US State Privacy Notice (including California Notice at Collection and Nevada notice)

1. Who this notice covers

This notice applies to residents of California and Nevada, and to residents of every other state with a comprehensive consumer privacy law. These include Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. It also covers residents of states whose laws take effect later, such as Alabama, Louisiana, Oklahoma and Vermont.

Many of these laws apply only to larger businesses. BizMeet is a small company and may fall below some of those thresholds. We do not think that should change what you can expect from us. So we offer the rights in this notice to every US resident, whether or not a state law requires it, and we handle every request through one process.

BizMeet is for adults 18 and older. It is intended for people in the United States. If we learn that a member is under 18, we will delete the account and its data.

This notice is available in English, the only language the BizMeet app and website use. If we add another language, we will offer this notice in it too. We designed this notice to work with system text sizes and screen readers in the app and on our website. In the app, it is plain, selectable text that follows your device's text size. If anything is hard to use, or you need the notice in another format, such as large print or plain text by email, write to contact@bizmeetapp.org. You can read more in our Accessibility Statement.

2. Notice at Collection

This section is our Notice at Collection. You can reach it from our Privacy Policy, which is linked on the sign-up screen.

The app has no analytics or advertising tools. Google Play and Cloudflare give us only overall statistics, such as install counts and website visits by country, that don't identify anyone. If you are signed in and leave Crash reports on, the app sends error reports to our own database (see the Technical logs row below). BizMeet does not create your account, ask for your location, or save a notification token to our servers until you sign up. When the app first opens, our billing provider (RevenueCat) and Google's Firebase SDK start up and may exchange basic device and app information with their servers so that purchases and notifications can work later.

We do not sell any of the personal information listed below, and we do not share it for cross-context behavioral advertising. For full details, see sections 3 to 6 below and our Privacy Policy.

Two of these categories include sensitive personal information under California law: your account log-in (Account) and the contents of your messages (Messages and Moderation evidence). We use them only for the purposes in section 6.

3. Personal information we collected in the last 12 months

The table below uses the categories named in the California Consumer Privacy Act. For each one, it gives BizMeet examples, where the information comes from, and why we use it. We have collected these categories in the last 12 months, except where the table says otherwise.

Sources mean: you (what you enter or choose in the app), your device (information the app reads with your permission, or creates as you use it), other members (what they send you or report about you), people who are not members (for example, someone who emails us a report or a copyright notice), LinkedIn (your LinkedIn member ID and names, only if you connect LinkedIn for the verified badge), and our service providers (such as purchase status from Google Play and RevenueCat, confirmation of your phone number, and our bot check's pass or fail result).

We list education level with professional information because members report it themselves as part of their professional profile. We do not receive education records from schools.

We do not collect Social Security numbers, government ID documents, financial account or card numbers, biometric information, or health information, and the app does not request your phone's precise location. Payments are handled by Google Play, and we never receive your card details.

4. Who we disclose personal information to

We disclose personal information only to run BizMeet, to protect members, to handle legal notices and claims such as copyright complaints, when the law requires it, with your consent, or in a business transfer described below. These are the categories of recipients:

Hosting and database. Supabase stores our database, photos and sign-in records and runs our server functions.

Push delivery. Google Firebase Cloud Messaging delivers notifications. It receives your device token and each notification's title and text. These never include message text, but can include the first name of a member who sent you a Priority message.

Billing. Google Play processes payments and refunds. RevenueCat manages subscriptions and purchases using your billing ID, purchase details, and device and app data its tools collect.

Email delivery. Resend delivers sign-in and password reset codes to your email address.

Text message delivery. Twilio Verify, called by our server, texts the code that confirms your phone number. It receives your phone number and the code.

Bot check. Cloudflare Turnstile checks that sign-ups, log-ins, code resends and password resets come from a person. It receives your IP address and browser and device signals during the check.

Support email. The company that hosts our contact@bizmeetapp.org inbox stores the emails you send us and our replies.

Geocoding. Your phone's operating system geocoding service turns your rounded map point into a city name.

Website hosting. Cloudflare hosts https://bizmeetapp.org and receives visitors' IP addresses and browser details in its logs, and any reports browsers send it about failed page loads.

Other members. Other members see the profile details you choose to show, the messages you send them, and your requests.

People involved in a copyright complaint. If someone sends us a copyright notice about your content, we may send you a copy, including the sender's contact details. If you send a counter-notice, we send it, including your name, postal address and phone number, to the person who sent the original notice. See our Copyright and Trademark Policy (DMCA).

Government and child-safety authorities. Law enforcement, courts, regulators, or the National Center for Missing and Exploited Children, but only when the law requires it, to protect someone from serious harm, or when a member gives us written consent to share that member's own records and the messages they sent or received with an agency they name. Those messages can include messages you sent that member. See our Law Enforcement Guide.

A buyer or successor. If BizMeet is merged, sold or reorganized, personal information may be transferred to the new owner as part of that transaction. The new owner must honor this notice and our Privacy Policy for information collected under them, or give you notice and the choices the law requires.

LinkedIn. If you connect LinkedIn for the verified badge, LinkedIn knows that you connected your LinkedIn account to BizMeet. We do not send LinkedIn any other information about you.

This table shows which categories go to which recipients:

Other members never receive your email address, phone number, date of birth, map coordinates, LinkedIn details, settings, filters or plan.

A buyer or successor could receive any category in this table if BizMeet is merged, sold or reorganized.

Our service providers handle personal information to provide their services to us under their terms of service and data processing terms. Some states let you ask for the names of the specific third parties we disclose data to. The companies named above are Supabase, Google (Firebase Cloud Messaging, Google Play, and on Android devices the geocoding service), RevenueCat, Resend, Twilio and Cloudflare (website hosting and the Turnstile bot check). If you ask, we will also tell you the name of our email provider.

5. No sale, sharing, targeted advertising or significant-decision profiling

BizMeet does not sell personal information. We do not share it for cross-context behavioral advertising. We do not use it for targeted advertising. We have not done any of these things in the last 12 months.

BizMeet has not sold and does not sell personal data to any third party.

We do not sell sensitive personal information or any location data.

We have no actual knowledge of selling or sharing the personal information of anyone under 16. BizMeet is only for adults 18 and older.

We do not use profiling or automated decisions to make decisions that produce legal or similarly significant effects, such as decisions about housing, jobs, credit, education or insurance. The automated processing we do use is limited to arranging members in Discover and suggesting Daily Picks:

• Discover shows boosted members first, then members who were active most recently, then a daily random order.
• Daily Picks, a VIP feature, are scored on your phone from shared goals, interests, collaboration skills, open-to answers, languages, sector, verification and profile completeness. Filters such as Near you, Online and Same goal only narrow the list.

Neither one decides whether you can use BizMeet.

Opt-out preference signals

If your browser or device sends a Global Privacy Control signal or a similar opt-out preference signal to our website, we treat it as a valid request to opt out of sale and sharing. Because we do not sell or share personal information or run targeted advertising, the signal does not change how we handle your data. If that ever changes, we will honor these signals before any sale or sharing begins. Our website sets no cookies and uses no analytics, so it responds the same way to "Do Not Track" browser signals. See our Cookie and Similar Technologies Policy.

Why there is no "Do Not Sell or Share" link

California requires a "Do Not Sell or Share My Personal Information" link only from businesses that sell or share personal information. It requires a "Limit the Use of My Sensitive Personal Information" link only from businesses that use that information beyond the purposes the law allows. BizMeet does neither, so we do not show these links. If our practices change, we will update this notice and add the links first.

6. Sensitive personal information

Under California law, BizMeet collects two kinds of sensitive personal information:

Account log-in. Your email address and password. Our sign-in provider handles your password, and the app never stores it.

Message contents. The text of the messages you send and receive, request notes, and copies of recent messages kept as moderation evidence.

We use this information only for the purposes California law allows. We use it to provide the service you asked for, such as delivering your messages. We also use it to detect and prevent security incidents, fraud and illegal activity, and to protect the physical safety of members, such as reviewing reported conversations. We do not use it to infer characteristics about you. We do not read your messages except when we review a report, a block or disconnect record, a legal request or an emergency that involves a risk of serious harm, or when you ask us for help. A person does this reading. We do not use automated tools to scan messages.

Other state laws define "sensitive data" differently. We do not ask for or intentionally collect any of it. That includes racial or ethnic origin, religious beliefs, health or mental health information, sex life or sexual orientation, citizenship or immigration status, biometric or genetic data, and data about children. If you choose to include this kind of data in your profile or messages, we process it only to show or deliver it as you directed, and we do not use it for any other purpose.

Your location is approximate. The app asks only for Android's approximate location permission, which gives the app an estimate rather than your exact position. On your phone, we round the coordinates to a 0.02-degree grid, roughly 2 kilometers across, and our servers round them again. We never receive GPS-level coordinates, and other members see only your city and a rounded distance in whole miles or kilometers. We treat this as approximate location. If we ever collect precise geolocation, we will ask for your consent first.

Profile statements and messages are free text, and photos can show more than you intend. Please do not include sensitive details about yourself or others. If you choose to, we use them only to show or deliver them as you chose and, if they are reported, to review the report. We do not use them to infer anything about you. For how we handle any health-related information, see our Consumer Health Data Privacy Policy (Washington, Nevada, Connecticut).

7. Your privacy rights

We offer the rights below to every US resident, not only those whose state law requires them.

California residents

Right to know and access. You can ask what personal information we have collected about you, where it came from, why we use it, and who we disclose it to. You can also ask for a copy of the specific pieces of personal information we hold about you. This covers any period you choose back to January 1, 2022.

Right to delete. You can ask us to delete personal information we collected from you, subject to the exceptions in section 8.

Right to correct. You can ask us to correct inaccurate personal information.

Right to opt out of sale or sharing. You have this right, but it does not apply in practice because we do not sell or share personal information.

Right to limit use of sensitive personal information. You have this right, but it does not apply in practice because we use sensitive personal information only for the purposes the law allows.

Right to no retaliation. We will not treat you differently for using any of these rights. See section 10.

Residents of other states

Right to confirm and access. You can ask us to confirm whether we process your personal data and to give you access to it. For Connecticut residents, this includes any inferences we hold about you.

Right to correct. You can ask us to correct inaccurate personal data.

Right to delete. You can ask us to delete personal data about you.

Right to a portable copy. You can get a copy of the data you gave us in a commonly used, machine-readable format.

Right to opt out. You can opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects. We do none of these, but you can still send us an opt-out request, and we will record it.

Right to know recipients. You can ask for a list of the specific third parties we have disclosed your personal data to (for example, in Oregon and Minnesota), or the categories of third parties (for example, in Delaware and Maryland). Section 4 lists them.

Right to question profiling. In Minnesota and Connecticut, you can question the result of profiling used for a significant decision. We do not make such decisions. If you want to know why a member appears in your Discover feed or Daily Picks, write to us and we will explain.

Nevada residents

Nevada law lets you ask an operator not to sell covered information about you. Covered information includes your name, email address, phone number and other details that identify or can be used to contact you. We do not sell covered information. You can still send an opt-out request to our designated address, contact@bizmeetapp.org, with "Nevada opt-out" in the subject line. We will respond within 60 days. We may extend that by up to 30 days if needed, and we will tell you if we do.

Reviewing your information and tracking

You can review and change most of your information in Edit profile and Settings, or ask us by email. Firebase Cloud Messaging and RevenueCat run inside the app to deliver notifications and process purchases, and they collect device and app data to do that. We do not let any third party use BizMeet to track your activity across other websites or apps over time.

8. How to make a request and how we verify it

Ways to make a request

By email. Write to contact@bizmeetapp.org from the email address on your BizMeet account. Tell us which right you want to use. BizMeet operates online only, so email is our main method for requests to know, access, delete and correct.

By mail. Write to us at BizMeet LLC, 2809 E Hamilton Ave, Unit #2177, Eau Claire, WI 54701. Include the email address on your BizMeet account so we can verify the request.

In the app. You can correct most of your information yourself in Edit profile. You can remove your saved location and city with Remove my location in Edit profile. You can delete your account and its data in Settings > Account > Delete account, after typing DELETE and entering your password. See Delete Your BizMeet Account. Your email address and, after setup, your date of birth cannot be changed in the app. To correct them, email us.

You do not need to create an account to make a request. If you do not have an account, tell us what information you think we hold, and we will check.

How we verify your identity

We check that a request comes from you by matching it to the email address on your account. Before we send you a copy of your data or delete anything, we always send a confirmation code or link to your account email and act only after you confirm it from that inbox. We send copies of your data only to your account email. We only ask for information we already have, and we use what you send only to verify the request. We do not verify opt-out requests, but we may decline one we believe is fraudulent and will tell you why.

Authorized agents

Someone else can make a request for you if you give them signed, written permission, or if they hold a valid power of attorney. We may ask you to confirm your identity with us directly or to confirm that you gave the agent permission. We will never ask you to submit the request again yourself.

Timelines

• We confirm receipt of requests to know, access, delete or correct within 10 business days.
• We respond within 45 calendar days of receiving the request. If we need more time, we may extend this once by up to 45 more days, and we will tell you why within the first 45 days.
• We complete deletion requests sent by email within 30 days. See Delete Your BizMeet Account.
• We act on opt-out requests within 15 business days.

Cost

We do not charge for requests. You can make at least two access requests in any 12-month period. If a request is clearly unfounded, excessive or repetitive, we may decline it or charge a reasonable fee, and we will tell you why.

How deletion works

When we delete your data, we remove it from our live systems. Your RevenueCat customer record (under a random billing ID, not your name or email) and Google Play's purchase records are kept by those providers under their own terms. If you ask us by email, we will ask RevenueCat to delete its record too. Our providers' backups are overwritten on their regular schedule. We do not restore deleted data from backups except to recover from a system failure, and if that happens, we delete it again.

We keep some information when the law allows us to, for the periods below and in section 13 of our Privacy Policy:

• Moderation evidence (report copies about 180 days; block and disconnect copies 30 days unless a report follows), to handle safety reports and protect members.
• Report records, with your account ID removed, for safety and to enforce our rules: open reports until we review them, and reviewed reports until 2 years after they were made.
• Purchase and refund records, with your account ID removed, for as long as we need them for tax, accounting and refunds. We do not delete them on a fixed schedule. Google Play and RevenueCat also keep their own purchase records.
• Emails you sent us, including emailed reports, for no longer than 3 years.
• Information we need for security, to prevent fraud, or to meet a legal obligation, such as responding to a lawful request, keeping records law enforcement asked us to preserve, or keeping content we reported to NCMEC for the year federal law requires.

Correction requests

If we decide not to make a correction you asked for, we will tell you in writing and explain why. In California, you can then ask us to note that you dispute the information.

Our records

We keep a record of each privacy request and how we handled it for at least 24 months.

9. Appeals

If we deny all or part of your request, you can appeal. Reply to our decision, or email contact@bizmeetapp.org with "Appeal" in the subject line, and tell us which decision you disagree with and why. Please send it within a reasonable time after our decision. We will always accept an appeal sent within 90 days.

We will review your appeal again from the start and send you a written decision, with our reasons, within 45 days of receiving it. We use this 45-day limit for everyone, which meets or beats the deadline in every state law listed below.

If we deny your appeal, you can contact your state attorney general. Here is where to do that:

If your state is not listed, you can contact your state attorney general's office.

10. No discrimination and no financial incentives

We will not deny you service, charge you a different price, give you a different quality of service, or suggest that we might, because you used a privacy right.

BizMeet does not offer financial incentives, discounts or rewards in exchange for your personal information. Discounted offers that sometimes appear in the app are not conditioned on giving us any personal information or letting us keep or use it in new ways. If we ever offer a program that is tied to personal information, we will show you a Notice of Financial Incentive and ask you to opt in before you join.

11. Other California and state disclosures

California "Shine the Light". We do not disclose personal information to third parties for their own direct marketing purposes. California residents can ask us about this at contact@bizmeetapp.org.

AI training. We do not collect, use, sell or license personal information to train large language models or other artificial intelligence models.

Not a consumer reporting agency. BizMeet is a networking service for lawful work and business. It does not offer jobs, and it is not a consumer reporting agency. The professional and employment-related information in section 3 is information members choose to show other members. We do not sell or license member information to anyone. We do not give it to employers, recruiters, staffing firms, background-check companies, data brokers or lead-generation services, except as section 4 describes, and we do not use it to decide anyone's eligibility for employment, credit, insurance or housing. Our Terms of Service forbid members from using information from BizMeet for those decisions.

De-identified data. If we keep data in de-identified form, we keep it that way and will not try to re-identify it. We do not share de-identified data. If we share it, we will require the recipient by contract not to re-identify it.

Automated decisionmaking. We do not use automated decisionmaking technology to make significant decisions about you. Section 5 describes the limited automated sorting we do.

Consumer health data. Washington, Nevada and Connecticut have separate laws about consumer health data. See our Consumer Health Data Privacy Policy (Washington, Nevada, Connecticut).

Changes. When we make significant changes to this notice, we will update the date at the top. We will also tell you before the changes take effect, by email to your account address or by a notification in the app.

12. Contact us

For privacy requests, appeals and questions about this notice, contact:

Company. BizMeet LLC

Mailing address. BizMeet LLC, 2809 E Hamilton Ave, Unit #2177, Eau Claire, WI 54701

Email. contact@bizmeetapp.org

Website. https://bizmeetapp.org