Privacy Policy
Last updated: May 23, 2026
What this is
BizBuddy is an AI co-pilot for small business owners, run by BrandBoost AI ("we", "us"). This policy explains what data we collect when you use BizBuddy and what we do with it.
What we collect
- When you visit:standard cookies and request data needed for the app to work — a session cookie if you're signed in, and an anonymous counter cookie that tracks your free-preview messages.
- When you paste a URL:we fetch and read whatever's publicly visible on that page.
- When you edit your business context: whatever you type. This is stored in your browser if you're anonymous, or in our database if you're signed in.
- When you chat:your messages and the AI's responses.
- When you sign in: your email address. If you use Google sign-in, we receive your basic profile (name, email).
How we use it
- To generate AI responses tailored to your business
- To count your message usage against your plan
- To recognise you when you come back
We do not sell your data. We do not use your chats to train AI models.
Third parties
To run the service we share data with:
- Google Cloud — our AI inference provider; receives your chat messages and business context to generate responses
- Supabase — stores your account, business profile, chat history, and uploaded attachments (hosted in Sydney, Australia)
- Vercel — hosts the app and runs analytics (page views and anonymized event counts)
- Firecrawl & Jina Reader — receive the public URL you paste in onboarding so they can fetch and return the page contents
- Stripe — handles your payment details if you upgrade to Pro; we never see your card number
- Fastlane — our marketing analytics provider; receives anonymized page-view events (which page, referrer, rough location) on our public pages only, so we can see which campaigns bring visitors. It does not run on the signed-in app
These are service providers we use to run and improve BizBuddy, not advertisers.
Where your data lives
Our Supabase database and Vercel functions both run out of Sydney (syd1). Your chats and business profile stay in Australia. AI inference requests go to Google Cloud servers (region depends on Google's routing).
How long we keep it
We keep your chats and business profile until you delete your account. Anonymous cookie counters expire 30 days after your last visit. Uploaded files are stored alongside the chat that references them and are removed when you delete that chat. Server error logs are retained for 30 days for debugging.
Your rights
You can delete your account and every piece of data tied to it yourself from the Account page — the “Danger zone” section. Deletion is immediate and irreversible; we don't keep a soft-deleted copy. If you're in the EU or UK you also have rights under GDPR (access, rectification, portability) — email support@bizbuddy.app and we'll honour them.