Privacy Policy
Last Updated: April 30, 2026
Our Commitment: Your Data Is Never Used to Train AI Models
Your report briefs, competitive intelligence inputs, and generated report content are never used to train any AI model — by BMarkable, third-party LLMs, or any other party. BMarkable uses LLM APIs under enterprise API terms, which explicitly prohibit using API inputs for model training. Signal data collected via the APIs is not retained for training purposes. BMarkable may use aggregated, anonymized platform usage metrics to improve platform performance — this data never includes report content, brief inputs, or information about the companies you are analyzing.
1. Overview
BMarkable is an AI-powered competitive intelligence platform operated by CXify LLC, a New York limited liability company. This Privacy Policy explains how we collect, use, store, and protect information about you when you use BMarkable at bmarkable.com.
By creating an account or using the BMarkable platform, you agree to the practices described in this Policy. If you do not agree, please do not use the platform.
Questions or requests regarding your privacy may be directed to: privacy@bmarkable.com
2. What We Collect
2.1 Information You Provide Directly
-
Name
-
Email address
-
Company name
-
Job title and role
-
Report brief inputs — the competitive intelligence question or brief you submit to generate a report
-
Feedback submitted after report delivery (ratings, qualitative comments, survey responses)
-
Invite code or promotional codes
-
Payment information — processed entirely by Stripe; BMarkable never stores card details
2.2 Information Collected Automatically
-
IP address
-
Browser type and version
-
Device information
-
Pages visited, features used, and time spent on the platform
-
Report generation events (initiated, completed, failed)
-
Error logs for platform diagnostics
2.3 Information About Analyzed Entities
BMarkable collects publicly available information about companies that are the subject of your reports. This includes publicly available website content, news articles, press releases, job postings, executive statements, review site content, and similar publicly accessible sources. This data does not include non-public, proprietary, or personally identifying information about individuals within those companies.
3. How We Use Your Information
-
To generate competitive intelligence reports in response to your submitted briefs
-
To deliver completed reports to your account
-
To maintain your account and credit balance
-
To send transactional emails (report ready, credit confirmation, invite confirmation)
-
To send optional monitoring emails — only with your explicit opt-in
-
To send optional marketing communications — only with your explicit opt-in
-
To monitor platform performance and diagnose errors
-
To detect and prevent fraud and abuse
-
To comply with applicable legal obligations
-
To improve platform features using aggregated, anonymized analytics only — report content and brief inputs are never used for this purpose
4. Third-Party Data Processors
BMarkable shares your data only with service providers that process it on our behalf. We do not sell your data to any third party. The following categories of processors may receive data as part of platform operations:
| Category | Purpose | | :---- | :---- | | AI content generation | Generating report analysis and findings from collected signals | | Signal collection | Gathering publicly available web content for analysis | | Cloud infrastructure | Database and application hosting | | Payment processing | Secure payment handling (Stripe, PCI DSS Level 1) | | Email delivery | Transactional notifications | | Pipeline orchestration | Report generation workflow management |
A current list of sub-processors, including vendor names and applicable privacy policies, is available upon written request to privacy@bmarkable.com. We will respond within 5 business days.
BMarkable uses LLM APIs to generate report content. Under enterprise API usage policies, content submitted via API is not used to train models. BMarkable uses search APIs to collect publicly available signals. Search providers do not retain query data for model training.
BMarkable may add additional processors as the platform grows. This Policy will be updated accordingly.
5. Data Infrastructure and Security
5.1 Infrastructure
BMarkable's platform is hosted on certified cloud infrastructure:
-
Our application hosting provider is SOC2 Type II and ISO 27001 certified. Servers are US-based only.
-
Our database infrastructure is SOC2 Type II certified and hosted on US-based servers.
BMarkable's compliance posture is continuously improving. Infrastructure certifications reflect provider status as of the Last Updated date above.
5.2 Encryption
-
All data transmitted between your browser and BMarkable is encrypted using TLS 1.2+.
-
Data stored by our infrastructure providers is encrypted at rest using AES-256.
-
BMarkable never stores payment card details. All payment data is handled by Stripe (PCI DSS Level 1).
5.3 Access Controls
-
User accounts are protected by email/password authentication.
-
Report data is isolated per account — users cannot access other accounts' reports.
-
BMarkable staff access to production data is restricted and logged.
5.4 Breach Notification
BMarkable will notify affected users within 72 hours of becoming aware of a material data breach affecting their personal data, consistent with applicable law.
5.5 BMarkable's Own SOC2 Status
BMarkable is an early-stage platform. We have not completed an independent SOC2 audit for BMarkable itself. Our infrastructure providers have been independently audited at SOC2 Type II level. We can provide their audit documentation under NDA upon request. BMarkable's own SOC2 audit is on our compliance roadmap as we scale.
6. Data Retention
| Data Type | Retention Period | | :---- | :---- | | Active user account data | Duration of account | | Report brief inputs | Duration of account | | Generated report content | Duration of account | | Signal data | 6 months (then archived or deleted) | | Payment records | 7 years (tax and legal requirement) | | Usage analytics (anonymized) | Indefinite | | Deleted accounts | 30 days post-deletion, then permanent deletion |
7. Your Privacy Rights
7.1 General Rights
-
Access: You may request a copy of the personal data BMarkable holds about you.
-
Correction: You may update your account information at any time from your account settings.
-
Deletion: You may request deletion of your account and personal data. BMarkable will complete deletion within 30 days, except where legal retention periods apply.
-
Data Portability: You may export your report briefs and generated reports from your account.
-
Marketing Opt-Out: All marketing and monitoring emails include an unsubscribe link. Transactional emails cannot be opted out of while your account is active.
-
Do Not Sell: BMarkable does not sell your personal data to any third party.
7.2 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (BMarkable does not sell personal information), and the right to non-discrimination for exercising your privacy rights.
To exercise your California privacy rights, contact: privacy@bmarkable.com
7.3 GDPR Acknowledgment (EU/UK Users)
BMarkable's servers are US-based. EU and UK users should be aware that their data is processed in the United States. BMarkable is not currently certified for full GDPR compliance but makes best-effort to honor GDPR data subject rights for EU users who request them. Contact privacy@bmarkable.com.
8. Cookies and Tracking
-
Essential cookies: Used for authentication and session management. Cannot be opted out of while logged in.
-
Analytics cookies: Used for platform performance monitoring and error detection. May be opted out of.
-
No advertising or remarketing cookies are used at this time.
-
Accessibility preferences (such as high-contrast mode) are stored locally in your browser and are not transmitted to BMarkable servers.
9. Children's Privacy
BMarkable is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact privacy@bmarkable.com and we will delete it promptly.
10. Changes to This Policy
BMarkable will notify registered users of material changes to this Privacy Policy via email with at least 14 days' notice before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated Policy.
Non-material changes (such as clarifications or updated processor links) may be made without advance notice. The "Last Updated" date at the top of this document reflects the most recent revision.
11. Contact Us
Privacy Contact: privacy@bmarkable.com
General Contact: info@bmarkable.com
Company: CXify LLC, operating as BMarkable
Governing Law: State of New York, United States
Website: bmarkable.com
© 2026 CXify LLC. All rights reserved. BMarkable is a product of CXify LLC | bmarkable.com