Privacy Policy

1. Who we are

Buddy is operated by Veezio Solutions s.r.o., Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic; company number 23746068; VAT ID CZ23746068; registered with the Regional Court in Brno under file C 147101/KSBR. We are the controller of account, service-operation and billing data described in this policy. Contact info@usebuddy.ai for privacy questions or requests.

This policy covers Buddy’s website, dashboard, phone verification, AI-assisted calls and connected-agent features. If a business supplies personal data for us to process solely on its instructions, the parties must establish the applicable controller–processor arrangements; these terms do not replace a data processing agreement.

2. Information we process

Account information: your email address, password hash, session records, phone number, verification status and hashed call PIN. If available and you choose Google sign-in, we receive the identity information needed to link that Google account.

Preferences and work context: your Buddy name, voice persona, language, greeting, calling rules, availability, projects, tasks, agent identifiers, access-key records, decisions, saved memories and information your connected agents submit. Live requests can include file excerpts and results returned by your coding agent.

Call information: telephone numbers, provider call identifiers, timestamps, duration, call status, errors, live audio, transcripts, summaries and your answers. Speech is processed to conduct the conversation and return your instructions to the connected project.

Payments and support: credit purchases, balances, usage, payment identifiers, refund and dispute records, billing information supplied at checkout, and correspondence you send us. Stripe handles card entry; Buddy does not store full card numbers or card security codes.

Technical information: network requests, IP addresses, browser information, authentication events and diagnostic or security logs may be processed to deliver and protect the service.

3. Why we use it

To provide your account, requested verification messages, calls, preferences, work-context exchange and credit accounting, we process the information needed to perform our contract with you. Providing a phone number is necessary for telephone features; you can choose what work context to share.

We use necessary security and diagnostic information to prevent abuse, protect accounts, investigate failures and establish or defend legal claims. These are our legitimate interests, balanced against your rights.

Where accounting, tax or lawful authority requirements apply, we retain and disclose the necessary records to meet legal obligations. Where a feature requires consent, we ask separately and let you withdraw it. Agreement to the Terms is not blanket consent for optional data processing.

4. Calls, transcripts and connected agents

Buddy is an AI assistant. Audio is transmitted to telephony and voice-AI providers during calls. Our application stores transcripts, summaries and decisions to provide call history and project continuity. Twilio call recording is not enabled by our current outbound-call code; this does not mean audio is never processed or retained by the voice-AI provider.

ElevenLabs may retain conversation audio and associated data according to the configuration and contractual terms of the connected service. Contact us for the applicable retention configuration. Do not assume calls are off the record.

Your selected coding agent receives the context and answers needed for the task. During a live request, the connected worker can return project information to Buddy. We do not need unrestricted access to every file on your device. You control which projects and agents you connect and can revoke their access.

Do not submit passwords, API secrets, payment-card data or sensitive personal information in task context or conversation. Only share information about other people when you have an appropriate legal basis and have provided any necessary notices.

Buddy generates suggestions and summaries and applies calling preferences. It is not intended to make solely automated decisions with legal or similarly significant effects about you. You remain responsible for reviewing and authorising consequential work.

5. Service providers and disclosures

Twilio processes phone numbers, verification requests, call signalling and audio transport. ElevenLabs and the model providers used through its service process audio, prompts, conversation context and generated responses. The model in use can change as we maintain the service.

Stripe processes checkout, payments, fraud checks and refunds when payments are enabled. Google processes optional Google sign-in. Your chosen coding-agent provider processes requests under your arrangement with it.

Infrastructure and transactional-email providers may process the data necessary to host Buddy, deliver requested messages and maintain the service. Access is limited to the purposes for which they are engaged. Contact us for the current provider and processing-location details.

We may disclose relevant information to professional advisers, authorities where legally required, or parties to a business restructuring subject to appropriate protections. We do not sell your personal data.

6. International processing

Calls and AI services can involve processing outside the European Economic Area, including in the United States. The location is not determined solely by your phone number or chosen language.

Where required, transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and any necessary supplementary measures. You can contact us to request information about the safeguards applicable to your data.

7. How long information is kept

Account settings, projects, call history, transcripts and decisions remain available while needed to provide your account and work history. We do not currently apply a single automatic deletion period to all account content. You can delete saved memories through the dashboard and request deletion of other account data by email.

Conversation-summary memories generally stop being used after 30 days; explicitly saved memories remain until removed or their specified expiry. Expiry from active context is not a promise of immediate erasure from every database, provider system or backup.

Session cookies last up to seven days. Password-reset links expire after 30 minutes. Expiry prevents use of a token; related security records may remain where needed to investigate abuse.

After an account-closure or erasure request, we delete or anonymise data that is no longer needed. Limited records may remain for applicable accounting and tax periods, unresolved payments, fraud prevention or legal claims. Backup and provider copies may follow separate deletion cycles. We explain relevant exceptions when handling your request.

8. Cookies and browser storage

Buddy uses an HTTP-only buddy_session cookie to keep you signed in. Browser storage also remembers interface preferences and the credit pack you selected. These support the functions you request; clearing them can sign you out or reset local preferences.

The current Buddy application does not include advertising-tracking tags. If optional tracking is introduced, we will update this notice and obtain consent where required before activating it. External services you choose to open, including Stripe checkout or Google sign-in, have their own privacy notices.

9. Your rights and choices

Depending on applicable law, you can request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent for processing that relies on it without affecting earlier lawful processing.

Email info@usebuddy.ai from your account address. We may ask for proportionate identity verification. We respond without undue delay and normally within one month. Where GDPR permits an extension for complexity or volume, we explain it within that first month.

You may complain to your local supervisory authority or the Czech Office for Personal Data Protection at uoou.gov.cz. You do not have to contact us first.

Buddy is intended for adults aged 18 or over. If you believe a child has provided personal data, contact us so we can investigate.

10. Security and changes

We use access controls, password and PIN hashing, scoped agent keys and verification checks to protect accounts. No system can guarantee complete security. Keep your credentials private and report suspected unauthorised access promptly.

We update this policy when the service or our processing changes. The revision date appears above. For material changes, we will provide appropriate notice before the new processing begins and request consent where required.