Privacy policy

1. Who we are

Business Globalizer Bank is a service operated by Business Globalizer (“we”, “us”). This policy covers this website and the Business Globalizer Bank app, including when it is installed on a phone or computer. We do not sell personal information.

2. What we collect

Information you give us

Your account: your name, email address and password (stored only as a one-way hash). If you add them, your passkeys’ public keys and an encrypted two-factor secret.
Your business: its legal name, contact email and the state where it operates, given during onboarding. The business contact email is stored encrypted.
Your team: the email addresses of people you invite and the role each member has.
Payees: the account owner’s name (stored encrypted), bank name, routing number, account type and the last four digits of the account number. The full account number is passed to Bridge once and is not stored by us.
Payouts: amounts, references, payment rails, who requested and approved each payout, and its status.
Messages: what you send us through the contact form or by email.

Information collected automatically

Security records: an audit log of actions such as payouts, approvals, payee changes and account number reveals, with the member who took them, the time and the IP address.
Technical data: IP address, browser and device information in our server logs, used to run and secure the service.
Notification subscriptions: if you turn on push notifications, the address your browser’s push service gives us for that device and a description of the device, such as “Chrome on Android”.

Information from Bridge

Business verification takes place on Bridge’s own pages, so documents and details about the business’s owners are collected by Bridge under its privacy policy. We receive the verification status, account details needed to show you your accounts, balances, deposits and the status of each transfer.

3. How we use it

to provide the service: sign-in, onboarding, accounts, payees, payouts and approvals;
to keep accounts and payments secure, and to detect and prevent fraud and misuse;
to send emails and, if you turn them on, push notifications about your account;
to answer your messages and give support;
to meet legal obligations and enforce our terms of service.

Bridge, which provides the USD account details, wallets and transfers. Business details, payee details and payout instructions are sent to Bridge so it can verify the business and move money. Bridge handles that information under its own privacy policy.
Service providers that run parts of the service for us, such as hosting, network security and delivery, email delivery and support tools. They may use the information only to provide those services.
Push services run by your browser’s maker (such as Google, Apple, Mozilla or Microsoft), which deliver notifications to your device. Each notification is encrypted so only your device can read it.
Authorities, where the law requires it or to protect the rights, property or safety of our customers, the public or us.
A buyer or successor, if all or part of our business is reorganized or sold, under the same protections.

5. Cookies

We use a small number of cookies that the service needs: a session cookie that keeps you signed in (encrypted, and sent only over HTTPS), a security token that protects forms, and cookies that remember your light or dark appearance and whether the sidebar is open. We do not use advertising cookies.

6. Push notifications

Push notifications are off until you turn them on for a device in Settings → Notifications and allow them in your browser. They tell you about payouts, deposits and verification, and never include account numbers. You can turn them off in the same place, or in your device’s settings. We delete a device’s subscription when you turn it off or when its push service tells us it is no longer valid.

7. How long we keep it

We keep personal information for as long as your account is open and then as long as we need it for the purposes above, including keeping financial and security records for the periods the law requires. Contact form messages are kept for as long as needed to answer them and any follow-up.

8. How we protect it

We use encryption in transit and for sensitive fields at rest, strong sign-in for anyone who can move money and an audit log. Our security page describes these measures. No system is perfectly secure, so please tell us at once if you think your account has been misused.

9. Your choices and rights

You can update your name and email address in Settings → Profile.
You can delete your own user account in Settings → Profile. Records the business or the law needs, such as payouts and audit records, are kept.
You can ask us for a copy of your personal information, or to correct or delete it, by writing to [email protected]. Depending on where you live, you may have further rights under state privacy laws; we will respond as those laws require.

10. Children

The service is for businesses and is not directed at anyone under 18. We do not knowingly collect information about children.

11. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we will tell account owners about significant changes before they take effect.

12. Contact

Questions or requests about privacy: [email protected], or use our contact form.