Privacy

In short: we keep what it takes to write your update, and what you tell us about your company stays yours.

What we keep: your account, or a guest account while you set up; what you tell us about your company and the companies around it; the updates we write for you; the pages you visit; and the request log.

What we do not keep: an advertising profile, or card or payment details. We do not sell, rent or trade anything about you.

Who else gets any of it: the companies named below, each only for its own job.

How long we keep it: the request log goes after 14 days, and a guest account 30 days after it was last used. Everything else stays until you ask us to delete it.

Where to write: [email protected].

When you visit

In short: no cookie and no IP address in what we count; the server in front of the site keeps a request log for 14 days.

Reading a page here sets no cookie.

Each visit is counted in PostHog: which page, when, the site you came from, whether it is the first page of your visit, your country, and the kind of device and browser.

PostHog is also given the browser's own description of itself, cut short, and any campaign words in the link you followed.

Visitors are told apart by a code made again every day, so nobody is followed from one day to the next.

While you set up, we count when you see the proposal for your company, when you correct it, and when your updates start, so we can see where setting up loses people. These counts go to PostHog with the rest of what we count.

The server in front of the site logs every request: the full IP address, the page, the time and what your browser sends, without cookies, passwords or sign-in codes. We keep it for 14 days at most, to keep the site secure and stop misuse, on our legitimate interest.

To stop one place starting too many companies, we count its starts for a day under a code made from its IP address. The count holds no address.

Your account

In short: your name, your email address, your sign-ins, one session cookie and, for a guest, one setup cookie, kept to give you the account you asked for.

Your account holds your name and your email address. A password, if you set one, is kept in a form that cannot be turned back into what you typed.

Each sign-in keeps when it started, when it ends, the IP address it came from and the browser it used. A sign-in link keeps the address it was sent to and a code that works once.

Pressing Start without an account makes you a guest account and sets one session cookie, so you can set up before you sign up. Signing in sets one session cookie too.

A guest who presses Start also gets a setup cookie. It names only that setup and the guest account, and lasts 7 days, so signing in brings you back to the setup you were in.

We hold the account on the contract between us, and the sign-ins on our legitimate interest in finding faults and stopping misuse.

One admin can read the whole database. Every action they take on an account is written down, with who took it and why.

What you tell us stays yours

In short: never shown to another user, never sold, never used to train a model, and deleted with your account.

What you tell us: which company is yours, with the competitors and customers you follow; every correction you made; and what you write to us about an update.

What we make from it for you: what we understood about your company, its market and whether you build it or invest in it; the search results we checked for you; the trends to watch; our notes on where each company stands; the companies we proposed to you; when you last opened This week for each company, so we can mark what is new; and the updates themselves.

None of it is shown to another user. Someone else who follows the same company sees that company and the moves we find about it, never that you follow it or what you told us.

We do not sell it, and we do not use it to train a model.

We hold it on the contract between us: writing your update takes it. Each model call it causes keeps the model, the cost and the call's id, not what was asked or answered.

People named in the news

In short: a move can name a person; we take only what was published, and a person named can ask us to remove it.

We read what companies and the press publish about the companies you follow: launches, price changes, money raised, hires and departures, customers won and lost.

A move can name a person, such as someone hired or leaving. We take only what was published, with a link to where it was published, and keep it on our legitimate interest in telling you what moved around your company.

If you are named in a move and want it removed, write to [email protected]. We answer within one month.

Companies that process the data

In short: each is given only what its job takes, and keeps its copy under its own terms.

Turso holds the database, on AWS in eu-west-1, Ireland: everything we keep ourselves.

Resend, in the United States, sends every mail: your sign-in links and your updates. It is given the address, the subject and the message.

Anthropic and OpenRouter, both in the United States, run the models that read the news and write your update. They are given what you told us about your company and what the sources published.

Brave and Exa, both in the United States, run the searches for news about the companies you follow. They are given search words built from the companies' names. Brave keeps a search for up to 90 days as its own, not as something it handles for us.

PostHog, in its European Union region, is given the visits above and the steps you take as you set up and sign in. Each names your account's id, a guest account's id or, before you sign in, the day's code. Never your IP address, your email address or anything you typed.

Sentry, in its European Union region, holds the errors the service runs into, with your account's id when you are signed in. It is never given your IP address, and email addresses are taken out before anything is sent. Your company's name can be in some of them.

Cloudflare, in the United States, stands in front of the site and forwards mail sent to [email protected] to the person who runs Bizmira. It sees every request on its way to us.

Google Workspace, run by Google in the United States, receives the report we mail ourselves each morning. It names the companies people set up and the updates we sent.

Hetzner rents us the server the site runs on, in Helsinki, Finland. It holds the running service and the request log, not the database.

Nobody else is given anything.

How long it is kept

In short: guest accounts, the count of starts and the request log go by themselves; everything else stays until you ask.

A guest account is deleted 30 days after it was last used, with everything under it. The count of starts from one place is deleted once its day is over. The request log drops anything older than 14 days by itself.

Nothing else is deleted on a schedule.

If you ask us to delete your account, we delete it with your sign-ins and everything under it: which company is yours, with the competitors and customers you follow; what we understood about your company, its market and whether you build it or invest in it; every correction you made; the search results we checked for you; the trends to watch; our notes on where each company stands; the companies we proposed to you; when you last opened This week for each company, so we can mark what is new; and the updates, with what you wrote to us about them.

What stays after your account is deleted: each company's name, website and other names, with our one line on what it sells; the pages of each company's own site that we read; and the public moves we found about each company. None of it says who followed a company.

Updates already mailed stay in the inboxes they were sent to. The note of what an admin did, and why, is kept even then.

Your rights and contact

In short: one address for everything, an answer within a month, and Datatilsynet if you think we have this wrong.

Bizmira is run by Usenestor.com ApS, CVR 45225240, Søstien 1, 3460 Birkerød, Denmark, the data controller for everything on this page.

You can ask to see what we keep about you, to have it corrected or deleted, to get it in a file you can take elsewhere, to have us pause using it while something is in dispute, and to object to the uses that rest on our legitimate interest.

Write to [email protected]; there is no separate privacy address. We answer within one month.

If you think we have this wrong, you can complain to Datatilsynet, the Danish Data Protection Agency, or to the supervisory authority of the country you live in.

Changes appear here, with the date it was last updated at the top; we do not mail a notice.