This document describes what Client by BZLink.io does with your data and with the data of the clients you record in the app. It is written from what the app actually does. If anything here doesn’t match what you see, that’s our mistake and we want you to tell us.
1. Who is responsible
Client is an app by BZLink.io, a service operated by Pedro Belly under the trade name BZLink.io, located at 94 Fairway Avenue, Belleville, NJ 07109, United States. For any privacy matter: legal@bzlink.io.
2. What we store about your account
- Your name, email and phone number.
- Your country, currency, time zone and Do not disturb hours.
- Your profile photo, if you add one.
- Your password, one-way encrypted: we can’t read or recover it, only replace it. If you sign in with Apple or Google, we store the identifier that provider gives us to recognize you. We never receive your Apple or Google password.
- Your plan and, once subscriptions are active, your subscription status.
- Your invitation code, who invited you if you entered their code, and who you invited.
3. What you record in the app
Client exists to help you run your business, so it stores what you enter:
- Your companies, products and catalogs: names, logos, photos, prices, costs, stock and exchange rates.
- Your clients: name, phone, email, address, birthday, country, tags and notes, as you choose to record them.
- Your sales and collections: products sold, prices, deposits, installments, payments and, if you upload it, a photo of a payment receipt.
- Your follow-up: reminders, lists and priorities.
This data is yours. We store it to show it to you and no one else: each account can only read its own data, and that rule is enforced by the database itself, not just by the app. We don’t sell it, we don’t use it for advertising, we don’t use it to train artificial intelligence, and we never contact your clients.
Your clients’ data belongs to people who don’t use Client. By recording it, you are responsible for having permission to store it and for using it only to serve them.
4. Phone permissions
- Contacts: only if you choose to import clients from your contacts. You see the list on your phone and only the ones you check are saved. The rest of your address book never leaves your phone.
- Camera and photos: only for the photo you choose (your profile, a logo, a product or a receipt). We don’t look at the rest of your photos.
- Notifications: collection, repurchase and inventory reminders are scheduled by your own phone with the data it already has. We don’t use a notification server, and the content of your reminders doesn’t pass through us.
5. What stays on your phone
- A copy of your data, so the app opens quickly. It is deleted when you sign out.
- Catalogs you import from PDF, Excel or CSV: they are read on the phone and the file isn’t uploaded anywhere. Only the products you confirm are saved.
- Receipts you send: they are built on the phone and you choose where to send them (WhatsApp, Messages, email). From then on, they are handled by the app you chose.
6. Who we work with
We use few providers, each only for its own job:
- Supabase: the database, accounts and photo storage. Servers are in the United States (Amazon Web Services, us-east-1 region).
- Apple: Sign in with Apple and, once active, payments for plans through the App Store. Apple charges you; we never see or store your card.
- Google: Sign in with Google, if you choose that option.
- RevenueCat: once paid plans are active, it manages App Store subscriptions. It receives an identifier for your account and the purchase data Apple passes along; it doesn’t receive your clients or your sales.
- ExchangeRate-API (open.er-api.com): when you ask for today’s exchange rate, the app asks it about the currencies. Only currency codes travel (for example USD and MXN), none of your data.
Client has no analytics, no advertising and no tracking tools. If we ever add anything like that, we will say so here first.
7. How long we keep your data
For as long as you have your account. You can delete a client, a product or a sale anytime from the app.
Deleting your account is in More → My account → Delete my account. Everything is deleted right away: your account, companies, clients, products, sales, payments, reminders, photos, logos and receipts. It can’t be recovered afterwards. Copies may remain in our provider’s automatic backups for a limited time, until those backups roll over; we use them only to restore the service after a failure.
If you want to keep your information, before deleting your account you can export it to Excel from More → Export to Excel (Basic and Pro plans), or write to us.
8. Security
Everything that travels between the app and the server is encrypted. Each account can only read and change its own data. No system is perfect: if we ever learn of unauthorized access to your data, we will tell you.
9. Your rights
You can view and correct your data in the app, export it and delete it. You can also ask us for a copy of what we have about you, or ask us to delete something specific, by writing to legal@bzlink.io. We reply within 30 days.
If you are in California, you also have your rights under the CCPA, including knowing what data we hold and asking for it to be deleted. We don’t sell or share personal information as defined by that law. If you are in the European Union or Spain, we process your data to provide the service you asked for (legal basis: performance of a contract) and you have your GDPR rights: access, rectification, erasure, portability, objection and restriction, plus the right to complain to your data protection authority. Your data is stored in the United States.
10. Children
Client is for people who sell, aged 18 or older. It isn’t directed at minors and we don’t knowingly collect their data. If we learn an account belongs to a minor, we delete it.
11. Changes
If we change this document, we update the date above. If the change is significant, we let you know in the app or by email before it applies.