Privacy Policy
Draft — pending legal review. Last updated 2026.
SB ("we", "us") builds software for small service businesses. This policy explains what data we collect, why, and how we protect it. It applies to www.sbassistant.com and the SB products you sign into with your SB account.
What we collect
Account details you provide (name, work email, company); the business data you enter into SB products (time entries, projects, clients, invoices, tasks, comments, and links to your external documents); and basic technical data needed to run the service securely (sign-in events, IP address, device/browser).
How we use it
To provide and secure the service, process billing, send service-related messages, and improve the product. We do not sell your data, and we do not use your business data to train third-party models.
Where it lives
Your data is hosted on Microsoft Azure in US regions. Each tenant is isolated at the database level, with continuous backups and point-in-time restore. Authentication is handled by our identity provider; payment data is handled by our payments processor (Stripe) and never stored on our servers. If you're in the EU, UK, or Switzerland, your data is transferred to the US under the EU‑US Data Privacy Framework (with its UK and Swiss extensions) and Standard Contractual Clauses.
Your rights & choices
You can access, export (in a machine-readable format), correct, or delete your personal data — from within the product or by emailing us. When an account closes, your business data is kept for up to 90 days and then permanently deleted, except records we're legally required to retain (such as invoices for tax), which we anonymize so they no longer identify you. EU/UK residents may also lodge a complaint with their supervisory authority. California residents have rights under the CCPA/CPRA — to know, access, correct, and delete personal information, and to non-discrimination for exercising them; we do not sell or share your personal information.
Contact
Questions about privacy? Email security@sbassistant.com.
This is placeholder text and is not the final, counsel-reviewed policy.