Privacy Policy

CoreP2P is a product of ThinkBI. We provide automated accounts-receivable software to small businesses, clinics, consultants, and AR teams. For information about our own users (the businesses that sign up), we decide how it is used. For information about those businesses' customers, we act as a service provider and process it only on the business's behalf. For privacy inquiries, contact us at info@thinkbi.io.

We collect information you provide directly and information generated by your use of the service:

• Account data: Name, email address, and organization details provided when you sign up via Clerk, plus the owner name and phone number entered during setup.
• Billing data: Your plan, subscription status, and Stripe customer and subscription identifiers. Card details are entered directly with Stripe. We never receive or store full card numbers.
• Business data: Invoice records (amounts, due dates, invoice references, and payment links) and customer contact information (name, email, phone) that you upload or enter into CoreP2P.
• Message and interaction data: The reminders sent to your customers, their delivery status, replies received (for example STOP), opt-out status, and call outcomes. We infer a customer's time zone from their phone number to schedule messages.
• Contact form submissions: Name, email, company, phone, and message submitted via the website contact form.
• Usage data: Log files, timestamps, feature interactions, and performance metrics collected automatically when you use the service.

• To provide, maintain, and improve the CoreP2P service.
• To send automated invoice reminders on behalf of your business to your customers.
• To manage your subscription and free trial.
• To communicate with you about your account, support requests, and product updates.
• To respond to contact form submissions and demo requests.
• To detect and prevent fraud, abuse, and security issues.
• To comply with legal obligations, including keeping records of opt-outs so they continue to be honored.

If you received a payment reminder by text, email, or phone call from a business that uses CoreP2P, that business gave us your contact details and invoice information. We use that information only to deliver that business's reminders and record your responses. To stop text messages, reply STOP to any message. To stop emails or calls, contact the business that sent the reminder, or email us at info@thinkbi.io and we will make sure the request reaches them. Questions about the invoice itself should go to the business that issued it.

We do not sell, rent, or share mobile phone numbers, or text-message opt-in and consent data, with third parties or affiliates for their marketing or promotional purposes. Mobile information is shared only with the SMS providers that deliver messages and as otherwise described in Section 6.

We do not sell your personal information. We may share data with:

• Service providers: Clerk (authentication), Stripe (billing and payment methods), Sinch and Twilio (SMS delivery), our email delivery provider and Resend (email delivery and unsubscribe handling), Vapi and Bland.ai (automated voice calls, where enabled), OpenAI (processing of message text, such as customer replies, to support history search and analysis), and cloud infrastructure providers. Each receives only what it needs to perform its service.
• Legal authorities: When required by law, court order, or to protect the rights and safety of our users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify affected users.

We retain your data as long as your account is active or as needed to provide the service. After account termination or a verified deletion request, we delete or de-identify your data within 90 days, unless a longer period is required by law. Opt-out records may be kept longer so that a person who opted out is not contacted again.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request deletion of personal information we hold about you, subject to certain exceptions.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out: We do not sell or share personal information for cross-context behavioral advertising, so there is no opt-out required. If this changes, we will update this policy and provide an opt-out mechanism.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, email info@thinkbi.io with subject line “CCPA Privacy Request.” If your information was provided to us by a business that uses CoreP2P, we will pass your request to that business and help it respond.

We use commercially reasonable safeguards, including encryption in transit, database-level isolation between customer workspaces, access controls, and masking of credentials in logs. No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Our service may contain links to third-party websites (e.g., Calendly for scheduling, or the payment pages businesses link in their reminders). We are not responsible for the privacy practices of those sites.

CoreP2P is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

We may update this policy periodically. We will notify you of material changes via email or a notice within the product. Continued use after changes take effect constitutes acceptance.

For questions about this privacy policy or your data: info@thinkbi.io