Privacy Policy
The BuzzIQ service is at https://buzziq.ai.
1. Introduction
This Privacy Policy explains how BuzzIQ (“we,” “our,” or “us”) collects, uses, and shares information when you use the Service. Using the Service is also governed by our Terms of Service.
2. Information we collect
2.1 Account
- Name and email address
- Password hash if you sign up with email (we do not store your password in plain text)
- Email-verification, password-reset, and magic-link tokens
- Google or Facebook login profile (id, name, email) if you sign in that way
- Passkey credential id and public key if you add a passkey (not biometric data)
- Last login and a session token
2.2 Social connections
When you connect an account we store OAuth access and refresh tokens (encrypted), the provider account id, and the page or company name. We cache profile fields the APIs return (display name, avatar, follower or fan counts, bio). We do not collect your social-network passwords.
Platforms you can connect: Facebook Pages, Instagram, LinkedIn (personal and company), X, and Threads. Some of these may be hidden by a feature flag.
2.3 Your content
- Post text, media files (stored on Amazon S3), schedule time, and platform post ids
- Engagement metrics we pull where the API allows (likes, comments, shares, impressions, reach)
2.4 Team workspaces
If team workspaces are on: workspace name, member emails, invite emails, and seat counts.
2.5 Billing
Stripe customer and subscription ids, credit balance, and credit transactions. Card numbers are handled by Stripe. We do not store them.
2.6 Security logs
IP address, browser user agent, email on failed login attempts, and IP on a deletion request.
2.7 AI
If you use AI features, we send your prompt and, for vision or image generation, the image to OpenAI and/or Anthropic so they can produce the caption or image you asked for.
2.8 Cookies and Google Analytics
Necessary cookies: the signed-in session and optional remember-me cookie.
The first-party cookie buzziq_consent stores granted or denied.
If you accept analytics cookies, we load Google Analytics 4. We send a hashed user id, not
your email. Events we send include sign_up, login,
account_connected, and purchase. Ad storage stays denied.
Rejecting analytics does not affect posting or billing.
Signed-out: use the cookie banner on this site. After you sign in, you can also change this in Settings → Cookie preferences.
3. How we use your information
- Provide the Service: connect accounts, compose, schedule, publish, and show engagement
- Send must-send email via Amazon SES: verify, password reset, magic link, team invite, deletion notices
- Send optional product email (welcome, low credits, post published, reengagement, plan change) unless you opt out
- Bill you, protect the Service, and meet legal duties
- Measure product use with GA4 only if you accepted analytics cookies
5. Security
What we actually do:
- TLS (HTTPS) in production
- Hashed passwords
- Encrypted social OAuth tokens
- HttpOnly session cookies
- Login rate limits and temporary lockout after repeated failures
No method of transmission or storage is perfectly secure.
6. Retention
- Account and content stay until we process a deletion request, or until you disconnect a social account (disconnect deletes that connection here).
- Posts you delete in the app may remain in our database as a hidden row until an admin purge. They are not shown on your calendar.
- Security and billing records stay as long as we need them for fraud, tax, or a dispute.
There is no self-serve “delete account” button in Settings today. See Data Deletion.
7. Your rights and choices
- Correct your name and email in Settings.
- Email opt-out: unsubscribe or Settings → email notifications. Must-send auth and legal mail still goes out.
- Cookies: the banner, and Settings if you are signed in.
- Disconnect a social account on Accounts. That removes the tokens here. It does not delete posts already published on that network.
- Delete, access, or export: email privacy@buzziq.ai or use the Data Deletion form. We do not offer a self-serve export today.
8. Third-party services
This policy does not cover the social networks you connect. Read theirs:
9. International transfers
We process information in the United States (including Render, AWS, Stripe, Google, OpenAI, Anthropic, and MailerLite). If you use the Service from another country, your information is transferred to the United States.
10. Children
The Service is for people 13 or older. We do not verify age at signup. You represent that you meet that minimum. If we learn a user is under 13, we delete the account.
11. Changes
We may update this policy. We post the new version on this page and update the Last Updated date. We do not send a separate email when it changes.