As of October 27, 2023, bizahoi GmbH("bizahoi"; DBA "Transformance") has updated its Privacy Policy. bizahoi GmbH operates the Transformance platform. This Privacy Policy explains how we collect, use, andprotect your Personal Information when you access or use the Transformanceplatform or website.
Transformance is designed with a privacy-first architecture:
- All business data is processed entirely in your browser’s runtime memory.
- Business data is never stored on Transformance servers.
- Only limited metadata (such as configurationsettings, account information, and audit logs) is stored — encrypted and hostedin GDPR-compliant data centers in Europe.
By using our platform or Service, you agree to thecollection and use of information as described in this Privacy Policy. ThePersonal Information we collect is used solely to provide and improve theService. We will not use or share your information with anyone except as described in this Privacy Policy.
We collect the following types of information:
Contact Information:
- Name, email address (submitted via forms or account registration)
- Used to provide the Service, manage your account, and communicate with you.
Usage and Browser Information:
- Device OS, browser type, language, IP address (for session security)
- Activity logs (login dates, uploads, API calls) — used for security, billing, and audit
Billing Information:
- Name, billing address, tax location, payment details (e.g., credit card or bank info)
- Stored securely with our payment processor — used for invoices and tax compliance.
Information Use
We use the information collected to:
- Provide, maintain, and improve the Service
- Authenticate users and manage secure sessions
- Contact you regarding account or platform updates
- Respond to support requests
- Deliver invoices and process payments
- Monitor usage for billing, audit, and service optimization
User Authentication
Transformance uses passwordless, secure authentication methods:
Google Login:
- Login via Google account — name, email, profile picture provided by Google.
Microsoft Login:
- Login via Microsoft account — name, email, profile picture provided by Microsoft.
Passwordless Email Login:
One-time verification code sent to email — only email address is shared.
Single Sign-On (SSO):
- Transformance supports SAML 2.0-based SSO integration withenterprise identity providers such as Azure Active Directory, Okta, Google Workspace, and others.
- When enabled, SSO allows users to authenticate using their corporate credentials and identity policies.
- SSO sessions follow the security policies of your organization’s Identity Provider (IdP), including enforcement of multi-factor authentication (MFA), session timeouts, and access restrictions
No passwords are stored by Transformance. Allauthentication flows use HTTPS and integrate with enterprise SSO when configured.
Transformance Database Storage
Transformance stores only metadata necessary to operatethe platform. No uploaded business data is stored on servers.
Stored metadata includes:
User Information:
- Email address
- Name and profile picture (optional)
App & Workflow Configurations:
- App definitions, automation rules, UI settings (stored in Firebase)
- No user data or uploaded file content is persisted
Activity Logs:
- Login dates and times
- API usage metrics
- File transformation counts
- Invitations sent to other users
Business Data Handling
Transformance is designed with a client-first, privacy-first architecture.
Business data — such as files, spreadsheets, forminputs, AI prompts, and workflow outputs — is processed primarily in your browser’s runtime memory:
- Business data is not stored on Transformance servers.
- For some AI-powered features (such as LLM processing or 3rd-party API calls), a portion of derived prompts or temporary payloads may be securely transmitted through Transformance’s EU-based server routes (hosted in AWS Frankfurt) — but business content is not persisted or written to storage at any point.
- Uploaded files and business content remain in the browser’s RAM during the session.
- Once the browser tab is closed or refreshed, all transient data is automatically cleared.
- Transformance servers do not log, inspect, or retain uploaded business data. This ephemeral, session-based processing guarantees that sensitive data remains under user control at all times and is not retaine dor accessible by Transformance.
Third-Party Integrations
Transformance is designed to integrate with enterprise systems such as Google Sheets, Slack, ERP platforms, CRM tools, and other APIs.
When using integrations:
- API calls are routed through secure server-side endpoints, deployed in AWS Frankfurt (EU) to maintain strict data residency and compliance with GDPR.
- API secrets, tokens, and credentials are stored securely on the server side and are never exposed to the browser or client-side code.
- For certain integrations (such as local on-premise APIs), data may also be fetched directly from the browser when approved — with full user control.
- In all cases, Transformance sends only automation metadata (such as field mappings, action types, or trigger logic) through these integrations.
- No uploaded business data or file contents are transmitted to or stored on third-party platforms via Transformance servers unless the user explicitly configures an integration to do so (e.g. an intentional export to Google Sheets).
Transformance’s integration architecture isstateless and ephemeral:
No sensitive business content is persisted or cached by Transformance when using third-party APIs.
Links to Other Sites
Our Service may link to external sites. We are not responsible for the content, privacy policies, or practices of those sites. Please review their privacy policies separately.
User Rights (GDPR)
You have the right to:
- Access your personal data
- Request deletion ("right to be forgotten")
- Correct inaccurate data
- Restrict processing
- Withdraw consent
- Object to processing
- Data portability
- Lodge a complaint with a data authority
For more: ICO GDPR Guide
To exercise your rights, email: support@transformance.ai
Cookie Policy
Please refer to our Cookie Policy for details about cookies used by Transformance.
Changes to this Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a new effective date.
We encourage you to review this Privacy Policy periodically.
Contacting Us
Transformance takes privacy seriously.
We only store metadata required for platform operation.
You may view, edit, or delete your personal data atany time by contacting us at: support@transformance.ai
