Privacy

What BHS keeps

• Your account: your name and email address. Your password goes to our sign-in provider, Supabase; BHS doesn’t store it.
• Your business and answers: your business name, your assessment answers, and your diagnostic answers, including any figures you choose to give (such as monthly sales or marketing spend). “I don’t know” is a perfectly good answer.
• Your review: the time you book, your time zone (read from your browser), the format, and any moves.
• Your report and plan: each published version of your Business Health Report and, if you continue, your 90-day Blueprint, with the progress updates, notes and links you add.
• Notes BHS keeps about working with you: the Founder can keep private notes and a record of contacts with you (for example, a call or an email). These aren’t shown to you.
• Proposals: if BHS prepares a proposal for you, it records your business name, your name, your email address and, if you give one, a phone number.

Who can see it

• You. You see your own business’s records. Other customers never see anything of yours.
• The BHS Founder, who runs Business Health Reviews and prepares reports, can see everything listed above, including diagnostic answers you haven’t sent yet.
• BHS consultants (team members given internal access) see a summary only: business and customer names, your email address, where you are in the process, your preliminary overall score and how certain it is, how far the diagnostic has got, your review’s time and format, whether your report is published, and your plan’s phase. They don’t see your answers, your report, meeting details or the Founder’s notes.
• Nobody at BHS can see your password.

Services that handle it for BHS

• Supabase stores the platform’s information and runs sign-in. It sends the emails that confirm your address and reset your password.
• Vercel hosts the website.
• Resend sends BHS’s emails about your review, report and plan, once BHS switches them on. It receives your email address and the email itself. These emails never include meeting links, phone details, private notes or your diagnostic answers.
• OpenAI is used only if BHS uses its optional drafting assistant for a Blueprint. It then receives your assessment answers, your report’s findings and the Founder’s own notes for the plan; never your name, email address, business name or diagnostic answers.
• Your review call uses the video link or phone details BHS gives you. If it’s a video link, that video service handles the call.

On your device

• Sign-in cookies from Supabase keep you signed in. BHS uses no advertising or analytics cookies, and has no analytics or tracking tools on this site.
• Before you have an account, you can take the assessment without signing in. Your answers are then kept only in this browser and aren’t sent to BHS. They’re saved to your account when you create one or sign in to save them. If you choose to save them, the browser also keeps a note of that request, which is acted on for up to a week, with a one-way fingerprint of the email address you use (not the address itself), so the answers are saved to the right account.
• Browser storage holds your Dark or Light choice and a backup copy of your assessment and diagnostic answers, so nothing is lost if the connection drops. After you create an account, it also briefly holds where to take you once you confirm your email.
• On a shared computer, note that answers you haven’t saved to an account, and the backup copy, stay in the browser after you leave or sign out. “Start over” on the assessment removes unsaved answers; to remove everything, clear this site’s data in your browser’s settings.

Before you’re a customer

BHS may prepare a short Quick Business Analysis of a business from public information, such as its website, and anything the owner has told BHS. Website pages are read one at a time, at the Founder’s request; listings and reviews are pasted in, not collected automatically. The analysis, and any contact name or email address noted with it, is seen only by the Founder. If BHS uses the optional suggestion assistant, the business’s name and that evidence are sent to OpenAI, never contact details.

Keeping and changing your information

There isn’t a self-service way yet to download or delete your information, and BHS hasn’t set a retention period. Some records are kept unchanged on purpose, such as each published version of a report or plan, so there is one reliable history. To ask about your information, contact BHS through the person running your review.