business Associate Agreement (BAA) or has specific compliance obligations, email contact@bizuki.com and we will respond directly.

2. What we collect

From Bizuki account holders

• Account info: name, email, business name, hashed password, phone (optional).
• Billing: we use Stripe, so they hold your card data, not us. We store your Stripe customer ID and subscription status.
• Usage: the AI assistants you create, their configuration, credit consumption, and any support tickets you open.

From end-users (patients interacting with your AI assistant)

• Conversation transcripts with your AI assistant.
• Any contact info they choose to share (name, email, phone).
• Anonymous IP address and rough geolocation, used only for fraud prevention.
• For voice calls: caller phone number, call duration, and transcript.

3. How we use it

• To run the product so your AI assistant can reply with context, you can view leads, and so on.
• To bill you correctly via Stripe.
• To send transactional emails (verification, password reset, low-credit alerts).
• To send marketing emails, but only if you opt in. You can unsubscribe at any time.
• To generate your Monthly AI Performance Report, if you subscribe to that add-on.
• To prevent abuse of the platform.

4. What we don’t do

• We don’t sell your data.
• We don’t use your patient conversations to train AI models.
• We don’t share your data with advertisers.
• We don’t read your conversations except when debugging a support ticket you’ve opened.

5. Third-party services we use

To operate the service, we share data with these vendors. Each is contractually bound not to use your data for anything beyond operating the service:

• Stripe: payment processing.
• AI providers: to generate chat and voice responses. Data is processed under their API agreements and never used for training.
• WhatsApp (Meta): message delivery if you use the WhatsApp Add-on.
• Hosting provider: application and database hosting in the United States.
• Email delivery service: to send transactional emails.

5a. Google Calendar Data (Optional Add-On)

What we collect

When you activate the AI Appointment Booking add-on, we collect calendar event details, event IDs, and your calendar availability information from your Google Calendar.

Why and how we use it

We use this data solely to create appointment events on your behalf when patients book through your Bizuki AI. This data is never used for machine learning, training AI models, analytics, user profiling, or any purpose beyond providing the booking feature.

How long we keep it

Calendar data is retained only while the AI Appointment Booking add-on is active on your account. When you deactivate the add-on or delete your account, all Google Calendar authorization is revoked and no further data is collected or retained.

How to revoke access

You can revoke our Google Calendar access at any time from your Settings page. This does not affect other Bizuki features.

7. Where data lives

Your data is stored on servers in the United States. Data is encrypted in transit and at rest. We retain your data for as long as your account is active. You may request deletion at any time by emailing contact@bizuki.com.

8. Your rights

You can, at any time:

• Export all your data (one click in the dashboard).
• Delete your account and all associated data.
• Correct any account information.
• Opt out of marketing emails.
• Request a copy of any data we hold about you. Email contact@bizuki.com.

EU/UK residents have the same rights under GDPR, including the right to lodge a complaint with your local data protection authority. California residents have the same rights under the CCPA, including the right to opt out of any sale of your data. As noted above, we do not sell data.

9. Cookies

We use an HTTP-only cookie to keep you logged in on dashboard.bizuki.com. We do not use advertising cookies, tracking pixels, or third-party analytics that build profiles on you.

10. Children

Bizuki is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we’ll delete it promptly.

11. Changes to this policy

If we make material changes, we’ll notify you by email or dashboard notice before they take effect. Minor wording fixes happen silently.

12. Contact

Bizuki LLC · Michigan, USA
Email: contact@bizuki.com. A real person reads every message.