Privacy Policy

Blipzy is operated by The Buddy Labs AI Inc., a company based in Ontario, Canada. For the data you and your business give us to run Blipzy, we act as the data controller. For the messages and content that other people send to your connected accounts, we act as a processor on behalf of your business, which is the controller of its own customer data. You can reach us about privacy at privacy@thebuddylabs.com.

Blipzy helps local businesses manage their online reputation: it collects the business's own reviews, comments and messages from connected platforms, drafts replies in the business's voice, and reports on visibility. We only process data for the business account that connected it.

• To show your reviews, comments and messages in one inbox.
• To draft and, where you enable it, post replies in your brand voice.
• To measure your visibility on search and AI engines and suggest improvements.
• To email you the reports you asked for, and instant email alerts for anything that needs you.
• To learn your reply style: replies you post or approve are analyzed to build a private, per-business style profile so future drafts sound like you. This profile is used only for your business and is deleted with it.
• To publish your public profile page: if you share your Blipzy page, it displays your business details and customer reviews that are already public on the platforms they were posted to. It never shows private messages.

We do not sell personal information, and we do not use your data to advertise to anyone.

Where privacy laws such as the GDPR ask for a legal basis, we rely on: performing our contract with you (to provide the features you signed up for); your consent (for optional things like product analytics, which you can decline); our legitimate interests (to keep Blipzy secure, prevent abuse, and improve the product), kept in balance with your rights; and, where it applies, meeting a legal obligation. You can withdraw a consent at any time without affecting what we did before.

Review, comment and message text is processed by Anthropic's Claude models to analyze sentiment and draft replies. Content sent through the API is not used by Anthropic to train models.

Blipzy uses AI to draft and score content, not to make decisions that have a legal or similarly significant effect on any person. You control whether a reply posts automatically or waits for your approval, and you can keep any topic in human hands. We do not use AI to profile the people who contact you for advertising or eligibility decisions.

We use a small set of processors to run Blipzy: Supabase (database and authentication), Vercel (hosting), Anthropic (AI drafting and analysis), Resend (email delivery), Stripe (payments), PostHog (product analytics), and search data providers (Serper, SerpApi) for public listing and ranking data. Platform data from Google and Meta is accessed through their official APIs under their terms.

Blipzy uses cookies only to keep you signed in and to remember which of your businesses is active. Product analytics stays off until you accept it, and you can decline. We do not use third-party advertising cookies. Because there is no common standard for browser Do Not Track signals, we do not respond to them, but our analytics choice above gives you the same control.

Data is encrypted in transit, access is scoped per business at the database level (row-level security), and platform tokens and secrets are stored only in our hosting provider's encrypted configuration. Replies can only be sent for the business that connected the account.

Blipzy runs on providers located in the United States and Canada, so your data is processed and stored there. When information moves across borders, we rely on our providers' safeguards for international transfers (such as standard contractual clauses where they apply) to keep it protected to the standard of this policy.

You can delete individual businesses, or your whole account and its data, at any time from inside Blipzy; see data deletion instructions. Platform content is removed when you disconnect the platform or delete the business.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a copy in a portable form, to limit or object to certain processing, and to withdraw a consent. Much of this you can do yourself in the app; for anything else, email privacy@thebuddylabs.com and we will respond within the time the law allows. We will not treat you differently for exercising these rights. If you are in Canada you may also contact the Office of the Privacy Commissioner, and in the UK or EU your local data protection authority, if you are not satisfied with our response.

In the past year we have collected the categories described under "Information we collect" above (identifiers, business and contact details, connected-platform content, and usage and analytics data). We do not sell or share your personal information as those terms are used under California law, and we have not in the past year. You have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing (which we do not do), and we will not discriminate against you for exercising them. You may use an authorized agent to make a request. To exercise these rights, email privacy@thebuddylabs.com.

Data received from Meta (Facebook and Instagram) and Google is used only to provide the features above for the business that connected it, is never sold, and is deleted on disconnection or account deletion, in line with the Meta Platform Terms and the Google API Services User Data Policy, including the Limited Use requirements.

Blipzy is a tool for businesses and is not directed at children under 16. We do not knowingly collect data from children.

We work to protect your data, but if a breach happens that affects your personal information, we will notify you and the relevant authorities as required by the laws that apply, without undue delay, and tell you what we know and what we are doing about it.

If this policy changes in a way that matters, we will update the date above and note the change on this page before it takes effect.

Questions or requests: privacy@thebuddylabs.com. The Buddy Labs AI Inc.