Privacy and Data Processing

Effective when affirmatively accepted.

1. WHO HANDLES YOUR INFORMATION

BULLRUSH FUTURES PROP LLC, a Michigan limited liability company, doing business as BIZI Futures Prop LLC and using the brand Bizi Futures (Bizi, we, us, or our). Website: www.bizifutures.com. Contact: ceo@bizifutures.com.

This notice explains information handled when you visit, register, subscribe, trade, request a reward, join the waitlist, participate as an affiliate, or contact support. Bizi is responsible for its handling of personal information and for directing service providers where applicable. Send privacy requests and complaints to ceo@bizifutures.com, subject Privacy Request. Business mailing address: 23950 Princeton St, Dearborn, Michigan 48124.

This is a transparency notice, not a waiver of privacy rights. Affirmative acceptance acknowledges that the notice was provided; it is not blanket consent to unnecessary processing. Where applicable law requires separate consent for a purpose, Bizi must obtain it before that processing. The service is intended for adults who are at least 18 and have legal capacity in their jurisdiction.

2. INFORMATION COLLECTED AND ITS PURPOSES

Account and profile information includes email, hashed website password, legal name, country of residence, date of birth, and, when supplied in a completed customer profile, phone, city, region, and postal code. Bizi uses it for login, age and residence eligibility, customer communication, and account administration. Google sign-in users also have a Google account identifier associated with login.

Discord. Connecting a Discord account from your dashboard is optional. If you connect one, Bizi stores your Discord user identifier and username and uses them only to add you to the Bizi Discord server, to give or remove the roles that show you hold a Bizi account or have received a payout, and to detect one person operating more than one Bizi account. Bizi does not receive your Discord email address, messages or server list, and does not keep the access Discord grants after connecting. You can disconnect at any time from your dashboard.

Security information includes IP addresses, browser information, login history, failed attempts, and account-lock records. Bizi uses it to protect accounts, investigate suspected fraud, and preserve relevant evidence. An IP address alone is not conclusive proof of another person’s discretionary trading.

Billing information includes orders, PayPal payment and subscription records, refunds, charge identifiers, and cancellation history. Bizi uses it to administer purchases, resolve disputes, and meet accounting and legal duties. PayPal collects payment credentials on its own payment page. Bizi does not receive or store complete payment-card numbers.

Trading and reward information includes platform account identifiers, balances, equity, positions, orders, fills, risk events, payout requests, decisions, transfers, and recipient details supplied for payment. Bizi uses it for account administration, rule enforcement, reward calculation, reconciliation, and appeals.

Signature information includes the exact accepted documents and snapshots, their cryptographic fingerprints, consent wording, the legal name on your account, timestamps, IP address, and browser information. Bizi uses it to establish what you agreed to and preserve records of the transaction.

Platform credentials include the separate platform username and encrypted password, which you can reveal in the dashboard. That password is recoverable by the system for this purpose. Your website password instead uses a nonreadable hash. Keep both secure.

Support information includes messages, AI-chat transcripts, and tickets created when you request a human. Bizi uses it to respond, review support quality, and resolve issues. Do not include card numbers, Social Security numbers, tax identifiers, or identity documents in the chat.

Waitlist information includes your email, ad-campaign tags, Facebook click ID when supplied in the referring URL, and referring page. Bizi uses it for waitlist communication and campaign measurement. If you accept analytics cookies, the site also loads the Meta Pixel; see section 4.

Affiliate information includes name, contact email, commission calculations, and payment records, used to administer the affiliate relationship. This privacy notice does not supply an affiliate contract or authorize marketing claims.

Identity verification and tax information. Before your first payout, and not at registration or purchase, Bizi asks you to complete an identity check through Didit, our verification provider, and to submit a tax form. The check collects a photo of a government-issued identity document and a short selfie video. Didit checks that the selfie is of a live person, compares it with the document photo, screens your name against sanctions and watch lists, and notes the network location the check is done from. Didit holds the images and returns the result to Bizi. From an approved check, Bizi keeps the name on the document, the last four characters of the document number, and a keyed one-way fingerprint of the document that cannot be turned back into the number; it uses them only to confirm that the payee is the account holder and to detect the same document verifying more than one Bizi customer. Bizi also keeps the PayPal email you give for payouts. The tax form is a W-9 for US persons or a W-8BEN for others; Bizi stores the taxpayer identification number encrypted and uses it only for tax reporting and withholding. Do not send identity documents or tax identifiers through support chat or email.

3. SERVICE PROVIDERS AND DISCLOSURES

Bizi shares information reasonably necessary for the following services. A recipient may also independently handle information under its own terms for payment, market-data, authentication, or legal purposes.

PayPal processes payments, subscriptions, refunds, and payments made through that method. Volumetrica creates and operates simulated trading accounts and supplies trading records. DXFeed provides platform market data and obtains its own market-data agreement. Vercel hosts the website and counts page visits without cookies (the page address without its query string, the referring site, and your country, device and browser type). Neon provides the database. Didit verifies identity and screens against sanctions lists before a first payout. Sentry receives error reports, which exclude cookies, authorization headers and email-link tokens. Google (Google Analytics) and Meta receive information about your visit through their tags, only if you accept analytics cookies. If you had accepted analytics cookies when you bought, Bizi also sends Meta a record of each payment (the amount, the plan, a one-way hash of your email address, your IP address and browser, and Meta's own browser identifiers) so Meta can measure our advertising; Bizi sends nothing for a buyer who declined. Google supports Google sign-in. Discord hosts the Bizi community server and, if you connect your account, receives the role changes Bizi makes for you. Anthropic receives support-chat messages to generate AI responses. Resend delivers account and transactional email.

When you use AI support, you are communicating with an automated assistant. Your messages are stored by Bizi and sent to Anthropic for response generation. AI answers may be wrong and do not change signed terms, approve a payout, or provide personalized investment or legal advice. Request a human or email ceo@bizifutures.com for account decisions. Bizi does not represent an Anthropic training or deletion setting that it has not verified.

Bizi may disclose necessary information to a bank or selected payout provider, professional advisers under appropriate confidentiality duties, authorities when legally required, and persons handling a specific fraud investigation or legal claim. Disclosures must be limited to the legitimate purpose and applicable legal authority. In a merger, sale, or reorganization, relevant information may be transferred with appropriate confidentiality, privacy protections, and notices required by law.

Bizi does not describe information as anonymized when it remains linkable to you. Provider names and functions do not imply that every listed service receives every data category.

4. COOKIES MARKETING AND CHOICE

The site uses login and necessary session cookies, which it needs to work. With your permission it also uses Google Analytics to measure how the site is used and the Meta Pixel to measure advertising. Neither loads until you choose Accept on the cookie banner, and neither loads if you decline. Separately, Vercel Web Analytics counts page visits without setting cookies or identifying you across sites, so it runs whatever you choose. When either is in use, a Cookie choices link in the site footer lets you change your choice at any time. Campaign tags and referring-page information supplied to waitlist forms are stored as described above.

Waitlist participation and optional promotional communication are separate from subscribing to a trading account. You may ask Bizi to stop optional marketing by contacting ceo@bizifutures.com. Operational notices about billing, security, accepted rules, or a dispute may still be necessary. Where applicable law requires marketing consent or an unsubscribe mechanism, Bizi must provide it; this notice alone does not supply that consent.

Bizi does not sell personal information for money. If you accept analytics cookies, the Meta Pixel sends Meta information about your visit for advertising measurement, which some state laws treat as sharing for cross-context behavioral advertising; declining analytics cookies prevents it. This statement does not recharacterize necessary processing by a vendor as a sale exemption where applicable law defines the arrangement otherwise. Bizi must reevaluate the disclosure before introducing materially different practices.

5. CROSS BORDER HANDLING AND CANADIAN USERS

Bizi operates from Michigan. Information from Canadian users may be transferred to and processed in the United States and other locations where the identified providers lawfully operate. It may be subject to lawful access by foreign courts, law enforcement, or authorities. Bizi remains responsible for safeguards required for its provider relationships and does not represent that all data stays in Canada.

For Canadian users, Bizi identifies purposes, limits collection and retention, uses appropriate safeguards, and provides access and correction in accordance with applicable law. Optional processing cannot be a condition of service when the law prohibits that condition. You may withdraw consent where applicable, subject to legal or contractual restrictions explained at the time. Withdrawal may prevent a necessary service function, but it does not erase earned payment rights.

Applicable provincial protections, including Quebec requirements where applicable, are not displaced by a Michigan-law clause. This English notice does not purport to satisfy a separate mandatory French-language delivery requirement. Bizi does not currently offer accounts to residents of Quebec.

6. RETENTION AND DELETION

Bizi keeps information for the periods below and deletes it on that schedule through an automated process that runs daily. Closed-account history remains viewable in your dashboard for 12 months.

Account and profile records: while the account is active, then for 12 months after closure, except fields incorporated into a necessary contractual, accounting, reward, or dispute record. Unnecessary credentials and profile fields should be removed sooner when no longer needed.

Website and platform credentials: while necessary for access; disable on closure and delete recoverable platform passwords within 30 days after access ends unless an active provider process requires a shorter documented continuation. Preserve proof of actions without retaining usable credentials unnecessarily.

Payment, subscription, refund, reward, signature, and signed-snapshot records: seven years after the relevant subscription ends or final payment or dispute is resolved, whichever is later, unless a shorter or longer mandatory period applies. Retain only the information needed for the accounting, contractual, and legal purpose.

Detailed trading records: 12 months after closure for customer history, with only records necessary to support reward calculations, signed obligations, breaches, or disputes retained within the seven-year legal-record schedule. Do not retain all granular trading data merely because some records are relevant.

Routine security and login records: 12 months from collection. Preserve specific incident evidence until the incident and related legal obligations are resolved, using the legal-record schedule when necessary.

Support chat and ordinary tickets: two years after the matter closes. Preserve only relevant parts longer if they form evidence in a legal, accounting, or security record. Waitlist and attribution fields: until you unsubscribe or 12 months after the last waitlist communication, whichever occurs first, except minimal suppression records needed to honor an opt-out.

Discord connection: removed when you disconnect, and with the other profile details when an account has been closed long enough for them to be deleted.

Affiliate accounting and commission records: seven years after final payment or resolution; unnecessary contact and profile data should be deleted sooner. Identity-check images are held by Didit under its retention terms; Bizi keeps the check result, the verified name, the last four characters and the document fingerprint with the payout record. Tax forms: retain under the applicable legal and accounting schedule with restricted access.

Bizi may place a legal hold on a person’s records when a dispute, claim or legal request requires it; a hold suspends ordinary deletion only for relevant records until resolved. Records kept for seven years are reviewed for deletion when that period ends. Bizi uses rolling backup expiration, with deleted data removed from routine recoverable backups within 90 days where technically feasible and lawful. If a backup is restored for recovery, the deletion schedule is reapplied.

7. ACCESS CORRECTION REQUESTS AND COMPLAINTS

Contact ceo@bizifutures.com to request access, correction, deletion, information about disclosures, or withdrawal of applicable consent. Where your state or province grants additional rights, including portability, restriction, opt-out, authorized-agent requests, or appeal of a denied privacy request, Bizi honors those rights according to applicable law. Bizi will not discriminate for exercising a protected privacy right.

Bizi may request information reasonably needed to verify a request, but must not demand disproportionate new data. A denial must identify the applicable basis and available review or complaint route. Bizi responds within the period required by the applicable law and provides required notices for an extension. Deletion may be limited for specific legal records, security needs, or unresolved payment obligations; the limitation must be explained rather than treated as a blanket exception.

Canadian users may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial authority. US users may contact the authority available under their applicable law. An arbitration provision does not prevent complaints to a regulator or extinguish a nonwaivable privacy remedy.

8. SAFEGUARDS UPDATES AND GOVERNING TERMS

Bizi uses hashed website passwords and encrypted revealable platform passwords as described above. It must apply access restrictions and safeguards appropriate to the sensitivity of retained data. No internet system can be guaranteed secure. This notice does not claim unverified certifications or end-to-end encryption.

Bizi follows applicable breach-assessment, notice, and recordkeeping requirements, including Michigan’s Identity Theft Protection Act where applicable. This notice does not waive notice required by law.

Bizi will identify material changes through a revised notice and give additional notice or obtain consent where required. A new notice does not authorize retroactive incompatible processing of previously collected data. The version acknowledged at checkout is preserved in the signature record.

Michigan law governs subject to the Federal Arbitration Act and mandatory laws that cannot lawfully be waived in your jurisdiction. Disputes are governed exclusively by Section 7 of the Trader Agreement, including its individual arbitration provision, exceptions, and opt-out. This document does not create a separate arbitration agreement. No provision limits a nonwaivable consumer, privacy, payment-dispute, or statutory cancellation right.