Privacy and data use

Business Request helps businesses collect inquiries, prepare responses, and track follow-ups. It does not process payments or confirm bookings.

Customer requests

The business receiving your form gets the contact information and answers you submit. Do not include passwords, payment-card details, or sensitive documents. Contact that business to request a correction or deletion.

Business accounts

Account sign-in uses Firebase Authentication with email/password, Google, or Sign in with Apple on iOS. Firebase handles account credentials, verification, and password reset. Businesses, forms, requests, response drafts, saved payment instructions, and manually recorded payments are stored on the hosted service. Owners can export their data, restore requests from Recently deleted, or permanently delete their workspace and sign-in account in settings.

AI and voice

Creating or revising a form sends the business description, form draft, and revision instructions to OpenAI. Review generated questions before sharing. Voice dictation may use your device’s or browser’s speech service; Business Request does not store audio. Response messages are assembled from the facts you enter, not sent automatically.

Notifications

Device alerts require permission. Follow-up reminders scheduled on a device may contain a request identifier and a generic reminder. When push delivery is configured, device tokens are stored to route alerts to the correct owner. Calendar exports are copies managed by your calendar app.

Sharing and retention

A published form link may be shared with anyone. A customer link does not give access to the owner’s inbox or other submissions. Moving a request to Recently deleted hides it from the inbox but retains it for recovery until permanently deleted. Deleted workspace data is removed from the active application database; hosting-provider backup retention is controlled by the provider. A minimal account identifier and deletion timestamp are retained to prevent stale requests from recreating deleted data. Store and subscription providers may retain transaction records under their own retention requirements.

Pro subscriptions

Apple or Google handles subscription payments. RevenueCat receives your app account identifier and purchase information to verify access, renewals, and restores. Business Request stores AI usage counts to apply your plan allowance. We do not receive your store password or payment-card number. RevenueCat does not receive your customer request answers for subscription verification.

Payments and external messages

Payment records are entered by the owner and are not independently verified. Copying a response or opening an email app does not send a message. If you send a message or import a calendar reminder, that information is also handled by the service you choose.

For privacy and account-deletion requests, contact support.