Privacy Policy

1. Introduction

BiscuitOps ("we", "our", or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application.

2. Information We Collect

We collect the following categories of information:

• Account Information: When you create an account, we collect your name, email address, password, and optional profile details such as your organization name and role.
• Animal & Breeding Records: Data you enter into the platform, including animal profiles, health records, pedigree information, breeding logs, litter records, and any associated notes or attachments.
• Usage Data: We automatically collect information about how you interact with the service, including pages visited, features used, timestamps, and actions taken within the application.
• Device & Technical Information: Browser type and version, operating system, IP address, device identifiers, and general location information derived from your IP address.
• Payment Information: If you subscribe to a paid plan, our third-party payment processor collects billing details such as credit card number and billing address. We do not store full payment card numbers on our servers.
• Communications: Information you provide when you contact our support team, respond to surveys, or communicate with us through any channel.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the BiscuitOps platform and its features, including animal record management, pedigree tracking, and breeding tools.
• Process your account registration and manage your subscription.
• Process payments and send transaction-related communications such as purchase confirmations and invoices.
• Respond to your support requests, comments, and questions.
• Send you service-related notices, including updates, security alerts, and administrative messages.
• Analyze usage trends and improve the functionality, performance, and user experience of our platform.
• Detect, prevent, and address fraud, abuse, and technical issues.
• Comply with legal obligations and enforce our Terms of Service.

4. Data Sharing & Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: We engage trusted third-party companies to perform services on our behalf, such as payment processing, hosting, analytics, and customer support. These providers are contractually obligated to use your data only as necessary to provide services to us.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request.
• Protection of Rights: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our Terms of Service, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.
• Business Transfers: If BiscuitOps is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.
• With Your Consent: We may share information with third parties when you have given us explicit consent to do so.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you choose to close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing our agreements).

Animal records, breeding data, and other content you create within the platform are retained for the duration of your active subscription. Upon account deletion, this data will be permanently removed from our systems within 90 days. We recommend exporting your data before closing your account.

6. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it, including:

• Encryption of data in transit using TLS/SSL and encryption of sensitive data at rest.
• Role-based access controls and multi-tenant data isolation to ensure your data is accessible only to authorized users within your organization.
• Regular security assessments and monitoring of our infrastructure for vulnerabilities.
• Secure hosting on industry-standard cloud infrastructure with built-in redundancy and backup systems.
• Hashed and salted passwords — we never store your password in plain text.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format. BiscuitOps provides data export functionality within the application.
• Opt-Out: Unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or adjusting your notification preferences in your account settings.
• Restriction: Request that we restrict the processing of your personal information under certain circumstances.

To exercise any of these rights, please contact us at privacy@biscuitops.com. We will respond to your request within 30 days.

8. Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve our service:

• Essential Cookies: Required for the platform to function, including session management and authentication. These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the platform so we can improve performance and usability. We use privacy-focused analytics that do not track you across other websites.
• Preference Cookies: Store your settings and preferences, such as theme and language choices.

We do not use third-party advertising cookies or sell data to advertisers. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the platform.

9. Children's Privacy

BiscuitOps is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@biscuitops.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last updated" date. For significant changes, we will also send a notification to the email address associated with your account at least 30 days before the changes take effect.

Your continued use of BiscuitOps after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@biscuitops.com.