Privacy Policy

CoreP2P is a product of ThinkBI. We provide automated accounts-receivable software to small businesses, clinics, consultants, and AR teams. For privacy inquiries, contact us at info@thinkbi.io.

We collect information you provide directly and information generated by your use of the service:

• Account data: Name, email address, and organization details provided when you sign up via Clerk.
• Business data: Invoice records, customer contact information (name, email, phone), and payment status that you upload or enter into CoreP2P.
• Contact form submissions: Name, email, company, phone, and message submitted via the landing page contact form.
• Usage data: Log files, timestamps, feature interactions, and performance metrics collected automatically when you use the service.
• Provider credentials: Third-party API keys (Twilio, Resend) you provide are stored in encrypted form.

• To provide, maintain, and improve the CoreP2P service.
• To send automated invoice reminders on behalf of your business to your customers.
• To communicate with you about your account, support requests, and product updates.
• To respond to contact form submissions and demo requests.
• To detect and prevent fraud, abuse, and security issues.
• To comply with legal obligations.

We do not sell your personal information. We may share data with:

• Service providers: Clerk (authentication), Twilio (SMS), Resend (email), Stripe (billing), and cloud infrastructure providers. Each is bound by appropriate data agreements.
• Legal authorities: When required by law, court order, or to protect the rights and safety of our users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify affected users.

We retain your data as long as your account is active or as needed to provide the service. After account termination, we retain data for up to 90 days before deletion unless a longer period is required by law.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request deletion of personal information we hold about you, subject to certain exceptions.
• Right to opt out: We do not sell personal information, so there is no opt-out required. If this changes, we will update this policy and provide an opt-out mechanism.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, email info@thinkbi.io with subject line “CCPA Privacy Request.”

We implement commercially reasonable security measures including encryption at rest and in transit, access controls, and regular security reviews. No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Our service may contain links to third-party websites (e.g., Calendly for scheduling). We are not responsible for the privacy practices of those sites.

CoreP2P is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

We may update this policy periodically. We will notify you of material changes via email or a notice within the product. Continued use after changes take effect constitutes acceptance.

For questions about this privacy policy or your data: info@thinkbi.io