1. Introduction
BGM Center (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform at bgmcenter.com and app.bgmcenter.com.
2. Data Controller
The data controller responsible for your personal data is BGM Center. For any data-related inquiries, you can reach our team at privacy@bgmcenter.com. Full legal entity details (registered company name, address, and company number) will be published here once the operating entity is finalized.
3. Data We Collect
We collect the following types of data:
- Account data: Name, email address, company name, business role, password (encrypted)
- Business data: Company website URL, industry, company size, location
- Website analysis data: When you submit a URL for health diagnostics, we analyze publicly available information including page structure, performance metrics, SEO data, and social media presence
- Usage data: Pages visited, features used, session duration, device information
- Communication data: Support tickets, chat messages within the platform
4. How We Use Your Data
- Provide and improve our services
- Generate personalized health diagnostics and recommendations
- Send transactional emails (verification, password reset, notifications)
- Process payments through our payment partner
- Analyze platform usage to improve user experience
- Provide customer support
5. Legal Basis for Processing (GDPR Art. 6)
We process your personal data under the following legal bases:
- Contract (Art. 6(1)(b)): Account creation, subscription management, website hosting, and delivery of platform features you sign up for.
- Legitimate interest (Art. 6(1)(f)): Platform security, abuse prevention, usage analytics to improve the service, and direct communication about the product you use.
- Consent (Art. 6(1)(a)): Marketing communications and any optional analytics cookies. Consent can be withdrawn at any time.
- Legal obligation (Art. 6(1)(c)): Tax, accounting, and regulatory record-keeping required by applicable law.
6. Data Storage and Security
Your data is stored on secure servers located in the European Union (Germany). We use encryption for data in transit (TLS/SSL) and at rest. Passwords are hashed using bcrypt with a cost factor of 12. We maintain regular backups and implement access controls to protect your data.
7. Third-Party Services
We use the following third-party services:
- Google OAuth: For authentication (if you choose to sign in with Google)
- Mailgun: For sending transactional emails
- Cloudflare: For content delivery, DNS, and DDoS protection
- Payment processor: For handling subscription payments
8. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (“right to be forgotten”)
- Portability: Request your data in a machine-readable format
- Objection: Object to processing of your data
- Restriction: Request restricted processing of your data
To exercise any of these rights, contact us at privacy@bgmcenter.com.
9. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics, if used, are privacy-respecting and do not track individual users across websites.
10. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer. Anonymized, aggregated data may be retained indefinitely for analytics purposes.
11. Children's Privacy
BGM Center is a business platform and is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Platform. The date of the last update is shown at the top of this page.
13. Contact
For privacy-related questions or to exercise your data rights: