Privacy Policy

This Privacy Policy describes how Buddy ("we", "us", or "our") handles information when you use our website and services. By using Buddy, you agree to this policy. If you do not agree, please do not use the service.

1. Who we are

Buddy is operated by the entity that runs this website and product. For data protection questions, contact us via our contact form.

2. Information we collect

• Account and profile. When you sign up or sign in, we collect identifiers such as email address, and optional profile fields you provide (for example name, phone number, avatar). Authentication is processed through Supabase.
• Your content. You may submit business ideas, descriptions, validation inputs, survey content, landing page copy, and related materials. We store this content to provide the service.
• Usage and technical data. We may collect IP address, browser type, device information, and similar data through our hosting and infrastructure providers, and in server logs, for security and reliability.
• Billing. If you subscribe to a paid plan, payment is handled by Stripe. We receive subscription status and limited billing metadata from Stripe; we do not store full payment card numbers on our servers.
• Website inquiries. If you use the contact form on our marketing site, we collect what you submit (such as email, optional name and phone, and your message) and send it to Loops so we can respond and manage requests. We do not store those submissions in our application database. If you opt in to marketing emails on that form, we may use Loops to send occasional product updates; you can unsubscribe using the link in those emails where applicable.
• Marketing contacts. If configured, we may sync your contact details to Loops (or similar email tools) when you sign up, to send product-related messages. You can unsubscribe according to instructions in those messages where applicable.
• Public respondents. People who visit your public landing pages or respond to your surveys may submit information you choose to collect. You are responsible for what you ask for and how you use that data; we process it on your behalf to operate those features.

3. How we use information

• Provide, maintain, and improve Buddy (including AI-assisted features).
• Authenticate users, enforce limits, and secure the platform.
• Process subscriptions and communicate about billing.
• Send service-related notices and, where permitted, marketing.
• Comply with law and respond to lawful requests.

4. AI processing

Certain features send portions of your content to OpenAI (or other model providers you configure) to generate suggestions, refinements, analytics summaries, and similar outputs. Those providers process content as subprocessors under their terms and privacy policies. Do not submit secrets or highly sensitive personal data you are not comfortable having processed by such providers.

5. Sharing and subprocessors

We share information with service providers who help us run Buddy, including:

• Supabase — authentication and database hosting.
• Stripe — payments and billing portal.
• OpenAI — AI features when enabled.
• Notion — only when you choose to export an idea to Notion; content is sent to Notion under your connection or our integration as applicable.
• Loops — optional marketing/contact sync when configured.
• Hosting and infrastructure — for example Vercel or similar, as used for this deployment.

We do not sell your personal information. We may disclose information if required by law or to protect rights and safety.

6. Cookies and similar technologies

We use cookies and local storage as described in our Cookie Policy. Essential cookies are needed for sign-in and basic UI preferences.

7. Retention

We keep your information for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You may delete content or your account where the product supports it; some residual copies may persist for a period in backups.

8. Security

We use industry-standard measures appropriate to the nature of the service. No method of transmission or storage is completely secure.

9. International transfers

Your information may be processed in countries other than where you live, including where our subprocessors operate. We rely on appropriate safeguards where required by law.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing or to portability. To exercise these rights, contact us via our contact form. You may also lodge a complaint with a supervisory authority where applicable.

11. Children

Buddy is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes

We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.