Privacy Policy

Last Updated: February 18, 2026

Byzantine Glam, LLC ("Company," "we," "us," or "our") operates the BizFile API and the website at bizfileapi.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

When you create an Account or use the Service, we collect:

• Account Information: Email address, password (stored as a one-way hash — we never store your actual password), and optional company name.
• Payment Information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number. We receive and store your Stripe customer ID for billing purposes.

1.2 Information Collected Automatically

When you use the API, we automatically collect:

• API Usage Data: Endpoints accessed, states queried, number of lookups, response status codes, and timestamps.
• Technical Data: IP address, API Key used (hashed, not the raw key), request headers, and user agent.

1.3 Information We Do NOT Collect

• We do not use cookies or tracking pixels on our API.
• We do not collect personal information beyond what is listed above.
• We do not purchase or obtain personal information from third-party data brokers.

2. Business Entity Data

The BizFile API provides access to business entity information aggregated from publicly available government records (Secretary of State filings). This data includes:

• Business names, types, and statuses
• Filing dates and document numbers
• Principal and mailing addresses of business entities
• Registered agent names and addresses
• Officer and director names, titles, and business addresses

2.1 Source of Business Entity Data

All business entity data is obtained from publicly available government sources, including state Secretary of State offices and official business filing databases. This information is part of the public record and is made available by government agencies for public access.

2.2 Public Records Basis

We process and provide business entity data under the public records exemption. This data was originally filed with government agencies as a matter of public record and is available to anyone through the relevant state filing offices.

3. How We Use Your Information

We do NOT:

• Sell your personal information to third parties.
• Use your information for advertising or marketing by third parties.
• Use your information for automated decision-making or profiling.

4. How We Share Your Information

We may share your information only in the following limited circumstances:

• Payment Processor: We share your email and billing information with Stripe to process payments. Stripe's privacy policy governs their use of your data: stripe.com/privacy.
• Infrastructure Providers: Our Service runs on Vercel (hosting) and Supabase (database). These providers may process your data as part of providing their services to us, subject to their respective privacy policies and data processing agreements.
• Legal Requirements: We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfer: If Byzantine Glam, LLC is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

• Account Information: Retained for as long as your Account is active, plus 90 days after deletion to allow for account recovery.
• API Usage Data: Retained for 24 months for billing, analytics, and compliance purposes.
• Payment Records: Retained as required by applicable tax and financial regulations.

You may request deletion of your Account and associated data by contacting us via our contact form. We will process your request within 30 days, subject to any legal retention obligations.

6. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Passwords are hashed using bcrypt with a cost factor of 12 and are never stored in plaintext.
• API Keys are hashed using SHA-256 before storage. Raw keys are never stored in our database.
• Data in transit is encrypted using TLS/HTTPS.
• Database access is restricted using Row Level Security (RLS) policies and role-based access controls.
• Secrets and credentials are stored in secure environment variables, never in source code.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your personal information.
• Data Portability: Request your data in a machine-readable format.
• Opt-Out: We do not sell personal information. If this changes, we will provide an opt-out mechanism.

To exercise any of these rights, contact us at our contact form. We will respond within 30 days.

8. Texas Privacy Disclosures

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents have certain rights regarding their personal data, including the right to access, correct, delete, and obtain a copy of their data, as well as the right to opt out of the sale of personal data or targeted advertising.

Byzantine Glam, LLC is a Texas limited liability company. We do not sell personal data. We do not engage in targeted advertising. We do not process personal data for profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise your rights under the TDPSA, contact us at our contact form.

9. California Privacy Disclosures

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights. In the preceding 12 months:

• Categories of personal information collected: Identifiers (email, name), commercial information (subscription plan), and internet activity (API usage logs).
• Categories sold: None. We do not sell personal information.
• Categories disclosed for a business purpose: Identifiers and commercial information shared with our payment processor (Stripe).

California residents may exercise their right to know, delete, and opt out of sale by contacting our contact form. We will not discriminate against you for exercising your CCPA rights.

10. Requests Regarding Business Entity Data

The business entity data provided through our API is sourced from public government records. If you are an individual whose information appears in a business filing and you wish to update or correct that information, you must do so directly with the relevant Secretary of State office. We reflect data as published by those government sources.

If you believe that data served by our API contains errors not present in the source record, please contact us at our contact form and we will investigate.

11. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any information to them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our website. The "Last Updated" date at the top of this page indicates when the policy was last revised.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Byzantine Glam, LLC
Contact Us
Website: bizfileapi.com