Privacy policy

BizAppsMarket is an online marketplace for business software. It is operated by Blueridge Web Services LLC, doing business as BrainIT Consulting (“we”, “us”).

This policy explains what personal information we collect through BizAppsMarket, why we collect it, who we share it with, how long we keep it, and the choices you have. It covers our website, accounts, developer memberships and app reviews.

It does not cover the apps listed on BizAppsMarket. Each app is run by its developer under the developer’s own privacy policy, which the listing links to.

BizAppsMarket is for businesses in the United States.

Interest list

If you join our interest list from the home page, we keep your name, email address and company, your trade or the kind of app you build, and anything you tell us about what you need or what you are building.

Your account

Your name and email address, and whether you have confirmed the email. If you sign in with Google, Google sends us your name, email address and profile picture, and we keep the sign-in tokens Google issues. If you set a password, we store only a one-way hash of it. We cannot read your password.

Sign-in security

• Each time you sign in we create a session and record the IP address and browser type it came from.
• If you add a passkey, we store its public key and the name you give it. Your fingerprint, face or device PIN never leaves your device, and we never receive it.
• If you turn on an authenticator app, we store its secret key and your backup codes so we can check the codes you enter.
• One-time sign-in links and email confirmation codes are stored until they are used or expire.

Membership and billing

Your plan, its status and dates, and the customer and subscription references that Stripe gives us. Stripe collects your card details on its own payment page. We never see or store your full card number.

Apps you send for review

The listing text, prices, categories, support email and reply time, links (demo, website, code repository, privacy policy and terms), screenshots, what you tell us about sensitive data your app handles, and the test logins for your demo. We keep a history of each app’s status changes and the notes our reviewers write. We also record each time a staff member views a test login in full.

Review evidence

When we review an app we record what we tested and what happened: findings, scores and screenshots of the demo. For apps with the Code-reviewed label we record the file, line and a short excerpt for each finding, not a copy of the code. The Developer terms explain code access in full.

Buyer activity on our site

When you are signed in, we record when you view an app’s listing and when you click its “Visit website” link. See the introduction log below.

Messages to us

If you write to us, we keep your message and our reply.

Technical logs

Our hosting provider records basic details of each request, such as IP address, the page asked for, the time and the browser type. We use these to run the site and protect it from abuse.

We do not collect your precise location. Screenshots are re-encoded when they are uploaded, which removes hidden details such as where and on what device a picture was taken.

• To create your account, sign you in and keep your account secure.
• To run developer memberships and take payment.
• To review apps, list the apps that pass, and send developers their results.
• To send email about the service: confirmations, sign-in links, review results and billing notices. These are part of having an account.
• If you joined the interest list, to tell you when BizAppsMarket opens and about founding places. Ask us to stop at any time.
• To keep a record of introductions between buyers and developers (section 4).
• To prevent fraud and abuse, enforce our terms, and meet our legal duties, such as tax records.
• To understand how the site is used and improve it, using our own records. We use no third-party analytics.

We do not use your personal information to train AI models. We do not use it for advertising, and we do not build profiles of you for anyone else.

When a business finds an app on BizAppsMarket and later buys it from the developer, we need a record that we made the introduction. Under our Developer terms, sales to a buyer we introduced go through BizAppsMarket for 90 days after the introduction, or the developer pays our commission on them. The log is how we show a developer which buyers we introduced, and when. It also lets us stand behind buyers if something goes wrong with a purchase.

What it records

Two things, and only when you are signed in:

• you open an app’s listing page;
• you click the “Visit website” link on a listing.

Each entry holds which account, which app, which of the two actions, and the date and time. The log also notes the date each app was listed, which is not about any buyer.

If you are not signed in, nothing is recorded in the log. This log stores no IP address and no browser or device details.

“Visit website” links go through a BizAppsMarket address that records the click, then sends you to the developer’s site with utm_source=bizappsmarket added to the web address. That tells the developer the visit came from BizAppsMarket. It does not tell them who you are.

When messages to developers and buying through BizAppsMarket open, those will be recorded too. We will update this policy before that happens.

What it does not do

• It records nothing that happens on other websites or in other apps.
• We do not fingerprint your device.
• We do not read your email.
• We do not ask developers for their customer lists.

How it is kept

Entries are added, never edited or deleted, while they are kept. Each entry is linked to the one before it, so we can show that the log was not changed later. We keep entries for 24 months, then delete them.

Our staff can see the log. When we need to settle a commission question or a dispute about a purchase, we may show the entries about that app and that buyer to the developer, the buyer, or both.

We do not sell your personal information, and we do not share it for advertising.

Service providers

These companies run parts of BizAppsMarket for us. They receive only what they need for their service, and they may use it only to provide that service to us.

Vercel

Hosts the website and stores screenshots and files.

Neon

Runs our database.

Stripe

Takes payments and manages memberships. Stripe collects card details directly.

Resend

Sends our email.

Google

Signs you in, only if you choose Sign in with Google.

Anthropic

Provides the AI (Claude) we use in app reviews. It receives the demo pages, listing text and, for Code-reviewed apps, the parts of the code needed for the review. It does not receive account or billing details.

Public listings

When an app is listed, its listing is public: the app’s name, description, prices, screenshots, support email, the developer’s name as shown on the listing, the check scores and the public part of the review report. Security details are never public.

Between buyers and developers

• When you buy an app through BizAppsMarket, we give the developer what they need to provide the app and support you: your name, business name and email address.
• When messaging is available, a developer’s email address is shown to a buyer after the buyer sends a first message.
• When ratings are available, ratings and written reviews are public, with the name of the business that wrote them.

Other cases

• When the law requires it, such as a valid subpoena or court order.
• To protect the rights, safety or property of our users, the public or us, including to investigate fraud.
• If our business or BizAppsMarket is sold or merged, to the new owner, who must keep to this policy for the information we hold.

Sign-in cookie

Keeps you signed in. Set only when you sign in, and removed when you sign out or the session ends.

Trusted device cookie

Set only if you tick “Trust this device” when entering an authenticator code. Lasts 30 days.

Theme choice

If you pick light or dark, your browser remembers it in local storage on your device. It is never sent to us.

That is all. We use no advertising, analytics or tracking cookies, and no third-party scripts that follow you around the web. Our fonts are served from our own site.

Stripe’s payment page and Google’s sign-in page are run by those companies and set their own cookies under their own policies.

Because we do not sell or share personal information, there is nothing to opt out of. We still treat a Global Privacy Control signal from your browser as an opt-out request.

Interest list

Until you ask us to remove you.

Your account

While your account is open. When you close it, we delete your account details within 30 days, apart from the records below that we must keep.

Sessions

Until you sign out or the session expires.

Test logins

Deleted when the review round ends: when the app is returned, approved or rejected.

Review reports and evidence

While the app is listed, plus 12 months.

Reviews that did not pass

12 months from the review.

Code for Code-reviewed apps

Not kept. The review machine and its disk are deleted when the review ends. Working data in our job system is deleted within 7 days.

Screenshots

Deleted with a draft you delete. Otherwise kept with the listing and its review evidence.

App history and the record of staff viewing test logins

As long as the app’s review evidence.

Introduction log

24 months.

Membership, billing and payment records

As long as tax and accounting rules require, up to 7 years.

Messages to us

As long as we need them to deal with your request, and no more than 3 years.

• Test logins are encrypted (AES-256-GCM) before they are stored, with a key kept apart from the database. Staff see them in full only when a review needs them, and every time they do is recorded. They are deleted when the review round ends.
• Passwords are stored only as one-way hashes.
• Passkeys and authenticator apps are available to every account.
• Staff accounts sign in only with a passkey or a password. They cannot use Google or email links. Our admin pages also need a passkey or an authenticator code in the same session.
• Code reviews run in a temporary, isolated machine that is cut off from the internet while the code is built and tested. The code is not kept.
• All connections to BizAppsMarket use HTTPS.

No system is perfectly secure. If a breach affects your personal information, we will tell you as the law requires.

Wherever you live in the United States, you can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct information that is wrong;
• delete your information, apart from records we must keep for the law, tax, fraud prevention or an open dispute;
• remove you from the interest list;
• close your account.

You can manage your sign-in methods yourself under Account security. For anything else, email support@dreamforgeworld.com from the address on your account, or use our contact form. We may ask you to confirm the request from that address before we act. We answer within 45 days, and tell you if we need more time.

We will not treat you differently for using any of these rights.

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents the rights below. We offer them whether or not the law applies to a business of our size.

What we collected in the last 12 months

Identifiers

Name, email address, IP address, account and customer references.

Customer records

Name, company and billing references. Card numbers go to Stripe, not to us.

Commercial information

Your membership plan, payments, and the reviews you bought.

Internet activity

Sign-in sessions, browser type, request logs, and the introduction log.

Professional information

Your company, your trade, and the apps you build or want.

Sensitive personal information

Account sign-in details (password hash, passkey public keys, authenticator secret) and the test logins you give us.

Sources: you, Google if you sign in with it, Stripe for payment status, and your browser. Purposes: the ones in section 3. Disclosed to: the service providers in section 5, for business purposes only. We keep each category for the periods in section 7.

We use sensitive personal information only to provide the service and keep it secure, never to infer anything about you. We do not sell or share personal information, and we have not done so in the last 12 months. We do not knowingly collect information from anyone under 16.

Your rights

• To know what we collect, use and disclose, and to get a copy.
• To delete personal information we collected from you.
• To correct information that is wrong.
• To limit the use of sensitive personal information. We already use it only for the permitted purposes above.
• To opt out of sale or sharing. We do neither.
• Not to be treated differently for using these rights.

To make a request, email support@dreamforgeworld.com or use our contact form. You can also send it through an authorised agent, who must show us your signed permission. We confirm we received your request within 10 business days and answer within 45 days, which the law lets us extend once by another 45 days if we tell you why.

California’s “Shine the Light” law: we do not share personal information with other companies for their own direct marketing.

Residents of other states with privacy laws, such as Virginia, Colorado, Connecticut, Texas and Oregon, can make the same requests in the same way. If we turn down a request, you can appeal by replying to our answer with “Appeal” in the subject. We answer appeals within 60 days, and if you are still not satisfied you can contact your state attorney general.

BizAppsMarket is for businesses. It is not directed at anyone under 18, and you must be 18 or older to create an account. We do not knowingly collect personal information from anyone under 18. If we learn we have, we delete it. Some listed apps may handle children’s information for their customers; that is the developer’s responsibility under the developer’s own privacy policy.

When we change this policy, we post the new version here with a new effective date. If a change matters to how we use your information, we email account holders at least 14 days before it takes effect.

The quickest way to reach us is our contact form. For privacy requests, email support@dreamforgeworld.com. We run BizAppsMarket online only.