Legal

Privacy Policy

How Buddy collects, uses, and protects personal information.

Who we are

Buddy (“Buddy,” “we,” “us,” or “our”) provides a business software platform that helps companies manage customer relationships and run outreach across phone, text, email, and social media. This policy explains what we collect, why, and what you can do about it.

Two kinds of data, kept separate. Buddy handles both data about our own customers (the businesses who subscribe) and data our customers store in their own workspace about their contacts. For the second kind, our customer is the data controller and Buddy acts as a processor on their instructions. Each customer workspace is isolated from every other.

Contact

Email: support@hey-buddy.ai
Phone: 803-692-8339 (803-MY-BUDDY)

For privacy requests, including access or deletion, use the details above. See also our User Data Deletion page.

Information we collect

Account and billing

Name, business name, email address, and phone number.
Subscription and payment records. Card details are handled by our payment processor (Stripe) and are never stored on our systems.

Connected accounts

When you connect a Facebook Page, Instagram business account, LinkedIn profile or page, or an advertising account, we store only what is needed to perform the actions you authorized:

The account or page identifier (for example a Facebook Page ID, Instagram Business ID, LinkedIn URN, or Google Ads customer ID).
The display name and, where the platform provides one, a profile image URL — so you can confirm the right account is connected.
The OAuth access token and, where issued, a refresh token. Tokens are held in managed secret storage and are never sold or shared with third parties.
The posts and campaigns you draft, approve, schedule, or publish through Buddy.

We do not collect your password, your private messages, or your personal contacts, and we do not access accounts you have not explicitly connected.

Google user data

If you connect a Google Ads account, Buddy requests the https://www.googleapis.com/auth/adwords scope. It is the only scope Google offers for the Google Ads API and there is no read-only alternative, so it is the minimum the integration can ask for. With it, and only on your instruction, Buddy:

lists the Google Ads accounts your Google login can reach, so you can choose which one to connect;
reads campaign, ad group and performance data for the account you chose, so your advertising appears beside your other marketing in Buddy;
creates and adjusts campaigns, budgets and ad groups that you approve.

Access is granted per user. You authorize your own Google account: Buddy uses no service account, no domain-wide delegation and no organization-wide grant, and one workspace can never see another workspace's Google data.

We never charge you for your advertising. Ad spend is billed by Google directly to your own Google Ads account and the payment method you attached to it. No ad spend passes through Buddy, we do not rebill it, we do not mark it up, and we do not resell Google Ads inventory.

Buddy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the advertising features you connected it for. It is never sold, never transferred to anyone except as needed to provide those features or where the law requires it, never used for advertising of our own, and never read by a human except with your explicit permission, for security purposes, or where the law requires it.

You can withdraw access at any time using Disconnect inside Buddy, or at myaccount.google.com/permissions. Either one invalidates the tokens we hold. See our data deletion page.

Communications you send through Buddy

Email you send through the platform, and delivery events such as opens, bounces, and unsubscribes.
Text messages you send, and their delivery status.
Phone calls placed or received by the platform, including recordings and transcripts where enabled, so calls can be summarized and reviewed.

Contact records in your workspace

Information you import or capture about your own customers and prospects — names, contact details, notes, and activity history. This is your data. We process it to run the platform for you and do not use it to build our own marketing lists.

Technical

IP address, browser and device type, and log data needed to operate the service securely and diagnose problems.

How we use information

To provide, maintain, and secure the platform.
To carry out the actions you authorize — publishing a post, placing a call, sending an email or text.
To bill for the service and enforce plan limits.
To provide support and respond to your requests.
To meet legal and regulatory obligations.

We do not sell personal information, and we do not share it with third parties for their own marketing.

Service providers

We use a small number of processors to run the service, including cloud hosting and databases, telephony and messaging carriers, email delivery, AI model providers used to draft and summarize content, and payment processing. Each is bound to use the data only to provide their service to us.

Retention

Account and billing records: kept while your subscription is active and afterwards as required for tax and accounting.
Connected-account tokens: deleted immediately when you disconnect the account.
Workspace content and contact records: kept while your account is active; deleted on request or after account closure.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Contact support@hey-buddy.ai and we will respond within 30 days.

If you are a contact of a business that uses Buddy and you want your information removed, please contact that business directly, since they control it. If you reach us instead, we will pass your request to them.

Security

Encryption in transit for all traffic.
Access tokens and credentials held in managed secret storage.
Per-customer data isolation.
Access limited to staff who need it to operate or support the service.

Text messaging

If you give consent to receive text messages from us, message frequency varies and message and data rates may apply. Reply STOP at any time to opt out, or HELP for assistance. Consent is not a condition of purchase. Mobile information is never sold, rented, or shared with third parties for marketing.

Cookies

We use cookies that are necessary for the site and app to function, and may use analytics cookies to understand usage. You can control cookies through your browser settings.

Children

Buddy is a business product and is not directed to children under 16. We do not knowingly collect their information.

Changes

We will post any changes on this page and, for material changes, notify account holders by email or in the app.

Last updated: 24 July 2026.