Privacy Policy

Last updated: 8 May 2026

Infinity Intelligence Tech Limited (hereinafter "the Company" or "we") operates the BizMind platform (hereinafter "the Service") and is committed to protecting users' personal data privacy. This Privacy Policy explains how we collect, use, store and protect your personal data, and outlines your rights under the Personal Data (Privacy) Ordinance (Cap. 486) (hereinafter "PDPO").

1. Data Collection

We may collect the following categories of personal data:

• Account Information: Name, email address, phone number, company name
• Usage Data: Login records, feature usage, browser type and IP address
• Payment Information: Credit card details (securely processed by third-party payment processors; we do not store them directly)
• Knowledge Base Content: Documents, Q&A records and configurations you upload to the platform

2. Purpose of Data Use

Personal data we collect is used solely for the following purposes:

• Providing, maintaining and improving the BizMind service
• Processing your account registration and identity verification
• Processing subscription fees and payments
• Sending you service notifications and product updates (you may unsubscribe at any time)
• Responding to your inquiries and providing customer support
• Analyzing usage patterns to improve product experience (using anonymized aggregate data only)
• Complying with legal obligations and regulatory requirements

3. Data Storage and Security

• Data Residency in HK: All customer data is stored exclusively in the AWS Hong Kong Region (ap-east-1) and will never be transferred outside Hong Kong
• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Control: Strict RBAC role-based access control with MFA multi-factor authentication
• Multi-Tenant Isolation: Row-Level Security ensures complete data separation between enterprises
• Regular Audits: All data access and modifications are fully logged in audit trails

4. Data Retention Period

We retain your personal data for the duration necessary to provide the service. After you terminate your account:

• Account data will be permanently deleted within 30 days
• Knowledge base content will be permanently deleted within 7 days
• Anonymized aggregate analytics data may continue to be retained
• Records required by law will be retained according to relevant regulations

5. Data Sharing

We do not sell your personal data. We may share your data in the following circumstances:

• Service Providers: Essential third-party service providers such as AWS (cloud hosting) and Stripe (payment processing), all bound by data processing agreements
• AI Model Providers: User queries may be sent to OpenAI / Anthropic / DeepSeek for processing. We have ensured that these providers will not use your data for model training
• Legal Requirements: When required by law, regulation or court order

6. Your Rights

Under the PDPO, you have the following rights:

• Right of Access: Request access to personal data we hold about you
• Right to Correction: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to Object: Object to the use of your data for direct marketing
• Right to Portability: Request export of your data in a structured format

To exercise the above rights, please send an email to [email protected]. We will respond to your request within 40 days.

7. Cookies and Tracking Technologies

We use essential cookies to maintain your login status and preferences. We do not use third-party tracking cookies or advertising trackers. Analytics data is collected using privacy-friendly methods that do not contain personally identifiable information.

8. Children's Privacy

BizMind is designed for enterprise users. We do not knowingly collect personal data from individuals under 16 years of age. If we discover that we have collected children's personal data, we will delete it immediately.

9. Policy Updates

We may update this Privacy Policy from time to time. Significant changes will be communicated to you via email or in-platform notification. We recommend that you check this page periodically for the latest policy.

10. Contact Us

If you have any questions or complaints about this Privacy Policy, please contact our Data Protection Officer:

• Email: [email protected]
• Address: Hong Kong

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data: www.pcpd.org.hk