BAW-D Technologies Privacy Policy

1. Scope and Operator

This Privacy Policy explains how BAW-D Technologies collects, uses, stores, discloses, and protects information when you use its websites, mobile applications, Brain Stormer tools, Business Idea workspaces, financial-planning tools, collaboration features, community features, reports, exports, and related services collectively referred to as the “Services.”

BAW-D Technologies is operated by Isthmus Digital Media Group LLC (“BAW-D,” “we,” “us,” or “our”).

This Privacy Policy applies to information processed directly by BAW-D through the Services. Third-party websites, payment providers, application stores, and other external services may maintain their own privacy policies.

By using the Services, you acknowledge the practices described in this Privacy Policy and our Terms of Use and End User License Agreement.

2. Information We Collect

Account and Contact Information

We may collect information used to establish, verify, maintain, and support your account, including:

• name;
• email address;
• username or account identifier;
• password credentials in protected form;
• profile image;
• organization or agency affiliation;
• account roles and permissions;
• email-verification status; and
• support and communication preferences.

Business-Planning Information

Information you enter into BAW-D may include:

• business or project names;
• business concepts, plans, goals, and strategies;
• products and services;
• customers, markets, industries, and competitors;
• business locations and geographic service areas;
• ownership and management information;
• operating history and professional experience;
• startup needs and resource requirements;
• revenue models, pricing, costs, wages, and expenses;
• assets, liabilities, debt, equity, and funding needs;
• financial assumptions, forecasts, and projections;
• support systems, barriers, risks, and planning concerns;
• uploaded files, recordings, images, and attachments; and
• comments, revisions, reports, and exported documents.

Voice and Conversation Information

When you use conversational, speech, transcription, or recording features, we may collect:

• audio recordings you choose to submit;
• voice input sent during a conversation;
• transcripts of spoken or typed conversations;
• conversation history and structured conversation data;
• information extracted from the conversation;
• conversation duration and usage totals;
• message counts and text-character usage;
• timestamps and activity status; and
• automated summaries, follow-up questions, and reports.

Commerce and Transaction Information

When you make a purchase, we may collect:

• billing and contact information;
• products or access periods purchased;
• order numbers and transaction identifiers;
• payment status;
• refund, dispute, or chargeback information;
• coupon or promotional-code information;
• limited payment-method details supplied by the processor; and
• tax or accounting information associated with the order.

Collaboration and Community Information

When you collaborate or participate in community features, we may collect:

• collaborator invitations and email addresses;
• workspace membership and permission levels;
• sharing activity;
• comments, messages, posts, and replies;
• business listings or opportunity information;
• moderation reports and enforcement records; and
• agency, advisor, consultant, or program relationships.

Technical and Usage Information

We may automatically collect technical information such as:

• Internet Protocol address;
• browser and device type;
• operating system;
• application version;
• session and authentication information;
• pages, routes, buttons, and features used;
• login, creation, update, and activity timestamps;
• referring page or source;
• approximate location inferred from an IP address;
• error messages and diagnostic information;
• security, fraud, and abuse signals; and
• cookie and local-storage identifiers.

BAW-D does not require precise device-location information for its primary business-planning features. Business-location information you enter into a plan is different from device-location tracking.

Communications

We may collect emails, support requests, attachments, survey responses, feedback, and other communications you send to us.

3. How We Collect Information

We collect information:

• directly from you when you register or enter information;
• when you upload, record, submit, or share content;
• when collaborators or authorized organizations invite you;
• automatically when you use the website or application;
• from payment processors after a transaction;
• from authentication providers when social login is enabled;
• from artificial-intelligence and voice-processing providers;
• from application stores and distribution platforms; and
• from support, security, and anti-abuse systems.

When another person submits information about you, that person is responsible for having authority to provide it.

4. How We Use Information

We may use information to:

• create, verify, and administer accounts;
• provide business-planning and financial tools;
• save and organize Business Ideas and Brain Storms;
• generate plans, reports, charts, tables, and exports;
• process voice conversations and transcripts;
• provide artificial-intelligence-assisted features;
• enable collaboration and permission controls;
• process purchases and provide paid access;
• send verification, transaction, and service emails;
• respond to support requests;
• maintain security and prevent fraud or misuse;
• diagnose errors and improve reliability;
• moderate community features;
• enforce our Terms of Use;
• comply with legal obligations;
• protect users, BAW-D, and third parties; and
• develop and improve the Services.

Product improvement may include reviewing aggregated, de-identified, or technical usage information, feedback, and error reports.

5. Business and Financial Planning Content

Business plans and financial records may contain confidential, commercially sensitive, or personally sensitive information. BAW-D processes this information to provide the functions you request.

You control the information you enter and are responsible for deciding whether it is appropriate to place that information in the Services.

Unless a feature specifically requests it, do not enter:

• Social Security numbers;
• bank-account passwords;
• payment-card numbers;
• personal identification numbers;
• medical records;
• government account credentials;
• authentication secrets; or
• information you are not authorized to disclose.

Workspace access expiration does not necessarily mean that associated plans and records are immediately deleted. Retention is addressed below.

6. Artificial Intelligence Processing

BAW-D may send prompts, instructions, business-planning information, transcripts, and relevant workspace context to artificial-intelligence service providers in order to:

• ask follow-up questions;
• extract structured information;
• summarize business concepts;
• generate draft language;
• assist with research;
• identify missing information;
• support financial interpretation;
• produce automated analysis; and
• generate Brain Storm or planning reports.

BAW-D does not currently operate a proprietary foundation model trained on users’ private workspace content.

We may use third-party artificial-intelligence providers, including OpenAI. Information submitted to those providers is processed according to our service configuration, applicable agreements, and the provider’s privacy and security practices.

We do not authorize artificial-intelligence providers to use private workspace information for unrelated advertising.

AI output may be inaccurate or incomplete. Human review remains necessary before using AI output for business, financial, legal, tax, lending, or investment decisions.

Where BAW-D provides an AI preference or opt-out control, disabling AI features may prevent certain assisted functions from operating.

7. Voice, Audio, and Conversation Data

Voice features may use ElevenLabs or another voice, transcription, or conversational-AI provider.

Depending on the feature and its configuration:

• audio may be transmitted for real-time processing;
• audio may be converted into a written transcript;
• conversation data may be converted into structured fields;
• the transcript may be stored in your Brain Stormer record;
• conversation JSON or extracted JSON may be stored;
• the original audio recording may be retained; or
• the original audio may be discarded after processing.

The interface or feature instructions may provide additional information about whether an original recording will be saved.

BAW-D does not intend to use voice recordings for voice cloning, biometric identification, or identity authentication. A future feature involving those uses would require separate notice and any legally required consent.

Do not speak payment-card numbers, passwords, Social Security numbers, or other unnecessary sensitive credentials into voice features.

8. Payments and Commerce Information

BAW-D uses Stripe to process payment-card transactions. Payment details entered into Stripe’s payment interface are processed by Stripe.

BAW-D does not intentionally store complete payment-card numbers or card security codes.

Stripe may provide BAW-D with limited transaction information, such as:

• transaction identifiers;
• payment status;
• card brand;
• the last four digits of a card;
• billing name or address;
• refund or dispute status; and
• fraud and risk signals.

Purchases made through Apple, Google, or another application marketplace may also be processed under that marketplace’s payment and privacy terms.

9. Cookies, Local Storage, and Similar Technologies

BAW-D may use cookies, browser storage, mobile application storage, and similar technologies for:

• login and session management;
• account security;
• email verification;
• shopping-cart and checkout functions;
• remembering interface preferences;
• workspace navigation settings;
• fraud and abuse prevention;
• error diagnosis; and
• service performance.

Some cookies are necessary for the Services to function. Blocking necessary cookies may prevent login, checkout, saving, or other features from working.

Google reCAPTCHA or a similar security service may be used to detect automated registrations, spam, and abuse. Such services may collect device, browser, interaction, and network information.

Google Charts and related content-delivery services may receive standard technical information when charts or libraries are loaded from external servers.

10. How We Disclose Information

We may disclose information:

• to service providers performing functions for BAW-D;
• to collaborators you invite or authorize;
• to an agency or organization connected to your account;
• when you choose to publish community content;
• to process payments and transactions;
• to provide AI, voice, email, hosting, or support services;
• to investigate fraud, security incidents, or abuse;
• to comply with law or valid legal process;
• to protect legal rights, users, or public safety;
• during a merger, financing, reorganization, or asset sale; or
• with your direction or consent.

Service providers are permitted to process information for the services they provide and under their applicable agreements.

11. Service Providers and Platform Partners

BAW-D currently uses or may use the following categories of providers:

Google Cloud - Hosting, computing infrastructure, databases, files, and backups.

Stripe - Payment processing, transaction management, and fraud prevention.

OpenAI - Artificial-intelligence processing, structured extraction, drafting, analysis, and related features.

ElevenLabs - Conversational voice, speech processing, transcription, audio processing, and conversation analysis.

Google Workspace - Transactional email, support communications, and business administration.

Google Charts - Rendering financial and business-planning visualizations.

Google reCAPTCHA or Similar Services - Spam prevention, abuse detection, and account security when enabled.

Apple and Google - Application distribution, application-store services, purchases, device services, and optional authentication.

Providers may change as the Services develop. We will update this Privacy Policy when a provider change materially affects how personal information is processed.

12. Collaboration, Agencies, and Community Features

Collaborators

Users you invite to a workspace may view, edit, comment on, or otherwise interact with information according to the permissions assigned to them.

You are responsible for selecting collaborators and deciding what information they should be allowed to access.

Agencies and Programs

If you participate through an agency, consultant, advisor, business-support program, or similar organization, authorized personnel may access information that has been explicitly shared or connected to that relationship.

Authorized organizations may also maintain program-administration records or internal notes associated with their work, subject to their own legal obligations and policies.

An agency relationship does not automatically transfer ownership of your Business Idea or workspace.

Community Content

Information you intentionally post in a public or shared community area may be visible to other users or the public. Do not post confidential information in a public area.

Removing a post may not remove copies already saved, quoted, or shared by other users.

13. Sale, Advertising, and Cross-Context Tracking

BAW-D does not sell personal information for money.

BAW-D does not currently share personal information for cross-context behavioral advertising or use third-party advertising networks to track users across unrelated applications and websites.

BAW-D does not currently display targeted third-party advertisements within private business-planning workspaces.

If these practices change, we will update this Privacy Policy and provide any notices or opt-out controls required by law.

14. Data Retention

We retain information for as long as reasonably necessary to:

• provide the Services;
• maintain active or recoverable accounts;
• support workspace access and collaboration;
• complete transactions;
• maintain accounting and tax records;
• resolve disputes;
• prevent fraud and abuse;
• enforce agreements;
• maintain security logs; and
• comply with legal obligations.

The expiration of a 90-day access period does not automatically delete the account, Business Ideas, Brain Storms, plans, or financial information.

Expired workspace information may be retained to permit account reactivation, access renewal, export, support, dispute resolution, or legal compliance.

Accounts awaiting manual deletion review may remain disabled and their content unpublished for up to 30 days. Temporary disabling and unpublishing are administrative steps and do not constitute completed account deletion.

Retention periods may differ based on the category of information. For example:

• account information may remain until deletion is requested or the account is administratively removed;
• workspace content may remain while the account or project is maintained;
• payment and accounting records may be retained as required by tax, financial, or fraud-prevention rules;
• limited transaction, security, fraud-prevention, entitlement, and legal-compliance records may be retained for up to one year after account deletion;
• security logs may be retained for investigation and system protection;
• support records may be retained to document prior service; and
• deleted information may remain temporarily in restricted backups before being overwritten.

Retained entitlement records may be used to enforce prior purchase, project, and usage limits and to prevent account deletion and re-registration from being used to obtain additional unauthorized access.

Artificial-intelligence and voice providers may maintain their own provider-level retention schedules based on the selected service, configuration, and applicable agreement.

15. Information Security

BAW-D uses administrative, technical, and organizational safeguards designed to protect information, which may include:

• encrypted network connections;
• account authentication and email verification;
• role-based access controls;
• workspace permission controls;
• private file access where configured;
• restricted administrative access;
• software updates and security monitoring;
• spam and automated-abuse controls;
• payment processing through a dedicated provider; and
• database and file backups.

No Internet service, application, database, or storage system can be guaranteed completely secure.

You are responsible for protecting your password, email account, devices, authentication links, and collaborator selections.

Report suspected unauthorized access at /support.

16. Account and Data Deletion

You may initiate or request deletion through:

• the account-deletion function within the mobile application;
• the instructions available at /account-deletion; or
• a request sent via /support.

We may require authentication or other information to verify that the person requesting deletion controls the account.

Manual Review and Interim Deactivation

Account-deletion requests are reviewed manually. After a request is verified, BAW-D may temporarily disable the account and unpublish its content while reviewing workspace ownership, collaboration relationships, transaction records, security concerns, and legal obligations.

Temporary disabling and unpublishing are intermediate administrative steps and do not constitute completed account deletion.

Verified deletion requests will ordinarily be completed within 30 days. Private workspaces and content owned solely by the requesting user will be deleted unless retention is legally required.

For agency-owned, organization-owned, or shared workspaces, BAW-D may preserve the workspace for the agency, organization, or remaining lead collaborator while removing the departing user’s access and personal account association.

Account deletion may permanently remove or de-identify:

• account profile information;
• Brain Stormer records;
• Business Idea workspaces;
• financial-planning information;
• uploaded files and recordings;
• reports and exports stored in the account;
• collaboration access; and
• other data associated with the account.

Some information may be retained when reasonably necessary for:

• transaction and accounting records;
• fraud prevention;
• security investigations;
• legal claims or disputes;
• compliance with law;
• enforcement of our agreements;
• enforcement of prior purchase, project, and usage limits; or
• restricted system backups awaiting normal deletion.

Limited transaction, security, fraud-prevention, entitlement, and legal-compliance records may be retained for up to one year. These retained records will not ordinarily include business plans, Brain Storm conversations, uploaded files, or financial-planning content unless retention is legally required.

Information belonging to another workspace owner may not be deleted solely because a collaborator deletes their personal account. The collaborator’s access and personal account association will be removed as appropriate.

Public community content may be removed, anonymized, or retained when necessary to preserve conversation structure, moderation history, legal records, or the rights of other users.

17. Your Choices and Controls

Depending on the available features, you may be able to:

• update account information;
• change your password;
• remove your profile image;
• control workspace collaborators;
• change collaborator permissions;
• remove a collaborator;
• choose whether to use optional AI features;
• choose whether to use voice features;
• edit or delete planning content;
• export reports or planning documents;
• adjust communication preferences; and
• request account deletion.

Transactional, security, account-verification, and legal messages are not promotional communications and may continue while your account is active.

18. Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion of information;
• request a portable copy of certain information;
• object to or restrict certain processing;
• withdraw consent where processing depends on consent;
• opt out of certain sales, sharing, or targeted advertising;
• appeal certain privacy-request decisions; and
• receive equal service without unlawful discrimination.

BAW-D does not currently sell personal information or use it for cross-context behavioral advertising.

To submit a privacy request, use /support.

We may need to verify your identity and account authority before completing a request.

An authorized agent may submit a request where permitted by law, but we may require proof of authorization and verification of the account holder.

19. Legal Bases for Processing

Where applicable law requires a legal basis, BAW-D may process information because:

• processing is necessary to provide the Services or perform a contract;
• processing is necessary to take steps you request before entering a contract;
• processing supports legitimate interests such as security, support, fraud prevention, and service improvement;
• you have provided consent;
• processing is necessary to comply with law; or
• processing is necessary to protect legal rights or vital interests.

When processing relies on consent, you may withdraw that consent, but withdrawal does not affect processing already lawfully completed.

20. International Data Transfers

BAW-D is operated from the United States. Information may be processed or stored in the United States or other countries where BAW-D’s service providers operate.

Those countries may have privacy laws different from the laws in your location.

Where required, BAW-D or its providers may use contractual, organizational, or other recognized safeguards for international transfers.

21. Children’s Privacy

The Services are intended for adults and are not directed to children under 13.

BAW-D does not knowingly collect personal information from a child under 13 without legally sufficient authorization.

If you believe a child has submitted personal information, contact us via /contact

22. Mobile Applications and App Stores

A BAW-D mobile application may process the same categories of information described in this Privacy Policy.

Depending on the enabled features, application-store disclosures may identify categories including:

• contact information;
• account identifiers;
• user content;
• audio data;
• financial or purchase information;
• usage data;
• diagnostic data;
• approximate location based on network information; and
• security and fraud-prevention information.

Apple, Google, device manufacturers, and application marketplaces may independently collect information concerning downloads, devices, purchases, application performance, authentication, and marketplace activity.

Their collection is governed by their own terms and privacy policies.

Applications that permit account creation will provide a method to initiate account deletion within the application and a public account-deletion resource.

App Store privacy disclosures and Google Play Data Safety disclosures are separate marketplace notices and should be read together with this Privacy Policy.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• the Services;
• data practices;
• artificial-intelligence or voice providers;
• payment or authentication providers;
• application-store requirements;
• security practices;
• business operations; or
• applicable law.

Each published revision will identify a version number, effective date, and last-updated date.

If a change materially affects existing users, we may provide notice through the Services, email, an application notification, or another appropriate method.

We will not retroactively authorize a materially different use of personal information without providing appropriate notice or obtaining consent where required.

24. Contact Information

Questions, concerns, account-deletion requests, and privacy requests may be directed to:

General support information is available at /support.

Account-deletion information is available at /account-deletion.