Privacy Policy.

Account and contact data. When you create an account or request a demo, we collect your name, work email, company name, role, and login credentials.

Store and catalog data. To power Buffy Search, we sync product catalog data from your Shopify store, including product titles, descriptions, variants, pricing, collections, tags, and availability. We may also process the search queries and chat messages shoppers send so we can return relevant results and improve answers.

Brand monitoring data. To power Buffy Intel, we collect the brand names, domains, products, and topics you ask us to track, along with the responses returned by public AI platforms about your brand.

Usage and device data. We automatically collect log data such as IP address, browser type, pages viewed, referring URLs, and timestamps, along with cookies and similar identifiers (see Cookies & Tracking).

Communications. If you contact us at [email protected] or via support, we keep a record of that correspondence.

We use the information we collect to provide, operate, secure, and improve our products; to authenticate users and prevent fraud or abuse; to return relevant search and chat results; to generate brand-visibility reports; to respond to support requests; to send service and (where permitted) marketing communications; and to comply with legal obligations.

We do not sell your personal information, and we do not use your customers’ store data or brand-monitoring data to train foundation models for unrelated third parties.

We use cookies and similar technologies for essential functionality, analytics, and to remember preferences. You can control non-essential cookies through your browser or our preference controls. For full detail, see our Cookie Policy.

We share information with trusted service providers (sub-processors) who help us run Buffy, including cloud hosting, analytics, payment processing, email delivery, and customer support, under contracts that limit their use of the data to providing services to us.

Buffy Intel queries public AI platforms such as ChatGPT (OpenAI) and Gemini (Google) on your behalf to measure how your brand is described. Those queries are sent to those platforms and are subject to their respective terms and privacy practices.

We may also disclose information to comply with the law, enforce our agreements, protect rights and safety, or in connection with a merger, acquisition, or sale of assets (with notice where required).

We retain personal information for as long as your account is active and as needed to provide the services, then for a reasonable period afterward to meet legal, tax, accounting, and security obligations. Catalog and monitoring data is retained for the life of the relevant integration and deleted or anonymized on request, subject to legal requirements.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. California residents may request disclosure of categories of data collected and opt out of any “sale” or “sharing” as defined by the CCPA/CPRA, note that Buffy does not sell personal information.

To exercise any of these rights, email [email protected]. We will verify your request and respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. Buffy maintains a SOC 2 program covering its production systems. No method of transmission or storage is perfectly secure, but we work continuously to protect your data.

Buffy operates infrastructure in both the European Union and the United States, and offers EU/US data residency options for eligible customers. Where we transfer personal data across borders, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your information remains protected.

Buffy is a business product intended for use by adults. Our services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or through the product. Your continued use of Buffy after an update means you accept the revised policy.

If you have questions about this Privacy Policy or how we handle your data, contact Buffy AI, Inc. at [email protected].