Privacy Policy

Who is responsible for your data

GB Global operates Business Advisor AI and is the data controller for personal data processed to provide this service. This notice explains our use of your personal data. Razorpay processes payment data under its own privacy notice.

Data we collect, purposes and legal basis

• Account data: name, email, authentication records and account preferences are used to create your account, sign you in and provide the service. Our legal basis is performance of our contract with you.
• Business data and AI content: business profiles, financial entries, goals, decisions, prompts, conversations, assessments and action plans are processed to save your work and provide personalised guidance. Our legal basis is contract performance. Avoid entering sensitive personal data or data about others unless you have the right to share it.
• Usage and technical data: request counts, errors, device/browser information, IP addresses and security logs may be processed to enforce plan limits, diagnose problems and prevent fraud or abuse. Our legal basis is our legitimate interest in operating a reliable, secure service.
• Support communications: information you send us when seeking help is used to resolve your request, based on contract performance or our legitimate interest in customer support.
• Subscription records: customer and subscription identifiers, selected plan, billing status and billing periods are used to provide paid access, reconcile transactions and meet applicable recordkeeping obligations. Our legal bases are contract performance and legal obligation. We do not receive or store your full card details.

If we introduce optional marketing or non-essential tracking, we will obtain consent where required. You may withdraw consent without affecting earlier lawful processing. We do not sell your personal data.

Who we share data with

We share only the data needed with hosting, authentication, storage and AI service providers, including Lovable Cloud and the AI providers used to generate your requested answers. Your supplied business context and prompts are sent to the AI service to provide that guidance. Providers may process data on our behalf subject to appropriate contractual safeguards.

Razorpay Software Private Limited processes payments for us and receives the information needed for payments, subscriptions and refunds (such as email and payment details you enter in its checkout). We never receive your full card or UPI details. See Razorpay's Privacy Policy.

We may also share necessary information with professional legal or accounting advisers, and with authorities where required by law. Access is limited to authorised persons and providers who need it for these purposes; your private business records are not made available to other customers.

How long we keep data

Account and saved business records are kept while your account remains active so you can access your history. You can remove supported records or delete your account in Account settings. Account deletion removes your account and its associated business records from the active service.

Technical, security and support records are retained only for as long as necessary to investigate issues, resolve requests and protect the service. Records required for tax, accounting, disputes or fraud prevention may be retained for the applicable statutory period or until the matter is resolved. Provider backups may remain until their normal backup cycle expires. Data is deleted or anonymised when it is no longer needed; Razorpay retains its own payment records according to its notice and legal obligations.

Security

We commit to appropriate technical and organisational safeguards, including encrypted connections, authenticated access, account-level data access controls and restricted privileged access. We take reasonable steps to protect personal data, but no online service can guarantee absolute security. Keep your sign-in credentials confidential.

International processing

Our service providers may process data outside your country. Where applicable law requires safeguards for international transfers, we use appropriate measures such as adequacy decisions or standard contractual clauses. For data subject to UK or EEA rules, these safeguards apply to transfers outside the UK or EEA where required.

Your rights and choices

Depending on the law that applies to you, you may have rights to access, correct, erase, restrict or object to processing, receive a portable copy of your data, withdraw consent and complain to a data protection authority. UK and EEA residents have these rights under the applicable GDPR rules, subject to legal exceptions, and requests will be addressed within one month unless a lawful extension applies.

You can edit your business information, export your saved data and request account deletion through Account settings. For payment data and payment-related privacy requests, contact GB Global. Deleting your app account does not by itself cancel a subscription: cancel it first from Plans and billing.

Cookies and browser storage

Essential cookies or browser storage support sign-in, security, your selected business and dismissed reminders. These are needed for the service and are not advertising trackers. You can clear or block them in your browser settings, but sign-in and saved preferences may stop working. This notice does not authorise optional analytics or marketing cookies; we will provide a notice and consent controls before introducing them where required.

Changes to this notice

We may update this notice as the service or legal requirements change. Material changes will be communicated through the service where appropriate.