Privacy Policy
ExplodeBiz · Effective September 5, 2026 · Last updated September 5, 2026
ExplodeBiz helps businesses, churches, and organizations request, collect, and share short voice and video testimonials, feedback, and greeting videos. Collecting recordings from real people means handling personal information carefully. This policy explains what we collect, why, who sees it, and what you can do about it.
This policy covers explodebiz.com, our web app, and any mobile apps we offer (together, the "Service"). It applies to three groups of people:
Account holders — the businesses and organizations that sign up for an ExplodeBiz account.
Contributors — people who record a testimonial, story, or feedback message after clicking a link or scanning a QR code.
Recipients — people who receive an email or text sent through the Service by an account holder.
If you are a contributor or recipient: the business that invited you decides what to do with your recording or your contact details. We store and deliver that content on their behalf. If you want your recording removed or want to stop hearing from them, contact that business first. You can also write to us at cs@explodebiz.com and we will help.
You must be 18 or older to record a testimonial or feedback message. Before recording, you are asked to agree to a Recording Release, which explains how the business may use your name, voice, and likeness. You can withdraw that agreement at any time — see Withdrawing your consent.
1. Information we collect
Information you give us directly
Account details. Name, business or organization name, email address, phone number, mailing address, password, and your business logo or branding images.
Recordings. Voice and video recordings made through the Service, including testimonials, "What We Do" videos, greeting messages, and QR-code feedback. Recordings can run up to ten minutes.
Uploaded media. Photos, image descriptions, and web links you attach to your pages.
Feedback contact details. When someone leaves feedback through a QR code, they may be asked for an email address or mobile number so the account holder can follow up.
Support messages. Anything you send us by email, phone, or a contact form.
Consent records
When you agree to the Recording Release before recording, we save a record of that agreement. It contains the version of the release text you saw, the time you confirmed your age, the time you agreed to the release, whether you opened the full release text, your browser and device type, and your IP address. We keep this so that we can show what you actually agreed to if it is ever questioned. Each version of the release text is archived and never edited after the fact.
Information collected automatically
Usage and device data. IP address, browser type, operating system, device type, referring pages, pages viewed, and the dates and times of your visits.
Recording metadata. When a recording was made, its length and file format, and which invitation link or QR code it came from.
Message activity. Whether an invitation or notification we send on an account holder's behalf was delivered, opened, or clicked, and whether it bounced.
Cookies and similar technologies. Small files used to keep you signed in, remember settings, and understand how the Service is used. Most browsers let you block or delete cookies, though signing in may not work if you block them entirely.
What we do not collect
We do not ask for Social Security numbers, government ID numbers, financial account numbers, or health information. We do not analyze recordings to identify people by face or voiceprint, and we do not use recordings to build biometric templates. Please do not include sensitive personal or financial details in a recording — approved recordings may be seen publicly.
2. Recordings are meant to be shared
This is the most important thing to understand about the Service.
When an account holder marks a recording as active, it becomes viewable by anyone who has the link or visits that account holder's public page. It can be emailed, texted, downloaded, and posted to social media, a Google Business profile, YouTube, Instagram, or anywhere else. Once content has been downloaded or shared elsewhere, we cannot pull it back.
Recordings stay private until the account holder reviews and approves them. Account holders can delete any recording permanently at any time. QR-code feedback is not visible to anyone but the account holder until they approve it.
Before you record, you are shown a Recording Release setting out exactly this: that the business may publish and edit your recording, use your name, voice, and likeness in its advertising, and that you will not be paid or asked to approve the final version. You have to agree to it to continue. That agreement is what permits the business to use your recording — not this policy, and not our Terms.
The release covers use by the business that invited you. It does not give ExplodeBiz permission to feature your recording in our own marketing. If we ever want to do that, we will ask you separately.
3. How we use information
To create and run accounts, and to store, host, and display recordings and uploaded media.
To send invitations, testimonial requests, and greeting videos at the direction of an account holder.
To generate QR codes, personalized URLs, and public pages.
To review new accounts and submitted content before it goes live, and to enforce our Terms and content standards.
To record and evidence consent given before recording, and to handle withdrawals of that consent.
To respond to support requests and send service notices such as password resets or changes to this policy.
To measure how the Service is used so we can fix problems and improve features.
To detect and prevent fraud, abuse, spam, and security incidents.
To meet legal obligations and respond to lawful requests.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use an account holder's contacts to market our own products.
4. Responsibilities of account holders
When you invite someone to record a testimonial, you decide who you ask and how their recording is used. You are responsible for:
Only inviting people you have a genuine business relationship with, and not contacting anyone who has asked you to stop.
Making sure people who record testimonials understand the recording may be shared publicly.
Not uploading recordings or images of anyone under 18, or of anyone who has not agreed to appear.
Passing on any withdrawal of consent you receive directly, and removing the recording within 30 days.
Deleting content when someone asks you to.
We may suspend an account that sends unwanted invitations or ignores requests to stop.
5. Who we share information with
We share information only in these situations:
Service providers. Companies that run parts of the Service for us — video hosting and streaming (including Vimeo), web hosting and storage, email delivery, text-message delivery, and analytics. They may only use the information to perform work for us.
Publicly, at the account holder's direction. Approved recordings, photos, and business details shown on public pages, as described in Section 2.
With the account holder who invited you. If you record a testimonial or leave feedback, the recording and any contact details you provide go to that account holder.
Legal and safety. When required by law, subpoena, or valid government request, or when we believe disclosure is needed to investigate fraud, protect someone's safety, or defend our legal rights.
Business transfer. If ExplodeBiz is acquired or merged, information may transfer to the new owner. We will post notice here before your information becomes subject to a different policy.
Embedded third-party content — such as Vimeo players and Google Maps — is governed by those companies' own privacy policies, not this one.
6. How long we keep information
We keep account information for as long as the account is open. Recordings are kept until the account holder deletes them or closes the account.
Removal happens in two stages. We take the recording out of public view usually within 24 hours of your request, and always within 72 — it comes off every page we control and stops being viewable by anyone. We then delete it from our systems within 30 days. The second stage is slower so that a withdrawal made by mistake, or by someone other than you, can be reversed inside that window.
When an account is closed, we delete or anonymize its content within 30 days. Backup copies may persist for a short period after deletion before being overwritten in the ordinary course.
We keep the consent record described in Section 1 even after the recording it relates to has been deleted. It is the only proof of what was agreed and by when, and deleting it alongside the recording would leave both you and us unable to establish what happened. We retain it for three years after the recording is deleted, then destroy it. The consent record contains no copy of the recording itself.
7. Your choices and rights
You can review or update your account information by signing in, or by writing to cs@explodebiz.com. You can ask us to:
Tell you what personal information we hold about you and where it came from.
Correct information that is wrong.
Delete your account, your recordings, or your contact details.
Send you a copy of your information in a portable format.
Stop sending you invitations or notifications. You can use the unsubscribe link in any email, or reply STOP to a text.
We will acknowledge and respond to these requests within 45 days. Withdrawing a recording is far faster than that — it comes out of public view within 72 hours at the latest and is deleted within 30 days, as described below. We will not deny you service or charge you a different price for exercising any of these rights.
Withdrawing your consent
If you recorded a testimonial or feedback message, you can withdraw the agreement you gave at any time, for any reason, without explaining why. Email cs@explodebiz.com or tell the business directly.
We take your recording out of public view usually within 24 hours of your request, and always within 72, then delete it permanently from our systems within 30 days, as described in Section 6.
We also pass the request to the business. They must stop using your recording immediately and remove it from every page and platform they control within 30 days. They may not ask you to explain, offer you anything to reconsider, or make removal conditional in any way.
What we cannot do is retrieve copies that have already been downloaded, forwarded, or reposted by other people. A recording that was shared to social media or sent in an email before you withdrew may keep circulating. Neither we nor the business can guarantee its removal. This is worth weighing before you record.
California residents
Under the California Consumer Privacy Act, as amended by the CPRA, California residents have the rights listed above, plus the right to know what categories of personal information we collect, use, and disclose, and the right to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding 12 months. You may designate an authorized agent to make a request for you; we may ask for proof of that authorization.
8. Security
We use administrative, technical, and physical safeguards to protect information, including encrypted connections, access controls, and restricted staff access to stored recordings. No system is completely secure, and we cannot guarantee that information will never be accessed improperly. Keep your password confidential and tell us right away if you believe your account has been compromised.
9. Age requirements
You must be 18 or older to record a testimonial or feedback message. Everyone is asked to confirm their age before recording, and the recorder will not open otherwise. We do not accept recordings from minors, with or without a parent's permission.
The Service is intended for businesses and organizations and is not directed to children. We do not knowingly collect personal information from anyone under 13. If we learn that we have, we will delete it.
If you believe a minor has given us information, or appears or is audible in a recording, contact cs@explodebiz.com and we will take it down. Account holders are responsible for not uploading recordings or images of minors.
10. Where we operate
ExplodeBiz is based in El Cajon, California. The Service is offered in the United States only. We restrict access by geographic location: requests originating outside the United States are refused before any recording or personal information is accepted. Information is stored and processed on servers in the United States.
We do not offer the Service to people in the United Kingdom, the European Economic Area, or Switzerland, and we do not make it available through app stores in those territories.
Our privacy policy, the Recording Release, and the withdrawal process remain reachable from anywhere. If you recorded something and want it removed, you can always email us, wherever you are.
11. Changes to this policy
We may update this policy as the Service changes. The effective date at the top of the page shows when the current version took effect. If we make a change that meaningfully affects how we handle your information, we will notify account holders by email or through the Service before it takes effect. Continuing to use the Service after a change means you accept the updated policy.
12. Contact us
Questions, requests, or concerns about privacy:
ExplodeBiz
270 E Douglas Ave
El Cajon, CA 92020
Email: cs@explodebiz.com
Phone: (619) 655-9000