1. Overview & Who We Are

Bizman is a business management, project tracking, collaboration, time tracking, and password management platform built and operated by SR PRO Group. Bizman is a product brand of SR PRO Group and is not itself a separate legal entity.

SR PRO Group refers collectively to SR Professional Marketing Inc (a Maryland, US corporation) and SR Professional Marketing Ltd (an Israeli company), both wholly owned by Ronen Wasserman. US and UK users are served under SR Professional Marketing Inc; Israeli users are served under SR Professional Marketing Ltd. The data practices described in this policy apply equally across both entities.

This Privacy Policy explains what data Bizman collects, why it collects it, how it is used, and the rights you have over your information.

2. Information We Collect

2.1 Account & Identity Information

• Name, job title, and company name
• Business email address and phone number
• Billing and mailing address
• Payment information (processed by Stripe — see Section 10)
• Account credentials (passwords stored in hashed form only)
  
  

2.2 Usage & Technical Data

• IP address, browser type, browser version, operating system
• Pages and features accessed within Bizman, time and date of access, session duration
• Device type and unique device identifiers
• Diagnostic and error log data for service reliability
  
  

2.3 User-Generated Content

• Tasks, projects, files, and content you create or upload within Bizman
• Time tracking entries, calendar events, and collaboration messages
• Credentials stored in Bizman’s password management feature (stored encrypted; SR PRO cannot access stored credentials)
  
  

2.4 Communications

• Information you provide when contacting us by email, phone, or through the platform
• Feedback, feature requests, and support ticket content

3. AI-Powered Features & OpenAI Data Processing

Certain Bizman features use artificial intelligence powered by the OpenAI API (operated by OpenAI LLC, United States). The following Bizman capabilities are AI-powered:

• Bizman Assistant: an AI assistant that processes user prompts and relevant account data to generate responses and recommendations
• SR PRO MeetAgent: an AI-powered meeting and workflow assistant
• Bizman Support: an AI-powered support interface that shares the authenticated username with OpenAI to identify and maintain conversation context

3.1 What Data Is Sent to OpenAI

• User prompts and queries entered into Bizman Assistant or Bizman Support
• Relevant account data and context necessary to generate accurate responses (such as task descriptions, project titles, and worklog summaries — as relevant to the feature in use)
• Authenticated username (shared by Bizman Support to maintain conversation context)
• No payment data, vault credentials, or sensitive financial information is ever sent to OpenAI

3.2 How OpenAI Uses This Data

• Data sent to OpenAI via the API is used solely to generate responses for the requested Bizman feature
• SR PRO has confirmed with OpenAI that data submitted via the API is not used to train or improve OpenAI’s models
• OpenAI may retain API inputs for a limited period for abuse-monitoring and safety purposes in accordance with its API data usage policy
• SR PRO does not permit OpenAI to use Bizman user data for any purpose other than generating the requested AI response

3.3 OpenAI as Sub-Processor

OpenAI LLC is a sub-processor of SR PRO for all AI-powered features described in this section. OpenAI is listed in the sub-processor table in Section 10. SR PRO has entered into appropriate data processing terms with OpenAI governing all API-based processing.

3.4 User Control Over AI Features

AI is intrinsic to how Bizman Assistant, SR PRO MeetAgent, and Bizman Support work. Because these features cannot function without AI, there is no in-product toggle to disable AI processing while continuing to use them. However, users retain meaningful control over when and how their data is processed by AI:

• Feature-level opt-out: Users can choose not to use the AI-powered features. Bizman's core functionality (project tracking, time tracking, password vault, collaboration) operates independently of the AI features and remains fully available.
• Administrator restrictions: Account administrators can use Bizman's roles and permissions system to restrict user access to AI-enabled features across their organization.
• On-demand processing only: OpenAI processes data only when a user actively invokes an AI feature (submitting a prompt, requesting assistance). AI does not passively monitor, scan, or process user data in the background.

Users who wish to close their Bizman account entirely rather than continue using it without AI features may do so per Section 7.1 (Account Deletion).

4. How We Use Your Information

• Service delivery — to provide, operate, and maintain Bizman and its features
• Account management — to authenticate users and manage your Bizman account
• Billing & administration — to process subscription payments, issue invoices, and manage renewals
• Communication — to send transactional emails, security alerts, and service updates
• Marketing — to send information about new Bizman features or SR PRO services where you have consented or where we have a legitimate interest (you may opt out at any time)
• Improvement — to analyse usage patterns and improve the platform
• Legal compliance — to comply with applicable laws and protect our legal rights
• Security — to detect, prevent, and respond to fraud, abuse, or security incidents

5. Legal Basis for Processing

We process personal data on the following legal bases:

• Contract — processing necessary to provide the Bizman service you have subscribed to
• Legitimate interests — processing necessary for our legitimate business interests, such as improving the platform, maintaining security, and business development, where these do not override your rights
• Legal obligation — processing required to comply with applicable law
• Consent — where you have given explicit consent, such as for marketing communications

6. Data Sharing & Disclosure

SR PRO Group does not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service providers & sub-processors — trusted third parties who help us operate Bizman (see Section 10 for the full list). All sub-processors are contractually bound to handle data securely and only for the purposes we specify.
• Business transfers — in connection with a merger, acquisition, or sale of assets. We will notify you before your data becomes subject to a different privacy policy.
• Legal requirements — where required by law, court order, or to protect the rights, property, or safety of SR PRO, our users, or the public.
• With your consent — for any other purpose, with your explicit consent.

7. Data Retention

• Account & subscription records — retained for the duration of your subscription and for 7 years thereafter, in accordance with financial and legal record-keeping obligations
• • User-generated content — retained while the customer organisation’s Bizman workspace remains active, unless an authorised user deletes the content earlier. Removing or deleting an individual user account does not automatically delete shared business records created by, assigned to, or associated with that user where those records belong to the customer organisation or are needed to maintain billing, reporting, security, audit, legal, or operational integrity. In those cases, Bizman may retain the record while deleting, restricting, or de-identifying the former user’s personal information, subject to applicable law and the customer organisation’s instructions.
  • Usage & diagnostic logs — retained for 72 hours, then automatically deleted
  • Activity logs — logs covering bank of hours, worklogs, and client activity are retained for 2 months
  • Generated export files — retained for 7 days from the date of generation, then automatically deleted

7.1 Account Deletion

To request deletion of an individual user account or an entire customer workspace, contact privacy@srpro.marketing. Individual user deletion requests are evaluated separately from workspace closure.

When an individual user is removed, Bizman will deactivate access and delete or de-identify personal information that is no longer required, while preserving shared organisational records and necessary historical associations. This protects the integrity of billing records, reporting, audit trails, and other data that belongs to the customer organisation rather than the individual user.

When the customer organisation closes its entire workspace, eligible user-generated content will be deleted from active systems within 30 days, unless a longer period is required or permitted for legal, contractual, security, dispute-resolution, or legitimate record-keeping purposes. Residual copies in backups will be isolated from ordinary use and deleted or overwritten according to our documented backup-retention cycle. Certain account, billing, transaction, security, consent, and deletion records may be retained for the period required by applicable law or a documented legal basis.

SR PRO will confirm receipt of any deletion request within 5 business days and keep you informed of progress. Bizman does not currently provide a self-service account deletion mechanism within the platform; this functionality will be implemented in a future release.

Upon expiration of the applicable retention period, data is securely deleted or anonymised using approved methods including AES-256 cryptographic erasure, secure overwrite (NIST SP 800-88), or provider-certified cloud deletion. Deletion events are logged internally. If you wish to confirm deletion of your personal data, contact privacy@srpro.marketing.

8. Security

Bizman’s security controls are designed and operated in alignment with the SOC 2 Trust Services Criteria (Security category). We take reasonable and appropriate technical and administrative measures to protect your information, including:

• Encryption of all data at rest using AES-256
• Encrypted data in transit using TLS 1.2 (minimum) and TLS 1.3 (preferred)
• Role-based access controls and principle of least privilege
• Regular security reviews and vulnerability assessments
• Audit logging of access and system events
• Incident response procedures to address unauthorized access or data breaches
• 24-hour cyber incident response coverage through CFC Underwriting (Lloyd’s of London syndicate)

8.1 Password Vault Security

Bizman’s password management feature is built on a zero-knowledge architecture. This means:

• All credentials stored in your vault are encrypted using AES-256-CBC before leaving your device
• SR PRO staff have no technical ability to view, read, or access stored vault credentials at any time
• Vault encryption keys are derived from your master account credentials and are never transmitted to or stored on SR PRO servers
• In the event of a security incident on SR PRO’s infrastructure, vault contents remain unreadable without the user’s own credentials
• Vault data is subject to the same SOC 2-aligned security controls as all other sensitive data on the platform

No system is completely secure. If you believe your data or vault credentials may have been compromised, contact us immediately at privacy@srpro.marketing.

9. Cookies & Tracking Technologies

Bizman uses cookies and similar technologies to operate and improve the platform.

• Essential / Session cookies — required for authentication and core platform functionality. Cannot be disabled without impairing the service.
• Functionality / Persistent cookies — remember your preferences, settings, and login details between sessions.
• Analytics cookies — help us understand how the platform is used so we can improve it. These are anonymised where possible.
• Cookie acceptance cookies — record whether you have acknowledged our cookie notice.

You may control cookies through your browser settings. Disabling essential cookies may prevent parts of Bizman from functioning correctly. We do not use cookies to serve interest-based advertising.

10. Sub-Processors

Bizman uses the following sub-processors to operate the service. All are contractually bound to handle data in compliance with applicable privacy laws and our data protection obligations.

This sub-processor list is reviewed annually. If we add or replace a sub-processor that materially affects how your data is handled, we will notify you in advance.

11. International Data Transfers

Bizman’s servers are hosted by DigitalOcean in Amsterdam, the Netherlands (European Union), and are operated by SR Professional Marketing Inc, a US company headquartered in Rockville, Maryland.

• EU / EEA users: your data is stored within the EU. Access to that data by SR PRO staff in the United States constitutes a transfer from the EU to the US. We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers.
• UK users: transfers from the United Kingdom to the United States are covered by the UK-US Data Bridge framework and/or the UK International Data Transfer Agreement (UK IDTA).
• US users: your data is processed by a US company and stored on EU servers. No additional transfer mechanism is required for US-to-EU data flows.
• Israeli users: served under SR Professional Marketing Ltd (Israeli entity). Israel has been recognised by the EU as providing adequate data protection; no additional transfer mechanism is required for Israel-EU data flows.

12. Your Privacy Rights

Depending on your location, you have the following rights regarding your personal data. To exercise any right, contact us at privacy@srpro.marketing. We will respond within 30 days.

All users

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention requirements and the multi-tenant considerations described in Section 7)
  
• Withdrawal of consent — withdraw consent at any time for consent-based processing
  
  

EU / EEA & UK users (GDPR / UK GDPR)

• Portability — request a machine-readable copy of your data
• Objection / Restriction — object to or restrict certain processing activities
• Complaint — lodge a complaint with your supervisory authority (UK: ICO at ico.org.uk; EU: your national DPA)
  

US residents (including California — CCPA)

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (SR PRO does not sell personal data)
• Non-discrimination for exercising your privacy rights

Israeli residents

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information where processing is no longer necessary

13. Children’s Privacy

Bizman is a business management platform directed at professional users. It is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a minor has provided us with personal information, contact us at privacy@srpro.marketing.

14.  Privacy Contact 

SR PRO Group has designated a Privacy Contact responsible for data protection enquiries and oversight of this Privacy Policy and applicable privacy laws. SR PRO Group is not legally required to appoint a formal Data Protection Officer under GDPR Article 37; however, we are committed to handling all privacy matters with the same diligence and responsiveness. If you have any questions about how your personal data is handled, or wish to exercise any privacy right listed in Section 12, please contact:

Privacy Contact: privacy@srpro.marketing

We will acknowledge your request within 5 business days and respond in full within 30 days.

15. Governing Law

This Privacy Policy is governed by the laws of the State of Maryland, United States, without regard to its conflict-of-laws principles. Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Montgomery County, Maryland.

For UK residents, nothing in this clause limits your right to bring a complaint before the UK Information Commissioner’s Office (ICO). For Israeli residents, nothing in this clause limits your rights under the Israeli Privacy Protection Law 5741-1981.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Revised” date at the top of this page. If changes materially affect how we use your personal data, we will notify you by email at least 14 days before the changes take effect.

Continued use of Bizman after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

SR PRO Group

6903 Tilden Lane, Rockville, MD 20852, United States

Privacy & data requests: privacy@srpro.marketing

Product support: support@bizman.com

Phone: +1 917 775 6516

Website: https://bizman.com