Privacy Policy

Last updated: September 6, 2026

This Privacy Policy explains how BizIndex.ai collects, uses, stores, and protects the personal data of its users and visitors.

1. Data Controller.

The controller of your personal data is:

Borislav Simeonov Todorov

Natural person practising a liberal profession, registered in the BULSTAT Register maintained by the Registry Agency

UIC (BULSTAT code): 177970289

Address: 58 Lyuben Karavelov St., Floor 3, Apt. 8, Primorski District, 9010 Varna, BULGARIA

Email: admin@bizindex.ai

Phone: +359885208508

2. What personal data do we process?

Depending on how you use BizIndex.ai, we may process:

  • your first and last name;
  • email address and telephone number;
  • registration and user account information;
  • information about a business you represent;
  • addresses, contact persons, and publicly available professional information;
  • information relating to payments made, without storing full payment card details;
  • IP address, device type, browser information, and technical logs;
  • content that you enter or publish through the Platform;
  • correspondence with our team.

3. Data from publicly available web sources.

When you use the automated information extraction functionality, BizIndex.ai analyses the publicly accessible business website, online store, portal, or other web source specified by you.

Publicly available business information may be extracted from that source, including descriptions, addresses, telephone numbers, email addresses, contact persons, products, and services.

Before publication, you have the opportunity to review and correct the extracted information. You are responsible for ensuring that you are entitled to specify and use the relevant source and that you do not publish personal data relating to other individuals without an applicable lawful basis.

4. Purposes and legal bases for processing.

We process personal data for the following purposes:

  • creating and managing user accounts;
  • creating, editing, and publishing business pages;
  • automatically extracting and structuring business information;
  • providing purchased services and credits;
  • processing payments;
  • communication and technical support;
  • protecting the Platform and preventing misuse;
  • complying with legal and accounting obligations;
  • sending marketing communications where you have given your consent.

The legal bases for processing may include performance of a contract, taking steps at your request, compliance with a legal obligation, our legitimate interests, or your consent.

Our legitimate interests include ensuring the security and proper operation of the Platform, preventing misuse, and protecting our rights and lawful interests.

5. Recipients of personal data.

Personal data may be disclosed, where necessary, to:

  • hosting, server, and cloud service providers;
  • email and technical support service providers;
  • payment service providers;
  • accounting, legal, and other professional advisers;
  • competent public authorities where disclosure is required by law.

Public information included on a published business page is accessible to visitors, search engines, and automated systems used to discover and process web content.

6. Retention periods.

We retain personal data only for as long as necessary for the relevant purpose:

  • account data – while the account remains active and for up to 30 days after its closure;
  • published content – until it is removed or the account is closed;
  • accounting and payment records – for the periods required by applicable law;
  • technical and system logs – for up to 180 days;
  • detailed visit data collected through Matomo Analytics – for up to 180 days;
  • correspondence – for up to 3 years after the relevant matter has been closed;
  • data processed on the basis of consent – until consent is withdrawn, unless a longer retention period is required by law.

Some public pages may use an additional Google Analytics account provided and managed by the author of the relevant page. When you visit such a page and have provided your consent, analytics data may also be sent to that account. The page author is responsible for how data obtained through their own Google Analytics account is used.

Where necessary to comply with a legal obligation, establish, exercise, or defend legal claims, or investigate a security incident, certain data may be retained for a longer period.

7. Transfers of data outside the European Economic Area.

Where a service provider processes personal data outside the European Economic Area, we apply the safeguards required by law, including, where applicable, an adequacy decision or standard contractual clauses.

8. Your rights.

You have the right to:

  • obtain information about and access to your personal data;
  • request the correction of inaccurate personal data;
  • request the deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive personal data you have provided in a structured, commonly used, and machine-readable format;
  • withdraw your consent at any time;
  • lodge a complaint with the Commission for Personal Data Protection.

To exercise your rights, you may contact us at admin@bizindex.ai. Before acting on your request, we may ask you to provide information necessary to verify your identity.

9. Automated processing.

BizIndex.ai may automatically extract, structure, summarise, or suggest content based on information obtained from a publicly accessible web source specified by you.

This processing does not constitute automated decision-making that produces legal effects concerning you or similarly significantly affects you. Extracted content is subject to review and correction before publication.

10. Security.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, destruction, or unlawful disclosure.

Despite the measures we take, no system for transmitting or storing information can guarantee absolute security.

11. Cookies.

Information about the cookies we use, their purposes, and how you can manage your preferences is available in our separate Cookie Policy.

12. Changes to this Privacy Policy.

We may update this Privacy Policy from time to time. The current version will always be published on this page together with the date of the latest update.

13. Contact details.

If you have any questions about the processing of personal data, please contact us:

Borislav Simeonov Todorov
Email: admin@bizindex.ai
Address: 58 Lyuben Karavelov St., Floor 3, Apt. 8, Primorski District, 9010 Varna, BULGARIA