Privacy Policy

Last Updated: December 5, 2025

BJSD Solutions, LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bjsdsolutions.com, use our applications (including TextSwapper, BJSD Hub, and RaceRuler), or interact with our services.

1. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our services.

1.1 Information You Provide

When you create an account, use our services, or contact us, we may collect:

• Name, email address, and other account information

• Profile information and preferences

• Communications with us, including support requests

1.2 Automatically Collected Information

When you use our services, we automatically collect certain information, including:

• Device information (device type, operating system, browser type)

• Usage data (pages visited, features used, time spent)

• Analytics data (anonymized where appropriate)

2. Security and Audit Logging

For security, compliance, and operational purposes, we automatically log certain information when you interact with our API endpoints and administrative functions. This includes:

2.1 IP Addresses

We log full IP addresses for all API requests, particularly for:

• Security investigations and threat detection

• Abuse prevention and DDoS mitigation

• Fraud detection and account takeover prevention

• Compliance with security regulations (GDPR, CCPA, PCI DSS)

• Forensic analysis and incident reconstruction

Important: IP addresses are essential request metadata for security investigations and are not considered personally identifiable information (PII) in the context of security logging. We retain this information for security and audit purposes as required by law and industry best practices.

2.2 User Agent Strings

We log browser/client identification information to:

• Identify automated bots and scrapers

• Detect suspicious access patterns

• Support security investigations

2.3 Request Metadata

We log endpoint access, timestamps, and response codes for:

• Audit trails for administrative actions

• Security event tracking

• Operational monitoring

Analytics vs. Security Logs: For general analytics (page views, user behavior), we may anonymize or hash IP addresses for privacy. For security and audit logs, we store full IP addresses as required for security investigations and compliance.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services

• Process transactions and send related information

• Send technical notices and support messages

• Respond to your comments and questions

• Monitor and analyze trends and usage

• Detect, prevent, and address technical issues and security threats

4. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

4.1 Security and Audit Logs

Security and audit logs, including IP addresses, are retained for:

• Active Security Investigations: Retained until investigation is complete

• Compliance Requirements: Retained as required by applicable laws (typically 1-7 years depending on jurisdiction)

• Operational Monitoring: Retained for up to 90 days for operational analysis

• Long-term Audit: Critical security events may be retained indefinitely for compliance and historical analysis

5. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to your personal information

• Correction: Request correction of inaccurate information

• Deletion: Request deletion of your personal information

• Portability: Request a copy of your data in a portable format

5.1 Security Log Data

While you have rights to access, correct, and delete your personal information, security and audit logs (including IP addresses) are maintained for security and compliance purposes. These logs may be exempt from deletion requests when:

• Required for ongoing security investigations

• Required by law or court order

• Necessary for fraud prevention

• Required for compliance with regulatory requirements

We will respond to your requests regarding security log data in accordance with applicable laws and our security obligations.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you. For more information about our use of cookies, please see our Cookie Policy.

7. Payment Processing

When you make a purchase through our Services, payment processing is handled by Stripe, Inc. ("Stripe"), a third-party payment processor. Stripe collects and processes your payment information (including credit card numbers, billing addresses, and other payment details) on our behalf.

7.1 What We Don't Store

We do not store, process, or have access to your full credit card numbers, CVV codes, or other sensitive payment information. All payment data is securely processed by Stripe.

7.2 What We Do Store

We store your Stripe Customer ID, which links your account to payment records in Stripe's system. This ID does not contain sensitive payment information.

7.3 Data Sharing

We share payment-related information with Stripe to facilitate payment transactions, prevent fraud, and comply with legal obligations. Stripe acts as a data processor on our behalf and processes payment data in accordance with their Privacy Policy.

7.4 Stripe's Privacy Policy

For more information about how Stripe handles your data, please review Stripe's Privacy Policy at https://stripe.com/privacy.

7.5 Payment Data Retention

We retain records of payment transactions (including transaction IDs, amounts, and dates) for as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Stripe may retain payment data in accordance with their own data retention policies, which may be required by law or regulation.

8. Third-Party Services

We may use third-party services (such as Google Analytics, Firebase, Stripe) that collect, monitor, and analyze information. These services have their own privacy policies addressing how they use such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Us

For questions about this Privacy Policy, contact us at privacy@bjsdsolutions.com