Privacy Policy

1. Introduction

At Bistank ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered website building services. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Name, email address, password, and profile details
• Billing Information: Payment method details, billing address, and transaction history
• Website Content: Text, images, and content you create using our platform
• Communications: Messages, feedback, and support requests

2.2 Automatically Collected Information

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on pages
• Log Data: IP address, access times, referring URLs

3. How We Use Your Information

• Service Delivery: To provide and maintain our website building platform
• AI Processing: To power our AI website generation features
• Customer Support: To respond to inquiries and provide technical assistance
• Communications: To send service updates, security alerts, and promotional content (with consent)
• Analytics: To analyze usage patterns and improve user experience
• Security: To detect, prevent, and address fraud and security issues

4. Cookies and Tracking

We use cookies and similar technologies:

• Essential Cookies: Required for basic site functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your settings for a personalized experience

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Trusted vendors for hosting, payment processing, and analytics
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers or acquisitions

6. Data Security

• Encryption: 256-bit SSL/TLS for data in transit, AES-256 for data at rest
• Access Controls: Role-based access and multi-factor authentication
• Monitoring: 24/7 security monitoring and intrusion detection
• Infrastructure: Secure cloud hosting with regular security audits

7. Data Retention

We retain your data while your account is active. Upon account deletion, personal data is removed within 30 days, with backups retained up to 90 days before permanent deletion.

8. Your Privacy Rights

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Data Portability: Receive your data in a machine-readable format
• Restrict Processing: Request limitation of data use
• Object: Object to processing for marketing or legitimate interests

9. International Transfers

Your data may be transferred internationally. We implement appropriate safeguards, such as Standard Contractual Clauses, to protect your data during transfers.

10. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children. If discovered, such data will be promptly deleted.

11. Third-Party Services

Our platform may link to third-party services. We are not responsible for their privacy practices. Please review their policies before use.

12. Policy Changes

We may update this policy periodically. Material changes will be notified via email or our website. Continued use constitutes acceptance of updates.

13. Contact Us