Privacy Policy

a) Account Information

When you sign up, we collect your name, email address, and password (hashed). If you sign up via an invite code, we record that code.

b) Instagram Account Data

When you connect your Instagram account, we collect and process the following via the Instagram Graph API:

• Your Instagram account ID, username, and profile information
• Your existing Reels (video files, metadata, view counts)
• Performance metrics via Instagram Insights API: reach, views, average watch time, likes, comments, shares, and saves
• Audio data from your Reels (for transcription and variant generation)

c) Payment Information

We use Stripe to process payments. We do not store your credit card number or payment details on our servers. Stripe's privacy policy applies to all payment data: stripe.com/privacy.

d) Usage Data

We collect information about how you interact with the Service, including pages visited, features used, and actions taken (via Mixpanel analytics).

e) Communications

If you contact us for support or respond to our emails, we retain that correspondence.

• To provide the Service — analyzing your Reels, generating variants, publishing Trial Reels on your behalf, and tracking their performance
• To process payments and manage your subscription
• To send transactional emails (account confirmations, billing receipts, trial expiration notices)
• To send product updates and marketing emails (you may opt out at any time)
• To improve the Service and develop new features
• To train and improve our AI models using aggregated, anonymized performance data from A/B test results across users
• To comply with legal obligations

We access your Instagram account solely to provide the Service. Specifically:

• We read your existing Reels to analyze and generate variants
• We publish content (Trial Reels) to your account on your behalf, only as directed by you
• We read Insights data to measure the performance of Trial Reels
• We do not sell your Instagram data to third parties
• We do not use your Instagram data for advertising purposes unrelated to the Service
• Instagram data is retained only as long as necessary to provide the Service or as required by law

Our use of Instagram data complies with the Meta Platform Terms and Meta Platform Policy.

We do not sell your personal information. We may share your data with:

• Service providers — Stripe (payments), Mixpanel (analytics), cloud hosting providers (e.g., AWS/S3 for video storage), and email delivery services. These providers access data only as needed to perform services on our behalf.
• AI/ML providers — We use Google Gemini and OpenAI Whisper APIs to analyze video and audio content. Data sent to these services is subject to their respective privacy policies.
• Legal requirements — We may disclose information if required by law, regulation, or valid legal process.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is subject to a different privacy policy.

We retain your account data for as long as your account is active. Video files and analysis data are retained to power the Service and, after account deletion, for up to 30 days before permanent deletion. Payment records are retained as required by applicable law.

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing of your data
• Withdraw consent at any time (including revoking Instagram access)
• Request data portability

To exercise these rights, contact us at privacy@buzzfy.co.

You may disconnect your Instagram account from Buzzfy at any time via your account settings or directly through Instagram's app settings. Upon disconnection, we will stop accessing your Instagram data and will delete stored tokens.

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage. You may disable cookies in your browser settings, though some features may not function properly as a result.

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and access controls. However, no method of transmission over the internet is 100% secure.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a prominent notice on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact:

Foundbyme, LLC
Operating as Buzzfy
Email: privacy@buzzfy.co
Website: buzzfy.co