Last updated September 2026
This Privacy Policy explains how Bezelia ("Bezelia", "we", "us") collects, uses, and protects personal data when a business ("you", "your team", "Customer") uses our software (the "Service"), and when your own customers or contacts ("End Users") interact with the parts of the Service you use to manage them.
We are the data controller for account and billing information we collect directly from you. For the records, contacts, and other content your team enters into the Service ("Customer Data") — which may include personal data about your End Users — you are the data controller and we act as your data processor: you decide what is collected and why; we process it on your instructions to run the Service.
Account data. Name, email address, password hash, and team membership, collected when you sign up or are invited to a team.
Customer Data. Whatever your team enters, uploads, or captures to use the Service — which may include records, files, and details about your End Users, depending on which features you use.
Usage data. Pages viewed, features used, and general interaction events inside the authenticated app, collected through analytics so we can understand how the Service is used and where it breaks.
Technical data. IP address, browser type, and device information, collected automatically for security, fraud prevention, and diagnosing errors.
We do not knowingly collect data from anyone under 18, and the Service is not directed at children.
Some features are powered by third-party AI providers — for example, to summarise, transcribe, classify, or otherwise process content you submit. Where a feature uses AI:
This section applies to any current or future feature that uses AI to process Customer Data, whatever the Service does at the time.
Where we act as controller (account and billing data, usage analytics, security logs), we rely on:
Where we act as processor for your Customer Data, the legal basis for collecting and processing that data is yours to establish with your own End Users — see "Your responsibilities as controller of Customer Data" below.
Because you control what goes into the Service, you're responsible for:
We process Customer Data strictly on your instructions, as given through your use of the Service's features, and for no other purpose.
We share data with the sub-processors needed to run the Service, each engaged under a written agreement that requires them to protect it to a standard consistent with this policy:
| Category | Purpose |
|---|---|
| Cloud hosting and database providers | Storing application data and files |
| AI providers | Powering AI-assisted features you choose to use |
| Analytics providers | Understanding product usage |
| Email delivery providers | Sending account and transactional email |
| Payment providers | Processing subscription payments, where applicable |
We do not sell personal data, and we do not share Customer Data with third parties for their own marketing purposes.
We may also disclose data where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of Bezelia, our users, or others.
Some of our sub-processors, including AI providers, are located outside the UK and EEA. Where we transfer personal data internationally, we rely on the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or another lawful transfer mechanism, and only transfer to providers with appropriate safeguards in place.
We keep account and Customer Data for as long as your account is active, so your records remain usable. If you close your account, we delete or anonymise your data within a reasonable period afterward, except where we must keep it longer for legal, security, or accounting reasons.
You can ask us to delete specific data at any time; we'll action it unless we're required to retain it.
Inside the app, once your team has signed up and agreed to our Terms of Service, we treat that agreement as your consent to the analytics described above — there is no separate cookie banner inside the authenticated app.
On our public website, before you have an account, we ask for your consent to analytics cookies separately, and nothing is tracked until you accept. You can withdraw that consent at any time by clearing the consent cookie or contacting us.
We use industry-standard technical and organisational measures — encryption in transit, access controls, and least-privilege access to production data — to protect the data we hold. No system is completely secure, and we can't guarantee absolute security, but we work to reduce risk and to detect and respond to incidents quickly.
If you're in the UK or EEA, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights over your own account data, contact us using the details below. If you're an End User and want to exercise these rights over data one of our Customers has entered about you, please contact that Customer directly — they control that data; we only process it on their instructions.
You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office.
We may update this policy as the Service or the law changes. If we make a material change, we'll let you know by email or an in-app notice before it takes effect. The date at the top of this page always reflects the current version.
Questions about this policy or how we handle your data: email hello@ferrolo.com.