Privacy Policy

Last updated: March 26, 2026

1. Who We Are

GetBizOnline is a service that generates landing pages for local businesses. It is operated by an individual under the name "GetBizOnline" at the domain getbizonline.com. There is no formal corporate entity at this time.

If you have any questions about your data, you can reach us at support@getbizonline.com.

2. What Data We Collect

Data you give us directly

• Email address -- provided when you sign up or claim a page. Used for login, verification, and lead notifications.
• Business link or name -- the URL or business name you paste in to generate a page.
• Any edits you make -- if you customize your page content after generation.

Data we collect from public sources

When you provide a business link or name, we pull publicly available information about that business from sources like Google Maps, Yelp, and Facebook. This includes:

• Business name and category
• Address and phone number
• Business hours
• Customer reviews and star ratings
• Photos associated with the public listing
• Website URL (if listed)

This is the same information anyone can see by searching for the business on Google.

Data collected automatically

• Page view counts -- we track how many times your landing page is viewed. This is a simple counter, not a tracking system.
• Contact click counts -- we count how many times visitors click "Call" or "Email" buttons on your page.
• IP addresses -- logged in our server access logs for security purposes. We do not use IP addresses for tracking or analytics.

We do not use any third-party analytics services (no Google Analytics, no Facebook Pixel, no tracking scripts of any kind).

3. How We Use Your Data

4. Third Parties We Share Data With

We share data with the following services, and only for the purposes described:

Google Places API

When you provide a business link or name, we send it to Google's Places API to retrieve public business information. Google receives the business name or place ID. Google's privacy policy applies to their processing of this data.

Anthropic (Claude API)

We send your business information (name, category, address, reviews, and other public details) to Anthropic's Claude API to generate the text content for your landing page. Anthropic processes this data to produce the output and, per their terms, does not use API inputs to train their models.

Resend

We use Resend to send all emails: login links, verification codes, and lead notifications. Resend receives your email address and the content of the email being sent. They do not use your email address for any other purpose.

Stripe

If you subscribe to a paid plan, Stripe processes your payment. We never see or store your full credit card number. Stripe receives your email address and payment information. Their privacy policy governs how they handle this data.

That is the complete list. We do not share your data with anyone else. We do not use advertising networks, social media trackers, or data brokers.

5. What We Do Not Do

• We do not sell your data to anyone, ever.
• We do not show advertisements on your pages or anywhere in the Service.
• We do not use tracking cookies or any third-party tracking scripts.
• We do not build profiles about you or your customers for advertising purposes.
• We do not share your email with marketing lists.
• We do not track your visitors across the web. We only count page views and contact clicks on your page.

6. Cookies

We use one cookie:

• Session cookie -- stores your login session so you stay signed in. This is a strictly necessary cookie required for the Service to function. It expires when you close your browser or after 30 days, whichever comes first.

That is it. No analytics cookies, no advertising cookies, no third-party cookies. We do not need a cookie banner because we only use a strictly necessary session cookie.

7. Data Storage and Location

All data is stored on a server in Falkenstein, Germany, hosted by Hetzner Online GmbH. Hetzner is a German hosting provider subject to EU data protection law.

Your data is stored in a PostgreSQL database on this server. Backups are made daily and stored on the same server.

The server is located within the European Union, which means your data benefits from EU data protection standards regardless of where you are located.

8. Data Retention

We keep your data for as long as you have an active account:

• Account data (email) -- kept until you delete your account.
• Business information and pages -- kept until you delete your page or account.
• Analytics data (page views, clicks) -- kept for 24 months, then aggregated and anonymized.
• Server logs (including IP addresses) -- automatically deleted after 90 days.
• Email delivery records -- kept for 12 months for debugging delivery issues.

When you delete your account:

• Your pages are taken offline immediately.
• Your personal data (email, business association) is deleted within 30 days.
• The generated page content may be retained in backups for up to 90 days, after which backups are rotated and the data is permanently gone.

9. Security

We take reasonable measures to protect your data:

• Encryption in transit: All connections to getbizonline.com use HTTPS with TLS certificates from Let's Encrypt.
• Passwordless authentication: We use magic link email login, so there are no passwords to steal or leak.
• Email verification: Business claiming requires email OTP verification.
• Server hardening: Our server runs a minimal setup with automatic security updates and firewall rules.
• No credit card storage: All payment processing is handled by Stripe. We never see your full card number.

No system is 100% secure. If we discover a data breach that affects your personal data, we will notify you by email within 72 hours.

10. Your Rights

You have the following rights regarding your data:

• Access: You can request a copy of all data we have about you.
• Correction: You can ask us to correct inaccurate data about your business.
• Deletion: You can ask us to delete your account and all associated data.
• Export: You can request your data in a machine-readable format (JSON).
• Objection: You can object to any processing of your data that you believe is not necessary for the Service.

To exercise any of these rights, email support@getbizonline.com. We will respond within 30 days.

11. GDPR Compliance

Because our server is located in Germany (EU), and because we serve users who may be in the EU, we comply with the General Data Protection Regulation (GDPR).

Our legal basis for processing your data:

• Contract: We process your email and business data because it is necessary to provide the Service you signed up for (Article 6(1)(b)).
• Legitimate interest: We keep server logs and basic analytics for security and service improvement (Article 6(1)(f)).

We do not rely on consent as a legal basis for core data processing because the processing is necessary to deliver the Service. You can withdraw from the Service at any time by deleting your account.

Regarding international data transfers: your business data is sent to Google (US) and Anthropic (US) for processing as described in Section 4. These transfers are necessary to provide the Service. Both companies maintain data protection standards, and Anthropic does not use API inputs for model training.

12. Children's Privacy

GetBizOnline is not intended for anyone under 16 years old. We do not knowingly collect data from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child under 16 has created an account, please contact us at support@getbizonline.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last updated" date at the top.
• For significant changes, we will email registered users.

We will not reduce your rights under this policy without giving you 30 days notice.

14. Contact

For any questions about this Privacy Policy or to exercise your data rights:

Email: support@getbizonline.com

Website: getbizonline.com

We aim to respond to all data-related requests within 30 days.