1. Introduction
BizSphere LLC ("BizSphere," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at bizsphere.info or use any of our products and services, including Karobar, myBisnis, Karbar, Sokobook, and Kwenta Pro (collectively, the "Services").
Please read this policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please discontinue use of our Services.
Summary: We collect information you provide to us, data about how you use our Services, and technical information from your device. We use this to provide and improve our Services, communicate with you, and comply with legal obligations. We do not sell your personal information.
2. Who We Are
BizSphere LLC is a technology company that develops and operates locally-tailored business management software for emerging markets. Our registered business and data controller contact information is:
- Company: BizSphere LLC
- Website: www.bizsphere.info
- Email: contact@bizsphere.info
- Address: 30 North Gould Street, Sheridan, Wyoming 82801
3. Information We Collect
3.1 Information You Provide Directly
We collect information you voluntarily provide when you:
- Register for an account with any of our products
- Submit an inquiry through our contact form
- Subscribe to our newsletter or marketing communications
- Participate in surveys, promotions, or support interactions
This may include your name, email address, phone number, company name, country, and any messages or content you send us.
3.2 Business Data
When you use our accounting and inventory management products, we process business-related data you input, such as transaction records, product inventories, customer information, invoices, and financial reports. This data belongs to you; we process it solely to provide the Services.
3.3 Automatically Collected Information
When you access our websites or applications, we may automatically collect:
- Device information: IP address, browser type and version, operating system, device identifiers
- Usage data: Pages visited, features used, time spent, clicks, and navigation paths
- Log data: Server logs, error reports, and access timestamps
- Location data: General geographic location inferred from your IP address
3.4 Information from Third Parties
We may receive information about you from third-party sources such as payment processors, analytics providers, and business partners, subject to those parties' privacy policies and applicable law.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and operate our Services — to create and manage accounts, process transactions, and deliver the features you have requested
- Communicate with you — to respond to enquiries, send service-related notices, and provide customer support
- Improve our Services — to analyse usage patterns, troubleshoot issues, and develop new features
- Marketing and promotions — to send newsletters and product updates (only where you have given consent or we have a legitimate interest and a lawful opt-out mechanism)
- Security and fraud prevention — to detect, investigate, and prevent fraudulent or unauthorised activity
- Legal obligations — to meet our obligations under applicable laws in the jurisdictions we operate in
- Business operations — for internal analytics, reporting, and business planning
4.1 Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under one or more of the following legal bases set out in Article 6 of the UK/EU GDPR:
| Purpose | Legal Basis |
|---|---|
| Providing and operating our Services | Performance of a contract (Art. 6(1)(b)) |
| Customer support and communications | Performance of a contract / Legitimate interests (Art. 6(1)(b) & (f)) |
| Improving our Services and analytics | Legitimate interests — understanding how our Services are used (Art. 6(1)(f)) |
| Marketing communications | Consent, where obtained (Art. 6(1)(a)) or Legitimate interests with opt-out (Art. 6(1)(f)) |
| Security and fraud prevention | Legitimate interests — protecting our platform and users (Art. 6(1)(f)) |
| Legal and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to such processing at any time (see Section 9).
Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:
5.1 Service Providers
We engage trusted third-party service providers to assist in operating our business — for example, cloud hosting providers, payment processors, email delivery services, and analytics tools. These providers access your information only to perform services on our behalf and are contractually obligated to protect it.
5.2 Legal Requirements
We may disclose your information where required by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect the rights, property, or safety of BizSphere, our users, or the public.
5.3 Business Transfers
If BizSphere is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you of any such change via prominent notice on our website or by email.
5.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (such as web beacons and pixel tags) to collect and store certain information when you use our Services.
Types of cookies we use:
- Strictly necessary cookies: Essential for the website to function correctly (e.g., session management, security tokens). These cannot be disabled.
- Performance / analytics cookies: Help us understand how visitors interact with our website by collecting anonymised usage data.
- Functional cookies: Remember your preferences and settings to improve your experience.
- Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness (only with your consent).
You can control cookies through your browser settings. Note that disabling certain cookies may limit the functionality of our Services.
7. Data Security
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Regular security assessments and penetration testing
- Access controls and role-based permissions
- Employee training on data protection and security
- Incident response procedures
While we take reasonable steps to protect your information, no security system is impenetrable. We cannot guarantee that our security measures will prevent every possible breach. If you believe your account has been compromised, please contact us immediately.
8. Data Retention
We retain personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including to comply with legal, accounting, and reporting obligations, resolve disputes, and enforce our agreements.
Specifically:
- Account data is retained for the duration of your active account and for a reasonable period thereafter (typically 3 years) in case you reactivate.
- Business/financial data is retained for the period required by applicable tax and financial laws in your jurisdiction (typically 5–7 years).
- Marketing data is retained until you unsubscribe or request deletion, whichever is earlier.
- Support communications are retained for up to 3 years for quality and dispute resolution purposes.
9. Your Rights
Depending on your location, you may have certain rights regarding your personal information. If you are in the EEA, UK, or Switzerland, these rights are provided under the GDPR / UK GDPR and include:
EU/UK Data Subject Rights — at a glance
- Right of access (Art. 15 GDPR) — request a copy of the personal data we hold about you and information about how we use it
- Right of rectification (Art. 16 GDPR) — correct inaccurate or incomplete information without undue delay
- Right of erasure / "right to be forgotten" (Art. 17 GDPR) — request deletion of your personal data where there is no compelling reason for us to continue processing it
- Right to restriction of processing (Art. 18 GDPR) — ask us to limit how we use your information in certain circumstances
- Right to data portability (Art. 20 GDPR) — receive your data in a structured, commonly used, machine-readable format and transmit it to another controller
- Right to object (Art. 21 GDPR) — object to processing based on legitimate interests or for direct marketing purposes (which we must then stop)
- Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on consent, withdraw it at any time without affecting prior lawful processing
- Right not to be subject to automated decisions (Art. 22 GDPR) — we do not use automated decision-making or profiling that produces legal or similarly significant effects
To exercise any of these rights, contact us at contact@bizsphere.info. We will respond within 30 days (extendable by a further two months for complex requests). We may need to verify your identity before acting on your request. There is no charge for exercising your rights.
If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority — for example, the UK Information Commissioner's Office (ICO) or the relevant national data protection authority in your EU member state.
10. International Data Transfers
BizSphere LLC is headquartered in the United States. Your personal data may be transferred to and processed in the United States or other countries outside the EEA/UK that may have different data-protection standards.
When we transfer personal data from the EEA or UK to a third country, we rely on one or more of the following safeguards:
- Adequacy decisions — where the European Commission or UK Government has recognised the receiving country as providing adequate protection
- Standard Contractual Clauses (SCCs) — EU Commission-approved model clauses (2021 SCCs) or UK International Data Transfer Agreements (IDTAs) incorporated into our contracts with recipients
- Binding Corporate Rules or other approved mechanisms — where applicable
You may request a copy of the safeguards we have in place for any specific transfer by contacting us at contact@bizsphere.info.
11. Children's Privacy
Our Services are designed for businesses and are not directed to children under the age of 16 (or the applicable age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete that information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this policy
- Provide notice on our website or via email where appropriate
We encourage you to review this policy periodically. Your continued use of our Services after any changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our privacy team:
- Email: contact@bizsphere.info
- Post: 30 North Gould Street, Sheridan, Wyoming 82801
- Contact form: bizsphere.info/contact
If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your country.