Privacy Policy

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, and account credentials when you register for an account.
• Payment Information: Billing address and payment card details processed securely through our third-party payment processor (Stripe). We do not store full payment card numbers on our servers.
• Communications: Information you provide when contacting customer support, submitting feedback, or corresponding with us via email.
• User Content: Voice recordings, transcripts, notes, and other content you create or process through the Buddi AI wearable device and application.

‍

2.2 Information Collected Automatically

• Device Information: Device type, model, operating system, unique device identifiers, and browser type.
• Usage Data: Pages viewed, features used, interaction timestamps, session duration, and navigation patterns.
• Log Data: IP address, access times, referring URLs, and system activity logs.
• Location Data: Approximate location (derived from IP address) and, if you grant permission, precise geolocation data to power features such as geotagging notes and nearby device pairing. Location data may be collected in the foreground and, if you enable it, in the background solely for these purposes. Location data is encrypted in transit and at rest. We do not sell your location data.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing activity. See Section 8 (Cookie Policy) for details.

‍

2.3 Information from Third Parties

We may receive information from analytics providers, advertising partners, or social media platforms when you interact with our Services through those platforms, in accordance with their respective privacy policies.

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our Services, process transactions, and manage your account.
• Personalization: To customize your experience and deliver content and features relevant to your preferences.
• Communication: To send transactional messages, respond to inquiries, provide customer support, and send service-related announcements.
• Marketing: To send promotional communications where you have opted in, including information about new features, products, or offers. You may opt out at any time.
• Analytics and Improvement: To understand usage patterns, conduct research, and develop new features.
• Security: To detect, prevent, and respond to fraud, unauthorized access, and other security threats.
• Legal Compliance: To comply with applicable federal and state laws, regulations, legal processes, or governmental requests.

Buddi AI is built with a privacy-first architecture. We are committed to the following principles regarding your user-generated content:

• User Control: All transcripts and personal data generated through the Buddi AI device are fully controlled by and accessible only to you.
• Storage Options: You may choose to store your data in your personal cloud storage or offline on your device, giving you flexibility and control over your data.
• Encryption: All data is encrypted during transmission (TLS 1.2 or higher) and at rest (AES-256 or equivalent).
• Data Minimization: We only process user content as necessary to deliver the requested features. Once processing is complete, content is deleted from our active servers unless you choose to store it.
• No Unauthorized Access: Buddi AI does not access your personal data or transcripts without your explicit consent.
• Deletion Rights: You may review, export, and delete your data at any time through your account settings.

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in delivering our Services (e.g., payment processors, cloud hosting providers, analytics partners). These providers are contractually obligated to protect your data and may only use it for the purposes we specify.
• With Your Consent: When you have given explicit consent to share information with a specific third party.
• Legal Requirements: When required by law, subpoena, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your data.

Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you.

6.1 All Users

• Access and Update: You may access and update your personal information through your account settings.
• Opt-Out of Marketing: You may unsubscribe from marketing communications at any time by following the instructions in our messages or contacting us.
• Cookie Preferences: You may manage cookie settings through your browser or our cookie preference center (see Section 8).
• Account Deletion: You may request deletion of your account and associated data by contacting us at privacy@getbuddi.ai.

‍

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
• Right to Delete: You may request deletion of personal information we have collected, subject to legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

‍

Categories of Personal Information Collected (preceding 12 months):

• Identifiers (name, email, phone number, IP address)
• Commercial information (purchase history, transaction details)
• Internet/electronic network activity (browsing history, usage data)
• Geolocation data (approximate and, if permitted, precise)
• Audio/electronic information (voice recordings, transcripts via device)

‍

To submit a verifiable consumer request, contact us at info@getbuddi.ai. We will verify your identity before processing your request and will respond within 45 days.

‍

6.3 Other State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws may have additional rights, including the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of targeted advertising and profiling. To exercise these rights, contact us at info@getbuddi.ai.

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
• Access controls and authentication mechanisms.
• Regular security audits and vulnerability assessments.
• Employee training on data protection and privacy best practices.

‍

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying affected users in the event of a data breach, in accordance with applicable state breach notification laws.

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Data: Retained for the duration of your account and for up to 30 days after account deletion to allow for reactivation.
• Transaction Records: Retained for 1 years as required by applicable tax and financial regulations.
• Usage and Log Data: Retained for up to 12 months for analytics and security purposes.
• Marketing Preferences: Retained until you opt out or delete your account.

‍

User-generated content (transcripts, notes) stored on our servers is deleted promptly after processing, unless you choose to retain it in your personal cloud or device storage.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on our website with a revised “Effective Date.”
• Notify you via email or in-app notification for significant changes.

We encourage you to review this Privacy Policy periodically.