Skip to content

Privacy

This policy covers www.bizuno.com/ — the project site you’re reading right now — and only this site. It does not describe how the Bizuno software you run on your own server handles data. That’s under your control, not ours.

What www.bizuno.com/ collects

When you read pages and don’t log in, we collect almost nothing.

  • Server access logs. The web server records the IP address, user agent, and requested URL of each hit, along with HTTP status and response size. These logs are kept for 30 days, then rotated out, and are used only to investigate errors or abuse.
  • Analytics. We use Plausible, a cookieless analytics service. Plausible counts page views and referrers in aggregate and does not set cookies, does not collect IP addresses for user-identification purposes, and does not fingerprint visitors. The data is stored in the EU. There is no consent banner because there is nothing to consent to.

When you register for the community forum, we additionally collect:

  • Your email address. Used to send the account-verification email, password resets, and forum subscription notifications. We do not email you about anything else without explicit opt-in.
  • Your chosen username and any profile details you fill in. Visible to other registered users and the public.
  • Your posts. Public by definition.
  • Login audit data. IP address and timestamp of each login, kept for 90 days, used only to investigate account compromise or abuse.

When you email da********@*******ft.com for commercial support, we keep the email thread and whatever you send us (your name, company, whatever you describe about your setup) as long as we have an active business relationship, and then for seven years after that for tax and warranty purposes.

What we do not collect

  • No cookies for advertising, tracking, or retargeting. Ever.
  • No selling, renting, or sharing of user data with any third party for marketing.
  • No third-party tracking pixels, fingerprinting scripts, or session replay.
  • No integration with social-media trackers (Facebook Pixel, TikTok, etc.).

The only third-party scripts the site loads are:

  1. Plausible (analytics, cookieless, aggregate only).
  2. Gravatar (if a forum user has a Gravatar, the avatar image is fetched from gravatar.com by the reader’s browser — this discloses the reader’s IP to Automattic. You can disable Gravatars in your forum profile).

That’s it.

Cookies

The only cookies the site sets are:

  • The WordPress session cookie when you log in to the forum. Required; there’s no workaround.
  • A bbPress “last visited” cookie if you’re logged in, so threads with new replies get flagged. Local to your browser, not shared with anyone.

No advertising cookies. No analytics cookies. No third-party cookies of any kind.

Your rights

You can, at any time:

  • Read, edit, or delete your forum profile from your account page.
  • Request export of your forum posts by emailing da********@*******ft.com — we’ll send a JSON dump within 30 days.
  • Request deletion of your account by the same email. Deleted accounts are anonymized: your posts remain (so threads still make sense to future readers), but your username is replaced with “former member” and your email address is removed. If you’d rather have posts deleted, say so — we’ll comply where it’s technically possible.
  • Correct anything we have on you. Email and we’ll fix it.

We follow GDPR principles for everyone, not just EU residents, because it’s simpler and it’s right.

Where the data lives

  • The website runs on a server in the United States, hosted by a commercial hosting provider. Off-site backups go to a cloud storage provider in the United States.
  • Plausible analytics is stored in the EU (Germany).
  • Email goes through a transactional email provider in the United States (addresses redacted for security — happy to disclose on request).

If data location matters for your regulatory environment, the Bizuno software is designed to be run on your own servers precisely so you don’t have to trust ours.

Children

This site isn’t directed at children. We don’t knowingly collect information from anyone under 13 (under 16 in the EU). If you believe a child has registered, email us and we’ll delete the account.

Changes

We update this page when the facts change. The “last updated” date at the top of the page is the truth; there is no separate change log.

Contact

Complaints you can’t resolve with us go to your local data-protection authority. In the EU, that’s your country’s DPA; in the UK, the ICO; in California, the CPPA.