Privacy Policy

The Basics: Who We Are, Our Role, and Definitions

Who We Are

e-Merchants & Co. Inc. (“BeProfit,” “we,” “us,” or “our”) provides financial products and services to growing companies. Our offices are located at 200 E. Las Olas Blvd., Suite 1400, Ft. Lauderdale, FL 33301, United States. If you have questions about our company, your privacy, or if you want to exercise your rights, you can contact us at privacy@beprofit.ai.

Our Role: Controller and Processor

Certain data protection laws, including the laws in the EU and UK, differentiate between a party that determines why and how personal data is processed (called a “controller”) and a party that processes personal data solely on the controller’s behalf and according to the controller’s instructions (called a “processor”). BeProfit is the controller in respect of the processing described in this Privacy Policy.

Definitions and Recommendations

When we refer to “Services,” we mean our website, including its subdomains (collectively, the “Sites”), and our web and mobile applications, integrations, and related products and services, including the BeProfit application that connects to the Amazon Selling Partner API. When we refer to “Personal Data” or “Personal Information,” we mean information that is defined as personal data under applicable law. This includes any information that may be used to identify an individual, directly or indirectly, either alone or in combination with other information, including, for example, your phone number, location, time zones, including unique identifiers like Internet Protocol (IP) addresses or cookie IDs and any information that you may provide when you interact with us. We may also use other analytics tools to collect information about the use of the Services and types of technical data in the context of the use of the Services, including information about your device or any other system, software, language preference, etc. We may also collect statistical data, which means data that is not directly associated with or linked to your personal data; statistical data does not, by itself, permit the identification of individual people. Such information may be derived or generated from the personal data you may share with us through the Services. However, as stated above, it shall not identify you personally and shall be used by us to promote our legitimate interests, service improvement, research, analysis, and statistical purposes. We do not create statistical data from Amazon Data. When we refer to “you,” we mean visitors to our Sites, job applicants, and any user of the Services, as applicable. When we refer to “our support chatbot,” we mean our support assistant found on the Sites that provides customer support and account management services by issuing responses (including in certain circumstances, artificial intelligence (AI) responses) to your support and services inquiries.

A Note on Legal Bases

Certain jurisdictions only allow the processing of personal data where a legal basis has been established. Under the EU’s General Data Protection Regulation (“GDPR”), the possible legal bases include: your consent, the processing is necessary to perform a contract with you, the processing is necessary to fulfill our legal obligations, or a company has a legitimate business interest to process your personal data. Where we are a controller, we only collect and process data where we have established a legal basis. Below you can find more details about specific legal bases.

Personal Information We Collect as a Controller, How We Use It, and Why

Depending on the Services you use, we may collect a variety of information from or about you or your devices from various sources, as described below.

Personal Information You Provide to Us.

• Registration and Profile Information. When you register to use our Services, we ask you to provide your name, email address, username, and a password or connect through a single-sign on service. During the onboarding process, we may also ask you for information about your company and personnel, such as the names and email addresses of individuals who you would like to authorize to use our Services, a photo for your individual account, as well as other relevant information we and our service providers may require integrating your company’s business information with our Services.
• Financial Services. When you apply for and/or use one of our Financial Services, we need to process certain information about you, your company, and individuals associated with your company (including owners, shareholders, and personnel), such as your name, job title or role, address, social security number, tax identification number, date of birth, phone number, email address, and other relevant information necessary to process your application and/or provide your company with the Financial Services requested.
• Communications. If you contact us directly, we receive additional information about you. For example, if you contact us for customer support, we may receive your name, email address, the contents of the message and any attachments you send to us, and any other information you choose to provide. If you subscribe to our newsletter, we will collect certain information from you, such as your name and email address. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.
• Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience. You may also apply through LinkedIn. If you do so, we will collect the information you make available to us on LinkedIn.
• Business Information. With your permission, we may also collect information about your business which you share with us or permit us to access such as your company’s name, address, telephone number, size, type of activity, bank account information, financial accounting information, Federal EIN, Amazon seller or vendor account identifiers, the authorization you grant to BeProfit through Amazon’s Selling Partner API authorization process (we never ask for your Amazon login credentials), Shopify Token, eBay Token, Magento Token, Stripe Token, Walmart Token, BigCommerce Token, Endpoint Server URL, business financial data (such as Sales, Orders, Inventory, Payments, Transfers and Marketplace loans) and your Business Credit Report (“Business Information”).
• Legal Basis: We process this Personal Data based on the performance of a contract with you, to take steps at your request before entering a contract, or our legitimate interest to answer your inquiries and provide customer support. Processing your Personal Data to share our newsletters and promotional materials is based on your consent. You may withdraw your consent at any time by contacting us at privacy@beprofit.ai.

Personal Information We Collect When You Use Our Services.

• Location Information. When you use our Services, we receive your precise location information. We also infer your general location information, for example, by using your internet protocol (IP) address.
• Device Information. We receive information about the device and software you use to access our Services, including IP address, web browser type, operating system version, phone carrier and manufacturer, application installations, device identifiers, mobile advertising identifiers, and push notification tokens.
• Usage Information. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or content you view and the dates and times of your visits.
• ChatBot Technology. We may use chatbots to help provide customer service and support, including through the use of a virtual assistant. A chatbot is a software application that mimics human conversations in text interactions on our website. It enables the communication between a human and a machine, which can take the form of messages or voice commands. The chatbot is designed to work without the assistance of a human operator. It responds to questions posed to it in natural language as if it were a real person using a combination of pre-programmed scripts, machine learning, and generative artificial intelligence (“AI”). When asked a question, the chatbot will answer using the knowledge database that is currently available to it. If the conversation introduces a concept the chatbot is not programmed to understand, it will advise of its limitations. The chatbot functionality may not be monitored in real time. If you use our chatbot service, we will collect and maintain any information you provide to us when using the chatbot. You are responsible for the information you share with the chatbot, and we strongly advise you not to input sensitive or personal information, such as financial or account details or other confidential information. We will also create and store a transcript of your chat interaction with us, which will be stored by our third-party service provider. We may use these transcripts and the information you provide for quality control, customer service, fraud prevention, and security.
• Information from Cookies and Similar Technologies. We and our third-party partners collect information using cookies, pixel tags, or similar technologies. Our third-party partners, such as analytics and advertising partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Services, you may not be able to utilize the features of the Services to their fullest potential.
• Purchases, Transactions, Accounts, and Information About Your Business. When you use our Services, we may receive information about your business, payments, sales, transactions, and accounts, either directly from you or from, for example, our financial partners, card network partners, merchants, or service providers. For example, we may receive your payment method information, transaction amount, transaction date, transaction location, information generated when a payment or purchase is made, account balances, revenues, income, expenses and other relevant information about your use of our Services. Without this information, we cannot process your transactions, which may prevent you from purchasing our products or services.
• Third-Party Account. If you choose to link the Services to a third-party account, you authorize us to collect, store, and use any information they may give us. For example, we may receive additional information about you and your company, such as email address, information about your company’s financial accounts and transaction data, business records, and other relevant information about your business.
• Legal Basis: When we process this Personal Data that is generated from cookies and similar technologies for the purpose of developing and improving our products and services and/or to advertise to you, we do so based on your consent. When we process this Personal Data, which is not generated from cookies and similar technologies, and/or for the purpose of preventing fraud, we do so based on our legitimate interests to develop and improve our products and services, market our own products and to prevent fraud. We will only use your Personal Data for marketing third parties’ products and Services if you have given your consent.

You may withdraw your consent at any time by sending an email to the address: privacy@beprofit.ai. We will process your request as soon as reasonably possible, however it may take a few days for us to update our records before any opt-out is effective. Additional information regarding Our Marketing Activities is provided below.

How We Use the Information We Collect

We use the information we collect (other than Amazon Data, which we use only as described in the “Amazon Data” section below):

• To provide, maintain, improve, and enhance our Services;
• To personalize your experience on our Services such as by providing tailored content and recommendations;
• To understand and analyze how you use our Services and develop new products, services, features, and functionality;
• To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
• For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you;
• To send you text messages and push notifications;
• To facilitate transactions and payments;
• To find and prevent fraud, and respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or request by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the information is collected.

How We Share the Personal Information We Collect

BeProfit is committed to protecting your privacy and will not share or disclose information about you, unless permitted under the following terms and/or circumstances:

• Affiliates. We may share any Personal Information we receive with our affiliates, where this is necessary to provide you with the Services and so that we can manage our business, such as to keep updated records of our users.
• Vendors and Service Providers. We may share your Personal Information we receive with vendors and service providers retained in connection with the provision of the Services, which process your Personal Information on our behalf under written agreements that restrict their use of it to providing services to us. We share your Personal Information with vendors and service providers where this is necessary to provide you with the Services and so that we can manage our business and as part of our contractual relationships.
• Third-Party Integrations. If you choose to connect a third-party service or integration to the Services, we may share your Business Information and other Personal Information with that third party as necessary to enable the integration and allow you to use that third party’s products or services. Your use of any such third-party service is governed by that third party’s own privacy policy and terms.
• Network Partners. When you use the Services to submit a funding request, we disclose your Personal Information to funding providers and other third parties in our network (collectively, “Network Partners”) as necessary to deliver the products and services that you requested. We may disclose your personal information to Network Partners to provide you with information about financial products and services that may interest you. Note that Network Partners that interact with you may use and/or retain your personal information whether or not you use their services and their handling of your personal information is subject to their privacy policies. Our Network Partner list may be updated from time to time, and we encourage you to review the list periodically to remain informed about with whom we share information. They are committed to using your Personal Data solely for the specified purposes. They implement appropriate security measures, such as encryption and access controls, to protect your data.
• Financial and Business Partners. We may share your Personal Information we receive with our financial institution and business partners, such as banks, card issuing partners, bank technology platform providers, credit bureaus and reporting agencies, marketplaces and other entities used or retained in connection with the provision of the Services. We disclose your personal information to other financial companies with whom we engage in joint marketing efforts or who offer financial-related products or services that may be of interest to you. They implement appropriate security measures, such as encryption and access controls, to protect your data.
• Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/. They implement appropriate security measures, such as encryption and access controls, to protect your data.
• Advertising Partners. We work with third-party advertising partners to show you ads that we think may interest you. Some of our advertising partners are members of the Network Advertising Initiative (https://optout.networkadvertising.org) or the Digital Advertising Alliance (https://optout.aboutads.info). If you do not wish to receive personalized ads, please visit their opt-out pages to learn about how you may opt out of receiving web-based personalized ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking, or you can install the AppChoices mobile app to learn more about how you may opt out of personalized ads in mobile apps. They implement appropriate security measures, such as encryption and access controls, to protect your data.
• As Required by Law and Similar Disclosures. We may access, preserve, and disclose your Personal Information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.
• Merger, Sale, or Other Asset Transfers. We may transfer your Personal Information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we (or any of our affiliates) are acquired by or merged with another company (in whole or in part) or we sell, liquidate, or transfer all or a portion of our (or an affiliates’) assets. The use of your Personal Information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
• Consent. We may also disclose your information with your permission.

Amazon Data

• Scope. If you connect an Amazon Seller Central or Vendor Central account to the Services, you authorize BeProfit, through Amazon’s authorization process, to access data made available through the Amazon Selling Partner API (“Amazon Data”). This section controls over any other provision of this Privacy Policy with respect to Amazon Data.
• What We Access and Why. We access only the Amazon Data necessary for the features you use, such as sales, orders, fees, inventory, advertising, and settlement data. We use Amazon Data solely to provide you with financial analytics, profitability reporting, and business health assessments and, if you choose, to facilitate a financing application that you initiate. We do not use Amazon Data for advertising, marketing, or any other purpose of our own.
• How We Share Amazon Data. We do not sell Amazon Data, and we do not disclose it, individually or in aggregated form, to other users, affiliates, lenders, advertising or analytics partners, or other third parties, except (i) to subprocessors that help us provide the Services to you, under written agreements imposing data protection obligations at least as protective as ours; (ii) at your direction, in connection with an activity you request; (iii) to facilitate a financing application that you initiate; or (iv) as required by law.

International Transfers of Personal Data

If you are located in the EU, when we share your Personal Data with third party service providers based outside of the European Economic Area (“EEA”), the service provider will either be located in a jurisdiction where the EU has determined that it is acceptable to store such information in accordance with an adequacy decision or we will sign on agreements that require them to comply with applicable law, keep your Personal Data secure at similar levels to the level described in the Privacy Policy. In such cases, we rely on the security measures taken by such providers for the physical security, integrity, redundancy, and the data protection of the data that relates to your Personal Information. You agree to such transfer and/or storage of Personal Information, and we take the necessary measures to ensure a sufficient level of protection in accordance with applicable laws. Accordingly, we will implement the following safeguards:

• When we transfer your Personal Data to Israel, we rely on the decision by the European Commission that says that those countries are considered to provide an adequate level of data protection.
• Where we transfer your Personal Data to other countries, we (i) take additional security measures to protect the data and (ii) use specific contracts approved by the European Commission, known as the Standard Contractual Clauses, to give your Personal Data the same protection it has in the EEA.

In certain cases, we may transfer your Personal Data to countries outside the EEA based on your explicit consent. You have the right to withdraw your consent at any time. For more information, please contact us at privacy@beprofit.ai. Please contact us at privacy@beprofit.ai. if you would like further information on the specific mechanism used by us when transferring your Personal Data out of the EEA.

Your Choices

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Location Information. You can prevent your device from sharing precise location information at any time through your device’s operating system settings.

Personal Information. You may request the deletion of your personal information that is collected or maintained by us by submitting such a request to us at privacy@beprofit.ai.

Third Parties

Our Services may contain links and integrations to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

Security

We make reasonable efforts to protect your information by using safeguards designed to improve the security of the Personal Information we maintain. However, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information. As a result, while we strive to protect your Personal information, we cannot ensure the security and privacy of your Personal Information or other content you may have provided while using the Services, and you do so at your own risk and free will. We encourage you to exercise discretion regarding the Personal Information you choose to disclose. The security of your Personal Information also depends on the security of the devices you use and the way in which you protect your user IDs and passwords. The measures we take include:

• Technical Measures. The electronic safeguards we employ to protect your Personal Information include secure servers, firewalls, antivirus protections, encryption of data in transit (TLS 1.2 or higher) and of personal data at rest, multi-factor authentication, security logging and monitoring, and regular vulnerability scanning.
• Access Control. We limit access to your Personal Information only to authorized personnel who have a need to know, including account managers, customer support staff, and software developers. We review these permissions regularly and revoke an employee’s access immediately after his/her termination.
• Internal Policies. We maintain and regularly review and update our privacy related and information security policies.
• Personnel. We require employees to sign non-disclosure agreements according to applicable law and industry customary practice.
• Personnel, Agents, and Contractors. In addition to our employees, we may permit certain agents and contractors to process or access your Personal Information, including your Business Information, on our behalf and solely to help us provide, maintain, and support the Services. These agents and contractors are subject to confidentiality obligations and are only granted access on a need-to-know basis consistent with the purposes described in this Privacy Policy.
• Database Backup. Our databases are backed up and verified regularly. Backups are encrypted to preserve their confidentiality and integrity.

Your Rights

How to Access and Limit Our Use of Certain Personal Data

Depending on which laws apply, you have certain legal rights over your Personal Data. Below is some general information about rights that may apply to you, but we recommend checking the law or consulting with a lawyer to understand what applies in your specific case. To exercise your rights, please contact us at privacy@beprofit.ai. If you want to exercise your rights regarding your Personal Data held by other controllers you can contact the applicable controller directly. We may ask for reasonable evidence to verify your identity before we can comply with any request.

• Right of Access. You may have a right to know what Personal Data we collect about you. In certain circumstances we may charge you a fee to provide you with this information, if permitted by law. If we are unable to provide you with all the information you request, we will do our best to explain why. See Article 15 of the GDPR for more details, if your Personal Data is subject to GDPR.
• Right to Correct Personal Data. You may request a review and rectification (including correction and update) of your Personal Data. We update, complete, correct or delete inaccurate, incomplete, or outdated Personal Data. See Article 16 of the GDPR for more details, if your Personal Data is subject to GDPR.
• Deletion of Personal Data (“Right to Be Forgotten”). You may have the right to request that we delete your Personal Data. Note that we cannot restore information once it has been deleted. Even after you ask us to delete your Personal Data, we may be allowed to keep certain data for specific purposes under applicable law. See Article 17 of the GDPR for more details, if your Personal Data is subject to GDPR. If you wish to delete your account and Personal Data, contact us at privacy@beprofit.ai.
• Right to Restrict Processing. If your Personal Data is subject to the GDPR, you may have the right to ask us to stop processing your Personal Data. See Article 18 of the GDPR for more details, if your Personal Data is subject to GDPR.
• Right to Data Portability. If your Personal Data is subject to the GDPR, you may have the right to request that we provide you with a copy of the Personal Data you provided to us in a structured, commonly used, and machine-readable format. See Article 20 of the GDPR for more details, if your Personal Data is subject to GDPR.
• Right to Object. If your Personal Data is subject to the GDPR, you may have the right to object to certain processing activities. See Article 21 of the GDPR for more details, if your Personal Data is subject to GDPR.
• Withdrawal of Consent. If we are processing your Personal Data based on your consent, you are always free to withdraw your consent, however, this won’t affect processing we have done before you withdrew your consent by the “unsubscribe” button or contacting us at privacy@beprofit.ai. Please note that withdrawing consent may affect our ability to provide certain services. You will receive confirmation once your consent has been withdrawn.
• Right to Lodge a Complaint with Your Local Data Protection Authority. If your Personal Data is subject to the GDPR, you have the right to submit a complaint regarding the processing of your Personal Data by us to the relevant data protection authority if you have any concerns about how we are processing your Personal Data, you are entitled to report such dissatisfaction to the applicable supervisory authority in your country of residence. Although we kindly ask that, as a courtesy, you please attempt to resolve any issues with us first.

Data Retention

We may retain all or any part of the Personal Data we collect or that you share with us for as long as required for the provision of our services or if it is necessary to fulfil the purpose for which the information has been collected as stated above. In addition, we may also retain such information for as long as required to comply with our legal or business requirements or obligations, to resolve disputes, to enforce our Terms, all as permitted under any applicable laws. Statistics and analysis that have been anonymized may be saved thereafter and may remain on our servers indefinitely. When deciding how long to store Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized access, the purposes for which the Personal Data was collected, as well as applicable legal requirements. Please note that we may delete information from our systems without notifying you first. Retention by any of our service providers or subcontractors may vary in accordance with each business’s retention policy. In some circumstances, we may store your Personal Data even after we’re finished using it if required to do so by law (e.g. to fulfill tax or audit requirements) or to keep accurate records of our interactions in case there is a prospect of litigation relating to your Personal Data. In such cases, we will maintain the same security measures as described above. Please contact us at privacy@beprofit.ai if you would like details about the retention periods for each type of Personal Data we process.

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 18 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at privacy@beprofit.ai.

Information on our Storage and Servers for our International Visitors

The Services are hosted in the United States at Google Cloud Platform (GCP). If you choose to use the Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. For more information on GCP’s privacy practices, visit: Google Cloud Privacy Notice. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. By providing any information, including personal information, on or to the Services, you consent to such transfer, storage, and processing.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share personal information previously collected from you through the Services, we will notify you through the Services, by email, or other communication.

California Privacy Rights (CCPA/CPRA)

This section applies to residents of California and supplements the rest of this Privacy Policy. It is provided pursuant to the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (together, “CCPA/CPRA”). Capitalized terms used but not defined in this section have the meanings given to them in the CCPA/CPRA.

Your California Privacy Rights

California residents have the following rights under the CCPA/CPRA, subject to certain exceptions:

Right to Know. You have the right to request that we disclose to you (i) the categories and specific pieces of personal information we have collected about you; (ii) the categories of sources from which we collected such information; (iii) the business or commercial purpose for collecting, selling, or sharing such information; and (iv) the categories of third parties to whom we disclose such information.

Right to Delete. You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.

Right to Correct. You have the right to request correction of inaccurate personal information that we maintain about you.

Right to Opt Out of Sale or Sharing. You have the right to opt out of the sale or sharing of your personal information. To submit an opt-out request, please contact us at privacy@beprofit.ai or click “Do Not Sell or Share My Personal Information” on our website. Note that we do not knowingly sell or share the personal information of consumers under 16 years of age.

Right to Limit Use of Sensitive Personal Information. You have the right to limit our use and disclosure of sensitive personal information (such as Social Security numbers, financial account details, and precise geolocation) to only what is necessary to perform the services you have requested or as otherwise permitted by the CCPA/CPRA. To exercise this right, please contact us at privacy@beprofit.ai.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide a different level or quality of goods or services, or suggest that you may receive a different price or quality of goods or services because you exercised a right under the CCPA/CPRA.

Authorized Agent Requests

You may designate an authorized agent to submit a CCPA/CPRA rights request on your behalf. To do so, the authorized agent must provide written proof of authorization signed by you, and you must verify your identity directly with us. We may deny a request from an authorized agent who does not submit proof of authorization. Authorized agent requests may be submitted to privacy@beprofit.ai.

Shine the Light Disclosure (California Civil Code § 1798.83)

California residents may request once per year a list of the categories of personal information we have disclosed to third parties for their direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties. To make such a request, please contact us at privacy@beprofit.ai with “California Shine the Light Request” in the subject line.

Additional EU/UK Data Subject Rights and Disclosures (GDPR)

Legitimate Interests

Where we rely on legitimate interests as our legal basis for processing your personal data, those interests include: (i) preventing and detecting fraud and financial crime; (ii) ensuring the security and integrity of our systems and networks; (iii) improving and developing our products and services through analytics; (iv) direct marketing of our own products and services to existing customers; (v) managing our business operations and administration; and (vi) exercising or defending legal claims. We have assessed that our legitimate interests are not overridden by your interests or fundamental rights in each case.

Automated Decision-Making and Profiling

We may use automated processing, including profiling, in connection with our financial services, including to assess creditworthiness, detect fraud, verify identity, and make or assist in funding decisions. If you apply for financing through a partner, we may generate a creditworthiness assessment using financial metrics computed by BeProfit. Where such automated processing produces decisions that have a legal or similarly significant effect on you, you have the right under Article 22 of the GDPR to: (i) request human review of the decision; (ii) express your point of view; and (iii) contest the decision. To exercise these rights, please contact us at privacy@beprofit.ai. The logic involved in any automated decision-making typically involves analysis of financial data, transaction history, and identity verification factors. The significance and envisaged consequences are that automated assessments may affect your eligibility for or the terms of financial products offered through our Services.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, as required by Articles 33 and 34 of the GDPR. We will notify the relevant supervisory authority within 72 hours of becoming aware of a breach where feasible. Notification to you will include the nature of the breach, contact details of our data protection point of contact, likely consequences of the breach, and measures taken or proposed to address it.

Lead Supervisory Authority

If your personal data is subject to the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. For EU residents, your lead supervisory authority will depend on your country of residence. For UK residents, the relevant supervisory authority is the Information Commissioner’s Office (ICO), which can be reached at https://ico.org.uk. We kindly ask that you first contact us at privacy@beprofit.ai so that we may attempt to resolve any concern.

Specific Retention Periods

As a supplement to our Data Retention section above, the following criteria guide our retention periods by data category: (i) Account and identity information is retained for the duration of your account and for up to 7 years thereafter to comply with financial recordkeeping and anti-money laundering obligations; (ii) Financial transaction data is retained for up to 7 years to comply with applicable tax, audit, and regulatory requirements; (iii) Communications and support records are retained for up to 3 years from the date of the interaction; (iv) Marketing preferences and consent records are retained for the period of the relationship and up to 3 years thereafter; (v) Cookie and analytics data is retained for periods specified in our Cookie Policy, generally between 30 days and 2 years; and (vi) Job application data is retained for up to 2 years from the date of application unless a longer period is required by law. To request details about retention periods applicable to a specific category of your personal data, please contact us at privacy@beprofit.ai.

Cookie Policy and Consent

We use cookies and similar tracking technologies on our Sites. Cookies fall into the following categories: (i) Strictly Necessary Cookies, which are essential for the Sites to function and cannot be switched off; (ii) Performance/Analytics Cookies, which allow us to count visits and understand how users interact with our Sites; (iii) Functional Cookies, which enable enhanced features and personalization; and (iv) Targeting/Advertising Cookies, which may be set by our advertising partners to build a profile of your interests. For users in the EU and UK, we obtain your prior consent before setting non-essential cookies through a cookie consent banner displayed on your first visit to our Sites. You may withdraw or change your consent preferences at any time by clicking “Cookie Settings” on our website or by contacting us at privacy@beprofit.ai. Please note that disabling certain cookies may affect the functionality of our Services. For more information about the specific cookies we use and their purposes, please refer to our full Cookie Policy available on our website.

Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at privacy@beprofit.ai.