Privacy Policy

1. Information We Collect

When you use BizDay, we collect the following information:

• Account information: Your name and email address, provided via GitHub or Google when you sign in
• API usage data: The number of API requests you make per month, tracked per API key
• Request metadata: Timestamps and country codes included in your API requests
• Payment information: If you subscribe to a paid plan, payment details are processed and stored by Stripe. We do not store your credit card information

2. How We Use Your Information

• To provide and maintain the BizDay API service
• To authenticate your API requests
• To track and enforce usage limits based on your plan
• To process payments for paid plans
• To send important service notifications (e.g., usage alerts, plan changes)
• To improve the service and fix issues

3. Third-Party Services

We use the following third-party services to operate BizDay:

• Cloudflare: Hosts the API, processes requests, and stores data (D1 database, Workers KV cache)
• Vercel: Hosts the website and dashboard
• GitHub / Google: Used for authentication via OAuth. We receive your name and email from these providers
• Stripe: Processes payments for paid plans
• Nager.Date: Provides public holiday data used by the API

4. Data Storage & Security

Your API key is stored as a cryptographic hash (HMAC-SHA256). We never store plaintext API keys. Your data is stored on Cloudflare's infrastructure and is encrypted at rest.

We implement security measures including HTTPS encryption, secure authentication headers, input validation, and rate limiting to protect your data.

5. Data Retention

We retain your account data for as long as your account is active. API usage data is retained on a monthly basis for billing and analytics purposes. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law.

6. Cookies

We use essential cookies for authentication (session tokens). We do not use tracking cookies or third-party advertising cookies. Our website does not include any analytics or tracking scripts.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your usage data
• Withdraw consent for data processing

To exercise any of these rights, contact us at hello@bizday.dev.

8. Children's Privacy

BizDay is not directed at children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email. The "Last updated" date at the top of this page reflects when the policy was last revised.

10. Contact

Questions about this privacy policy? Contact us at hello@bizday.dev.