Privacy Policy

1. Data Controller & Scope

Balance Optimizers Inc. (“we”) is the data controller for personal data collected through our website and services, including time audit data, behavioral logs, and demographic information. This policy applies to all interactions under GDPR (EU) 2016/679, CCPA (California), and LGPD (Brazil).

2. Categories of Data Collected

• Identifiers: Name, email, phone, billing address, IP address, device ID.
• Professional Data: Job role, company size, work schedule preferences, delegation patterns.
• Behavioral Data: Time logs, app usage, meeting frequency, task completion rates.
• Sensitive Data: Health information related to chronotype and sleep patterns (explicit consent obtained).

3. Legal Bases & Purpose Limitation

Processing is based on: (a) contract performance for service delivery; (b) legitimate interest for product improvement and fraud prevention; (c) consent for marketing communications and sensitive data processing. Data is never sold; we may share aggregated anonymized insights with research partners under strict data use agreements.

4. Data Retention & Deletion

Behavioral logs are retained for 24 months post-engagement; aggregated statistics retain indefinitely. Users may request erasure via [email protected] within 30 days. According to CCPA, you may opt-out of any data sharing for cross-context behavioral advertising.

5. Security Measures

Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is role-based with quarterly audits. Subprocessors include AWS (SOC 2 Type II) and Stripe (PCI-DSS Level 1).

6. International Transfers

Data may be transferred to countries with adequacy decisions (EU-UK, Canada, Japan) or under Standard Contractual Clauses. We participate in the EU-US Data Privacy Framework.

7. Rights & Complaints

Exercise rights: access, rectification, portability, restriction, objection. Lodge complaints with the lead supervisory authority: Irish Data Protection Commission.

8. Updates

Policy reviewed quarterly. Material changes notified via email 15 days prior.