Privacy Policy

The short version

Beveo is a business visibility platform. We collect what we need to show your business accurately across AI search systems, monitor your public reputation, and bill you for the plan you chose. We do not sell your data. We do not use your business's information to train third-party models.

What we collect

• Account info — email, name, password hash, and any billing info Stripe forwards us (last 4 digits, never the full card).
• Business profile — the name, address, phone, website, industry, photos, and any information you publish to your public Beveo profile page.
• Connected platforms — when you connect Google Business Profile or Facebook, we store OAuth tokens (encrypted at rest) and the review, post, and metadata content those platforms return.
• Credentials — insurance certificates and license numbers you upload or email to [email protected], plus the metadata extracted from them.
• Usage — IP addresses, browser type, pages viewed, scan results, and email delivery events. We use these to operate the product, debug problems, and improve relevance.

How we use it

• To run scans, sync reviews, and render your public profile.
• To send the emails you signed up for (renewal reminders, weekly digests, alerts) and transactional account messages.
• To bill you and prevent fraud.
• To improve the product. We never use your business's identifiable data to train external AI models.

Who we share with

Service providers we need to run the platform: Supabase (database + auth), Stripe (billing), Postmark (transactional email), OpenAI and other model providers (for AI scans you initiate), Google and Facebook (for review sync, only with your consent). Each one only sees what it needs.

We will disclose information when a valid legal process requires it, and we'll push back where we believe the request overreaches.

Retention & deletion

You can delete your account from the dashboard, which soft-deletes your organization and stops all crons against it. We keep billing-relevant records for as long as US tax law requires. Operational logs are kept for up to 90 days.

Your rights

You can export your data from the dashboard (Profile → Export). California, EEA, and UK residents have additional rights to access, correct, and delete personal data — email [email protected] and we'll respond within 30 days.

Contact

Questions about this policy? [email protected].