1. Who controls the information
BizzLotz is operated by Daniel Quintanilla in Texas, United States. Privacy questions and requests may be sent to dannyinhouston@yahoo.com.
2. Information we process
- Account information: email address, account identifier, authentication and session records. New email/password signup does not collect a postal code or account time zone and does not request your location. Older accounts may retain a previously provided ZIP code and a time zone derived for city lighting; these account details are not displayed publicly. Removing these fields from signup does not delete previously stored account information.
- Placement information: business name, description, logo, color, website, design choices, ownership email, and placement identifier.
- Transaction records: Stripe checkout and payment references, amount, status, refund status, and records needed to deliver and reconcile a purchase. BizzLotz does not receive or store full card numbers entered on Stripe-hosted checkout.
- Engagement information: daily city visits, placement views, outbound website clicks, views and clicks on the founding claim button, and starts of Stripe Checkout. A first-party signed cookie with a 30-day lifetime deduplicates daily city visits per browser on Central Time calendar days, and the other engagement events per UTC day. The claim button events may include a campaign source and an X ad click identifier (twclid) from the page URL.
- Technical information: request, error, device, and network information that hosting, authentication, security, and payment providers may process in their logs.
- Optional weather information: if you choose browser location, coordinates are rounded to two decimal places before a request is made. City search uses a bundled list. Weather choices are not stored in your account.
3. Public information
Business names, descriptions, logos, colors, website links, buildings, and public counters are intended for public display and sharing. Do not submit private personal information in public advertising fields.
Community lounge
Lounge posts, replies, display names, and timestamps are public. Posting requires an account. We store the account identifier associated with each post and report; these identifiers and report details are not included in the public feed. Do not post private information. Members can remove their own posts from public display. Removal hides the post; retained database records may remain for abuse handling and support. Contact us to request review or deletion of retained information.
The online count uses recent signed-in lounge activity held temporarily in server memory. It expires after inactivity and is not a count of all website visitors. Reports contain the reporting account, post identifier, selected reason, and time and are used to review abuse.
4. Why we use information
We use information to authenticate users; create, display, edit, and support placements; process and reconcile payments and refunds; count engagement; provide optional weather effects; prevent fraud and abuse; diagnose errors; comply with legal obligations; and improve the service.
5. Service providers and sharing
We share information as needed with service providers that operate BizzLotz, including Supabase for accounts and application data, Stripe for checkout and payments, Render for hosting, and authentication providers you choose. The legacy U.S. ZIP lookup service uses Zippopotam.us and may send derived approximate coordinates to the U.S. National Weather Service to determine a time zone. New email/password signup does not call this lookup service. Optional weather coordinates may also be sent to the U.S. National Weather Service. Advertiser links lead to independent third-party websites.
We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate fraud, or complete a business transfer. We do not sell personal information for money.
6. Cookies and engagement counts
When you arrive using a campaign-tagged link, we keep its source, medium, and campaign labels in this tab’s session storage. We also keep a valid X ad click identifier (twclid) in this tab when present. If you start a plot checkout, those labels and click ID are stored with the private reservation and passed to Stripe as payment metadata to help us understand which promotions lead to purchases. We do not collect the full referring URL for this purpose. Campaign labels should never contain personal information.
A first-party signed visitor cookie supports engagement counting. We record one private city session event per browser per Central Time day when the city loads; it is an approximate daily browser count, not a person or an online count. Placement views and website clicks are deduplicated separately per browser per UTC day. Their receipts contain a server-generated daily hash, placement identifier, event type, and timestamp. Claim button and checkout-start records contain a daily hash, event type, campaign source, and X click identifier when present; checkout-start records also include the plot number. A checkout start means the site returned a Stripe Checkout URL, not that a payment was made. A verified purchase creates a private record of the plot, amount in cents, checkout reservation and Stripe session IDs, and campaign source and click ID when present. These application records do not contain an IP address or browser fingerprint and are private. Cleanup removes session, view, click, and checkout-start receipts older than 30 days when a new event is counted; verified purchase records follow the payment retention period in section 7. Aggregate placement counters may remain and are not necessarily unique people or proof of a purchase.
7. Retention
We keep account, placement, payment, refund, security, and support records only as long as reasonably needed to operate the service, resolve disputes, prevent fraud, and satisfy accounting, tax, and legal duties. Provider logs follow provider retention practices. Public placement content remains visible while the placement is active unless it is removed or the service closes.
8. Your choices and requests
You may request access, correction, or deletion of information by emailing us from the address associated with your account. We may verify control of the account before acting. We can remove public content and delete information that is no longer neded, but may retain limited transaction, fraud-prevention, dispute, or legal records where required. “Forget location” clears the current weather choice from the page but cannot delete records already held in provider or infrastructure logs.
9. Security
We use reasonable technical and organizational safeguards, but no online service can promise absolute security. Report suspected unauthorized activity promptly.
10. Children
BizzLotz is a business advertising service and is not directed to children under 13. Contact us if you believe a child submitted personal information.
11. International use and changes
Information may be processed in the United States and other locations used by our providers. We may update this notice prospectively; the effective date above identifies the current version.
Privacy contact: dannyinhouston@yahoo.com