Privacy Policy

1. Who We Are

BizHR is operated by M.E. Consulting, owned by Mario Espindola MPA, located in Los Angeles / San Gabriel Valley, California. We provide HR compliance consulting, compliance toolkits, and AI-assisted HR tools for California small businesses.

Contact: mario_espindola@outlook.com · 626-999-6239

2. Information We Collect

• Contact information — name, email, phone number provided via booking or contact forms
• Account information — email address and password for client portal accounts (stored encrypted via Supabase)
• Booking data — consultation scheduling information and notes
• Tool inputs — information entered into compliance calculators and AI policy generators (processed client-side; not stored unless you are logged in)
• Waitlist registrations — email addresses submitted for early access to upcoming tools
• Usage data — page views and basic analytics (no PII; no third-party ad tracking)

3. How We Use Your Information

• To respond to consultation requests and contact form submissions
• To provide and maintain your client portal account
• To send service-related communications (not marketing without consent)
• To notify waitlist registrants when tools launch
• To improve our compliance tools and services

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Data Storage & Security

Client portal data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure with encryption at rest and in transit. Supabase is SOC 2 Type II compliant. Row-Level Security (RLS) policies ensure each user can only access their own data.

We retain your data for as long as your account is active or as needed to provide services. You may request deletion at any time (see Section 6).

5. Cookies & Analytics

This site uses minimal first-party cookies necessary for authentication (session management). We do not use Google Analytics, Facebook Pixel, or other third-party tracking tools that collect personally identifiable information.

6. Your California Privacy Rights (CPRA)

California residents have the right to:

• Know — request disclosure of the personal information we have collected about you
• Delete — request deletion of your personal information, subject to certain exceptions
• Correct — request correction of inaccurate personal information
• Opt Out — we do not sell personal information, so no opt-out is required
• Non-Discrimination — exercising your privacy rights will not affect your access to our services

To exercise any of these rights, contact us at mario_espindola@outlook.com. We will respond within 45 days as required by CPRA.

7. Third-Party Services

• Supabase — database and authentication (privacy policy)
• Vercel — hosting and CDN (privacy policy)

8. Changes to This Policy

We may update this policy as our services evolve or as California law requires. Material changes will be communicated via email to registered users. The “Last updated” date at the top of this page reflects the most recent revision.