Privacy Policy

This policy explains what BoothBuzzMedia LLC collects when you use BuzzIt, why we collect it, who else sees it, and how to get it back or have it deleted. It describes what the software actually does; if you find a difference between this page and the product, tell us and we will treat it as a fault.

Who we are

BoothBuzzMedia LLC is the data controller for BuzzIt. Contact us at help@boothbuzzmedia.com.

What we collect

Your account. Your name, email address, a hashed password, and the name of your workspace. We never store your password itself.

The businesses you ask us to monitor. For each one: its name, website address, and optionally a telephone number, city and opening hours. This is the record you tell us is correct, and it is the thing everything else is compared against.

Audit results. For each audit: the findings, and technical signals read from the page — whether it declares structured data, whether it has a title, how quickly it responded, and similar. We retain the pages' findings, not copies of the pages.

Your confirmations. When you confirm something we cannot check ourselves — that your prices are current, that your contact form delivers — we store which question you answered, the date, who answered it, and any note you added.

Billing. Your plan, subscription status, and an identifier for your customer record at Stripe. We never see or store your card details. Payment pages are hosted by Stripe and your card number is entered there, not here.

Your customers' contact details. Where a business uses BuzzIt to answer its own customers, we hold what it gives us for each one — a name, a telephone number, an email address — typed in, uploaded, or read from a booking, an invoice, a payment, or a system that business connected. These are that business's records, held for it. They are never pooled between businesses and never used for anything of ours.

Email deliverability. If mail to your address bounces or is marked as spam, we record the address on a suppression list so we stop sending to it.

Sign-in and security records. When somebody signs in to your account, gets a password wrong, or changes who can see it, we record when it happened, the network address it came from and the browser used, so that misuse can be found and looked into. These records are kept while your account is open.

What we do not collect

We do not use advertising or analytics trackers, we do not build profiles of your visitors, and we set no cookies other than the one that keeps you signed in. We do not sell data to anyone, under any circumstances.

Requests we make to other websites

Auditing a business means fetching the website address you gave us and, to check for broken links, a bounded number of the pages it links to. These requests come from our servers and identify themselves as BuzzItBot with a link to an explanation. We read the page markup. We do not submit forms, log in, place orders, or attempt to work around bot protection — if a site refuses us, we report that we could not read it.

You may only add businesses you own or are authorised to act for. Pointing our crawler at a site you have no relationship with is a breach of the Terms.

Who else sees your data

We use a small number of service providers, and only these:

• Amazon Web Services — hosting, database, file storage and outbound email, in the US East (Ohio) region.
• Stripe — subscription payments. Stripe receives your email address and plan in order to bill you, and handles your card details directly.
• Telnyx — text messages and telephone calls, where a business has switched them on. Telnyx carries the message, so it necessarily sees the number it goes to and the words in it. It is given nothing else.

We will disclose data if legally required to. If that ever happens and we are permitted to tell you, we will.

If you connect a Google Business Profile

BuzzIt may offer to connect your Google Business Profile so we can compare what Google shows about your business against your own record. If you authorise that connection, we read your listing's business information — name, address, telephone, hours, categories and verification status — and store the values we compared, so that next month's report can say what changed.

We use it only to produce your reports and, where you explicitly instruct us to, to correct a listing on your behalf. We do not use Google data for advertising, do not share it with anyone, and do not use it to train models. You can disconnect at any time, and doing so stops all further access immediately.

Phone numbers and text messages

Two kinds of telephone number reach BuzzIt and they are not treated alike. Yours is part of your account. Your customers' belong to your business, and we hold them for you.

We do not sell, rent or share mobile telephone numbers, or the fact that somebody agreed to be texted, with anyone for their own marketing. We never have, and there is nothing in the product that could. The only outside company that sees a number is the carrier that has to carry the message.

What BuzzIt texts. Only messages the person asked for: that an appointment is held, booked or cancelled, and replies inside a conversation they started. Nothing goes out on a schedule, so how often a person hears from a business depends on what they do with it, not on us.

Marketing texts are stopped at the foundations, not by a policy. A promotional text needs that person's express written permission recorded against them. BuzzIt has nowhere to record it — the field exists and nothing in the product ever writes it — so a marketing text reaches nobody, including where an owner has switched the feature on. We would rather tell you that than describe a restraint we were relying on ourselves to keep.

Stopping them. Reply STOP to any message — or STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT or OPT-OUT — and that business stops texting that number. It takes hold before the next message, needs no account, and needs no reply from us. START turns them back on. HELP answers with who is writing and how to reach them.

The record is kept against the business you replied to, so silencing one business does not silence another you also hear from. It also means we keep your number, on a list of numbers not to text — deleting it would throw away the instruction along with it.

Your mobile operator may charge you for messages you send or receive. That is between you and them; we neither see it nor add to it.

How long we keep it

Audits and confirmations are kept while your account is open, because the value of the product is the trend across them. When you remove a business, it stops being audited immediately and its history is retained but no longer processed. When you close your account, we delete your data within 30 days, except records we are required to keep for tax and accounting purposes.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email help@boothbuzzmedia.com and we will respond within 30 days. Depending on where you live you may have additional rights, including the right to complain to a data protection authority.

Security

Data is encrypted in transit and at rest. Access to production systems is limited to people who need it. Passwords are hashed. Secrets are held in a managed secret store, not in our source code. No system is perfectly secure, and we will tell affected customers promptly if we ever have a breach that puts their data at risk.

Children

BuzzIt is a business product and is not intended for anyone under 18.

Changes

If we change this policy materially we will email account holders before it takes effect. The date at the top always reflects the current version.