Privacy policy

Effective from 18 October 2026.

1. Who we are

Do is provided by Businlog. For the account and billing details covered here, Businlog is the data controller. You can reach us at hello@businlog.com.

For the content inside a customer's workspace (such as tasks, files and the details of team members), the customer company decides what goes in and why. For that data, the customer is the controller and we act as their processor: we handle it only to provide Do to them, on their instructions. If you're a member of a team that uses Do, the company that invited you is your first point of contact about your data in its workspace.

2. What we collect

When you sign up and manage billing

• Your name, email address and a secure hash of your password (never the password itself).
• Your company name and workspace address.
• Your plan, number of users, billing status and any offer code. Card details are collected and held by Stripe, not by us.

Inside a workspace

• What your team adds: tasks, notes, whiteboard content, files and documents, rota entries and team mail.
• Team members' names, email addresses, roles and access settings.
• Activity needed for the features to work, such as who is online, breaks, who completed a task and when, and missed calls.
• Expiry dates read from documents you upload, such as passports, licences and certificates, so we can remind you before they expire.
• Push notification subscriptions and passkey public keys, if people turn these on.

Voice and video calls are carried live between participants and through our servers to connect them. We don't record calls.

When you use the service

• Technical information such as IP address, browser and device type, and sign-in times. We use this to keep accounts secure, show people which devices are signed in, and fix problems.

3. Why we use it

• To provide Do under our contract with you: creating and running your workspace, signing people in, sending notifications and reminders.
• To take payment and keep billing records, which we're legally required to keep.
• To keep the service secure and prevent abuse, which is in our and our customers' legitimate interests.
• To contact the account owner about the account, such as trial reminders, billing and important changes. We don't send marketing email without asking first.

4. Who we share it with

We don't sell personal data. We share it only with service providers who help us run Do, and only what they need:

• Stripe, to take card payments and manage subscriptions.
• Hosting and infrastructure providers that run our servers and store data.
• Email delivery providers, to send sign-in, billing and reminder emails. If your workspace connects its own email sender for team mail, those messages go through the provider you choose.
• Browser push services (run by the maker of each person's browser), to deliver push notifications to people who turn them on.

We may also disclose data if the law requires it. Some providers may process data outside the UK. Where they do, we rely on the safeguards UK data protection law requires.

5. How long we keep it

• Workspace content is kept while the workspace exists. If the account owner asks us to delete a workspace, we delete its database and files.
• Billing records are kept for as long as UK tax law requires, usually six years.
• Security logs are kept for a limited time and then deleted.

6. Cookies

We use only the cookies needed to keep you signed in and protect forms from misuse. This website uses no analytics, advertising or tracking cookies. Our pages load fonts from Google Fonts, which means your browser connects to Google to fetch them.

7. Keeping data safe

Each company's workspace has its own separate database. Connections to Do are encrypted, passwords are stored as secure hashes, and people inside a workspace see only what their access allows. No system is perfectly secure, but we take care to protect your data and will tell affected customers promptly if something goes wrong.

8. Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email hello@businlog.com and we'll reply within one month. If your data sits inside a customer's workspace, we may pass your request to that company, since they control it.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.

9. Changes

If we change this policy in a way that matters, we'll email account owners before the change takes effect.