Privacy Policy

1. Who We Are

Adzifi is a marketplace for digital and physical advertising operated by Beezifi Inc. ("Beezifi," "we," "us," or "our"). This Privacy Policy applies to all products and services offered under the Adzifi brand, including the web application, APIs, and related services (collectively, the "Service").

Beezifi Inc. is the data controller for personal information processed under this Policy.

2. Information We Collect

Information You Provide Directly

• Account information — first name, last name, email address, password (hashed), phone number, and role (property owner or advertiser);
• Property listings — property addresses, coordinates, descriptions, photos, and ad slot details submitted by property owners;
• Booking information — campaign dates, creative files, and booking preferences submitted by advertisers;
• Payout and tax information — W-9 tax forms, bank account details (account number encrypted at rest, routing number), and account holder name submitted by property owners to receive payouts;
• Communications — messages exchanged between owners and advertisers through the platform;
• Support requests — information you provide when contacting our support team.

Information Collected Automatically

• Log data — IP address, browser type and version, operating system, and pages visited;
• Usage data — actions taken on the platform (bookings created, properties listed, searches performed);
• Device information — device type, screen resolution, and timezone;
• Ad performance data — QR scan events, tracking link clicks, and impression data associated with your bookings;
• Cookies and local storage — session tokens and preference settings (see Section 5).

Information from Third Parties

We receive information from Stripe (our payment processor) when advertisers pay for bookings, including payment status and limited card metadata. We do not store full card numbers.

3. How We Use Your Information

We use the information we collect to:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

4. How We Share Your Information

We never sell your personal data. We share information only in the following circumstances:

Between Platform Participants

When a booking is created, limited information is shared between the property owner and advertiser to facilitate the transaction — including property details, booking dates, and contact information necessary to coordinate the campaign. Full banking details are never shared between participants.

Service Providers

We share data with vendors who help us operate the Service, including:

• Stripe — payment processing for booking charges and advertiser payments;
• Cloud infrastructure providers — hosting and database services;
• Email delivery providers — transactional email delivery.

All service providers are bound by data processing agreements and may only use your data to perform services on our behalf.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Beezifi, our users, or the public. Tax reporting obligations may require us to share your information (including W-9 data) with relevant tax authorities.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of Beezifi's assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information for purposes not listed here with your explicit consent.

5. Cookies & Tracking

What We Use

• Session cookies — store your authentication token to keep you logged in;
• Preference cookies — remember your display settings and tenant context;
• Analytics — we use privacy-respecting analytics to understand how features are used. We do not use Google Analytics or Meta Pixel.

What We Don't Do

We do not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling technologies for our own marketing purposes. Ad performance tracking on Adzifi (e.g., QR code scans) is used solely to report campaign metrics to the booking advertiser.

Managing Cookies

You can control or delete cookies through your browser settings. Disabling session cookies will prevent you from logging in. Disabling preference cookies means your settings won't persist between visits.

6. Payout & Tax Data

Property owners who receive payouts through Adzifi are required to submit a completed IRS W-9 form. This information is used to:

• Verify your identity before releasing funds;
• Comply with IRS tax reporting requirements (including issuance of Form 1099-MISC where applicable);
• Enable Beezifi's administrative team to process ACH bank transfers.

Bank account numbers submitted for payout purposes are encrypted at rest using AES-256-GCM encryption. Routing numbers and last-four-digit account references are stored for administrative use. Full account numbers are accessible only to authorized Beezifi personnel for the purpose of initiating payouts.

W-9 documents are stored securely and accessible only to Beezifi's finance and compliance team. They are never shared with advertisers or other property owners.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained until you delete your account, then purged within 30 days;
• Property listings and booking records — retained for 7 years to comply with financial record-keeping regulations;
• W-9 tax documents — retained for 7 years as required by IRS regulations;
• Payment and transaction records — retained for 7 years to comply with financial regulations;
• Ad creative files — retained for the duration of the booking plus 90 days, then deleted;
• Ad performance logs (QR scans, tracking clicks) — retained for 13 months, then aggregated and anonymized;
• Server logs — retained for 90 days.

We may retain anonymized or aggregated data indefinitely for analytical purposes.

8. Security

We implement industry-standard technical and organizational measures to protect your data, including:

• Passwords stored using bcrypt with a strong work factor;
• Bank account numbers encrypted at rest using AES-256-GCM;
• All data transmitted over TLS (HTTPS);
• Database access restricted by role-based access controls;
• Optional two-factor authentication (TOTP) for all accounts;
• Rate limiting and brute-force protection on authentication endpoints;
• W-9 documents stored in access-controlled file storage.

No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by applicable law, without undue delay.

9. Children's Privacy

Adzifi is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you believe a child under 13 has provided us with personal information, please contact us at privacy@beezifi.com.

10. Your Rights & Choices

Depending on your location, you may have the following rights with respect to your personal data:

For All Users

• Access — request a copy of the personal data we hold about you;
• Correction — update or correct inaccurate information through your account settings;
• Deletion — delete your account and associated personal data (subject to retention requirements for financial records);
• Portability — request an export of your data in a machine-readable format;
• Opt-out of marketing — unsubscribe from any promotional emails via the link in each email.

For Users in the European Economic Area (GDPR)

You additionally have the right to: object to processing based on legitimate interests; restrict processing while a dispute is resolved; and lodge a complaint with your local data protection authority.

For California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion of personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@beezifi.com. We will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights

You can exercise most rights directly through your account settings. For requests you cannot complete yourself, email privacy@beezifi.com. We will respond within 30 days.

11. International Transfers

Beezifi Inc. is based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where required, we rely on standard contractual clauses approved by the European Commission, or other legally recognized transfer mechanisms, to transfer data from the EEA, UK, or Switzerland to the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting a notice on the platform or sending an email to your registered address at least 7 days before the changes take effect.

The "Last updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Privacy team:

Beezifi Inc. — Privacy
Email: privacy@beezifi.com
General: support@beezifi.com

We aim to respond to all privacy-related inquiries within 30 days.