Skip to main content

Privacy Policy

Last updated: November 10, 2026

At BEPWISE, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our break-even analysis application. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

Gramm-Leach-Bliley Act (GLBA) Notice

Important Notice: BEPWISE is a business analytics tool that processes financial and business data for break-even analysis purposes. While we handle business financial information, we primarily serve businesses and entrepreneurs analyzing their own financial scenarios.

We are committed to complying with applicable financial privacy laws, including the Gramm-Leach-Bliley Act (GLBA) where applicable. This section provides additional disclosures required under GLBA for the collection, use, and sharing of nonpublic personal information.

1. Personal Data We Collect

Account Information:

  • Full name
  • Email address
  • Account creation date
  • User role (admin or user)

Business Analysis Data (Nonpublic Personal Information under GLBA):

  • Break-even scenario data (product names, pricing, costs, sales mix)
  • Financial projections and business metrics
  • Competitor product information (when provided)
  • Saved analysis scenarios and templates
  • Usage timestamps and access logs

Technical Data:

  • IP address
  • Browser type and version
  • Device information
  • Cookie data (with your consent)
2. Information Sharing Practices (GLBA Disclosure)

Categories of Information We Collect:

  • Information you provide (name, email, business data)
  • Information from your use of our services (transaction history, usage patterns)
  • Information from other sources (authentication providers)

Categories of Information We Share:

We share your information with the following categories of third parties:

  • Service Providers: Companies that provide services on our behalf, including:
    • • Base44 Platform (data hosting and infrastructure)
    • • AI Service Providers (OpenAI or similar, for generating business insights)
    • • Email Service Providers (for transactional emails and reports)
    • • Authentication Services (for secure account access)
  • Legal and Regulatory Authorities: When required by law or to protect our rights

We Do NOT:

  • Sell your nonpublic personal information to third parties
  • Share your information with non-affiliated third parties for their marketing purposes
  • Disclose your financial data to marketers or advertisers
3. Your Right to Opt Out (GLBA)

Opt-Out Notice: Under the Gramm-Leach-Bliley Act, you have the right to opt out of certain information sharing practices.

What You Can Opt Out Of:

Currently, we do not share your nonpublic personal information with non-affiliated third parties in ways that trigger opt-out rights under GLBA. All our service providers are bound by contractual obligations to protect your information and use it only to provide services to us.

However, you always have the right to:

  • Request that we limit AI-powered insights processing of your financial data: You can disable this feature via your Account Settings (see instructions below) or by emailing us.
  • Opt out of non-essential analytics and cookies
  • Delete your account and all associated data

How to Exercise Your Opt-Out Rights:

  • Via Account Settings (Recommended):
    1. Visit your Account page
    2. Scroll to the "GLBA Privacy Preferences" section
    3. Use the toggle switch next to "AI-Powered Insights Processing" to turn it OFF
    4. Your preference will be saved automatically and applied immediately
  • Via Email: Contact us at contact@devtechnologies.ai with "GLBA Opt-Out Request" in the subject line, specifying which service you'd like to opt out of
  • Response Time: Account Settings changes are immediate; email requests will be processed within 30 days

Note: Even if you opt out, we may still share your information as permitted by law, such as with service providers that perform services on our behalf, to protect against fraud, or as required by law.

4. Legal Basis for Processing

We process your personal data based on:

  • Contractual Necessity: To provide you with the break-even analysis services you've signed up for.
  • Consent: For optional features like marketing communications, analytics, and non-essential cookies.
  • Legitimate Interest: To improve our services, detect fraud, and ensure platform security (balanced against your privacy rights under GLBA and GDPR).
  • Legal Obligation: To comply with applicable laws and regulations, including GLBA and GDPR.
5. How We Use Your Data
  • •To provide and maintain our break-even analysis services
  • •To process your calculations and generate AI-powered insights
  • •To save and manage your analysis scenarios
  • •To send you service-related communications (e.g., account updates, security alerts)
  • •To improve and optimize our application based on usage patterns
  • •To respond to your support requests and inquiries
  • •To detect and prevent fraud, security incidents, and abuse
  • •To comply with legal obligations under GLBA, GDPR, and other applicable laws
6. Service Provider Safeguards

In compliance with GLBA requirements, all service providers with whom we share your nonpublic personal information are contractually obligated to:

  • Maintain appropriate security measures to protect your information
  • Use your information only for the specific purposes for which we engage them
  • Not disclose your information to unauthorized parties
  • Comply with applicable privacy and security laws
  • Return or destroy your information when services are completed (where appropriate)

Legal Disclosures: We may disclose your information if required by law, court order, government regulation, or to protect our rights, property, or safety, or that of others.

7. Your Privacy Rights (GDPR & GLBA)

You have comprehensive privacy rights under both GDPR and GLBA:

Right to Access

Request a copy of all personal data we hold about you.

Right to Opt Out (GLBA)

Opt out of certain information sharing practices (see Section 3 above).

Right to Rectification

Correct inaccurate or incomplete personal data.

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data from our systems.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Restriction of Processing

Limit how we use your data under certain circumstances.

Right to Object

Object to processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

How to Exercise Your Rights:

Visit your Account page to manage your data, request exports, or delete your account. For additional assistance, contact us at contact@devtechnologies.ai.

8. Data Security (GLBA Safeguards Rule)

In compliance with the GLBA Safeguards Rule, we maintain a comprehensive written Information Security Program designed to:

  • Ensure the security and confidentiality of customer information
  • Protect against anticipated threats or hazards to the security or integrity of such information
  • Protect against unauthorized access to or use of such information

Our Security Measures Include:

  • Encryption: Data in transit (TLS/SSL) and at rest (AES-256)
  • Access Controls: Role-based access control and multi-factor authentication
  • Regular Security Audits: Periodic vulnerability assessments and penetration testing
  • Employee Training: Security awareness and privacy training for all personnel
  • Incident Response: Documented procedures for detecting, responding to, and recovering from security incidents
  • Physical Security: Secure data center facilities with restricted access
  • Vendor Management: Due diligence and contractual safeguards for all service providers

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We continuously monitor and update our security practices to address evolving threats.

For more details about our Information Security Program, please see our Information Security Program documentation.

9. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account or request data deletion, we will permanently remove your data from our active systems within 30 days, except where we are legally required to retain certain information (e.g., for tax, legal, or regulatory purposes).

10. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can manage your cookie preferences through our cookie consent banner.

Types of Cookies We Use:

  • Essential Cookies: Necessary for the application to function properly (e.g., authentication, session management).
  • Analytics Cookies: Help us understand how users interact with our application (requires consent).
  • Preference Cookies: Remember your settings and preferences.
11. Contact Information & Privacy Officer

If you have any questions about this Privacy Policy, wish to exercise your privacy rights under GDPR or GLBA, or need to submit an opt-out request, please contact us:

Privacy Officer / Data Protection Officer: DEV Technologies LLC Privacy Team

Email: contact@devtechnologies.ai

Subject Line for GLBA Requests: "GLBA Opt-Out Request" or "GLBA Privacy Inquiry"

Address: [Your Business Address]

Response Time: We will respond to privacy requests within 30 days

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements (including GLBA or GDPR updates), or for other operational reasons. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and (for significant changes) by sending an email notification to your registered email address. We encourage you to review this Privacy Policy periodically.

Enterprise-Grade Compliance & Security

Your financial data is protected by comprehensive regulatory compliance programs

GDPR Compliant

Full compliance with the General Data Protection Regulation

  • Data Protection by Design
  • Self-Service Data Rights Dashboard
  • 72-Hour Breach Notification
  • Data Processing Agreements
  • Automated Data Retention Controls
CCPA Compliant

Full compliance with the California Consumer Privacy Act

  • Right to Know & Access Data
  • Right to Delete Personal Information
  • No Sale of Personal Information
  • Non-Discrimination Protection
  • Privacy Policy Transparency

Note: GLBA (Gramm-Leach-Bliley Act) compliance applies to financial institutions. BEPWISE is a business planning tool and is not subject to GLBA requirements.