Privacy Policy

Customer Data. When an MSP uses Biz24Seven, it stores records about its own clients: contacts, sites, devices, tickets, agreements, time and invoices. For that data the MSP decides what is collected and why, and we process it only on the MSP’s instructions to provide the service. If you are a client of an MSP that uses Biz24Seven, contact that MSP about your information.

Our own data. For information about our website visitors, people who request access, and the users of each workspace, we decide how it is used, as described below.

• Access requests: work email, company name, team size, current PSA and anything you choose to tell us.
• Account details: name, email, role, sign-in method, and security settings such as enrolled authenticators or passkeys.
• Usage and security logs: sign-in events, IP address, browser type, and an audit trail of changes made in your workspace.
• Connected systems: when an administrator connects Microsoft 365 or an RMM, we store the encrypted credentials or consent needed to read it, plus the license counts and device inventory it returns. We do not read mailbox or file contents.
• Website analytics: only if you accept analytics cookies, page views and general device information through Google Analytics.

• to provide, secure and support the service;
• to verify sign-ins and protect against abuse and fraud;
• to reply to access requests and send service messages such as invitations and security notices;
• to understand how the website is used, when you have consented to analytics;
• to meet legal obligations.

• sell or rent personal information;
• use Customer Data for advertising;
• use Customer Data to train artificial-intelligence models;
• write changes back into the systems you connect.

We use a small number of providers to run Biz24Seven. Each is bound by contract to use data only to provide its service to us.

We will update this list before adding a provider that processes Customer Data.

We use cookies that are necessary to keep you signed in and to protect forms from bots. Analytics cookies are off until you accept them, and you can change your choice at any time from the Cookies link in the website footer.

Customer Data is kept while your subscription is active and deleted as described in the Terms of Service after cancellation. Access requests we do not act on are deleted within 12 months. Security logs are kept for up to 12 months unless needed to investigate an incident.

You can ask to access, correct, export or delete personal information we hold about you by writing to msp@yea247.com. Depending on where you live you may have additional rights under local law; we will honor them. If your request concerns data an MSP keeps about you, we will pass it to that MSP.

We protect information with workspace isolation enforced in the database, encryption in transit and at rest, role-based access and multi-factor sign-in. See the Trust page for details. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.

We will post changes here and update the effective date; material changes are announced by email or in the product. Questions: msp@yea247.com, or Biz24Seven, Asheville, North Carolina, United States.