Privacy Policy

Effective August 7, 2026. Every version of this page has been published the same day the thing it describes was built, before anybody has an account, so nobody's data has ever been collected under an older version of it.

August 7: a correction, and it matters more than an addition. This page said that disconnecting a platform deleted the content Blipzy had imported from it. That was never what the software did: disconnecting stops the flow and deletes the access token, and the imported content goes when you delete the business or your account. Corrected everywhere it appeared: three times on this page and once on the data deletion page.
August 7: three things Blipzy holds that this page had not named. The postal address you give us for your marketing emails, required by anti-spam law. The platform id of somebody who tells one of our businesses to stop messaging them, kept so we can refuse to message them again. And a record of a deletion request forwarded to us by Instagram or Facebook. The last two are kept indefinitely and on purpose, for the same reason as the email unsubscribe list.
August 4: Smart Answers, which let you point Blipzy at one of your own systems to answer a DM, has been removed. The paragraph that described it is replaced below by the webhook address you can still give Blipzy.
August 4: booking. If you turn it on, Blipzy asks Google when your calendar is busy, and only that. It also reads your own Instagram description, follower count and recent captions, if you connect Instagram, to learn how you write.
August 3: the one-tap changes Blipzy can make to your Google Business Profile when you press the button.
Earlier: reading your own website, review invitations, scorecard leads, the AI assistants used for visibility checks, and where connection tokens are actually stored.

Get Blipzy ("Blipzy") is a product of The Buddy Labs AI Inc.

Who we are

Blipzy is operated by The Buddy Labs AI Inc., a company based in Ontario, Canada. For the data you and your business give us to run Blipzy, we act as the data controller. For the messages and content that other people send to your connected accounts, we act as a processor on behalf of your business, which is the controller of its own customer data. You can reach us about privacy at privacy@thebuddylabs.com.

What Blipzy does

Blipzy answers what lands in your inbox. For a business that means its own Google reviews plus Instagram and Facebook comments and messages, with replies drafted in the business's voice and a report on how visible it is. For a creator, who has no storefront and no Google listing, it means the comments and direct messages on their own posts and nothing else. Either way we only process data for the account that connected it, and only from platforms that account connected itself.

Information we collect

Account details from your sign-in provider: name and email address.
Business details you enter: business name, category, address, website, phone number and brand voice.
A postal address for your marketing emails, if you send any through Blipzy. Anti-spam law in Canada and the United States requires a real sender address on commercial email, so it is printed in the footer of emails we send on your behalf. You give it to us; we never guess it.
When somebody messaging one of our businesses on Instagram or Facebook asks to stop being contacted, we record the platform id that sent that message so we can refuse to message them again. That id and nothing else. The same applies to a deletion request forwarded to us by Instagram or Facebook, where we keep a record that it arrived and was carried out.
What is published on your own website. If you give us its address, our servers fetch up to six pages from it and read what is printed there. We save your services and their prices, your opening hours, any email addresses and phone numbers on the page, your postal address, links to your social accounts, any booking links, the page title and description, and which booking or website software the page appears to use. We identify ourselves as BlipzyBot when we ask, we never sign in and we never fill in a form, and the only pages we ask for are the address you gave us, whatever it redirects to, and pages linked from it on that same site (plus wherever those redirect to, though we keep nothing from a page that turns out to be somewhere else). We save it so Blipzy can answer questions about your business without you retyping it, it is replaced every time we read the site again, and you can clear it at any time from your Playbook.
Content from platforms you connect (Google, Facebook, Instagram): public reviews of your business, and, once you authorize those platforms, comments and direct messages sent to your business accounts. Where the platform identifies the sender, we store that identifier so a reply can reach them.
Your own Instagram profile, if you connect it: the account name, the description you have written on it, your follower and post counts, and the captions of your recent posts. Blipzy reads these to learn how you write and what you are known for, so replies sound like you rather than like a bot. It keeps a weekly record of the follower and post counts so it can show you whether the account is growing. This is your own account, never anybody else's.
When your calendar is busy, if you turn on booking, Blipzy asks Google only for BUSY AND FREE TIME RANGES, using a permission that returns nothing else: no event titles, no descriptions, no guests, no locations. It does this so it can answer a customer who asks whether you have space. If you point Blipzy at a calendar that belongs to somebody else, or that you share with another business, the same limit applies: Blipzy can tell that a time is taken and can never tell what it is taken for or by whom. None of it is stored. The busy ranges are read to work out free slots for that one reply, and neither the busy ranges nor the times we offered are kept afterwards.
The email address of somebody you refer, if you use a referral link. We store it so the reward can be credited when they sign up, and for nothing else. We never message them because you entered them.
The time zone your browser reports when you sign up. It is the only way Blipzy can tell which day is today for you, and it is what stops a Monday night post being reported as a Tuesday one.
A counter of how many messages we have sent to each recipient, so the anti spam cap in our terms is real. The recipient is not stored: the counter is keyed on a one way hash of your business together with the recipient, so the table holds an unreadable string and a number and cannot be turned back into a list of people.
Customer contact details you give us for review requests: the names and email addresses you upload or enter so Blipzy can send review invitations on your behalf. You are responsible for having permission to contact them. We keep a record of who has been invited and who has unsubscribed, so nobody is invited twice and an unsubscribe is honored permanently.
If you run a free scorecard on our website without an account, and choose to enter your email to get the result: that email, the business you searched for, the score we produced, and the country the search was for, which comes from your connection and is country level only.
Your Google Business Profile data, once you verify with Google and confirm which listing is yours: the listing details Google holds (categories, description, hours, photos count, attributes), its performance statistics (how often it was seen, calls and clicks it received, and the search terms people used to find it), and, where your site is set up in Google Search Console, the search queries that bring people to your website. We use this to report on your own visibility, and to change your listing when you ask us to: from Visibility you can tap to put your website address, your phone number, a description or an open again notice onto the listing. Nothing is sent to Google unless you press that button, and we keep a record of what was sent and what Google answered.
Files you choose to upload, such as a menu or price list. The file is sent to Anthropic to read the text out of it, and we keep only that text, attached to your business and deleted with it. We do not store the file itself.
Usage records needed to run the service, such as counts of AI requests for rate limiting.
Product analytics: how the app itself is used (pages visited, features clicked), collected via PostHog to improve Blipzy. We do not use advertising trackers.
If you subscribe to a paid plan, payments are processed by Stripe. We never see or store your card details; we keep only your plan status.

How we use it

To show your reviews, comments and messages in one inbox.
To draft and, where you enable it, post replies in your brand voice.
To measure your visibility on search and AI engines and suggest improvements.
To email you the reports you asked for, and instant alerts for anything that needs you. Browser notifications are sent only if you turn them on, and you can turn them off in your browser at any time. When you turn them on, your browser gives us a delivery address for that browser, which we store so we can reach it. Sending a notification means handing it to whoever runs that address, which is Apple, Google or Mozilla depending on the browser you use. We delete the address when you turn notifications off.
To learn your reply style: replies you post or approve are analyzed to build a private, per-business style profile so future drafts sound like you. This profile is used only for your business and is deleted with it.
To publish your public profile page: if you share your Blipzy page, it displays your business details and customer reviews that are already public on the platforms they were posted to. It never shows private messages.
To get in touch about Blipzy if you ran a free scorecard and left your email. The report itself is shown on the page straight away, not emailed. Tell us and we will remove your address.

We do not sell personal information, and we do not use your data to advertise to anyone.

Why we are allowed to use it

Where privacy laws such as the GDPR ask for a legal basis, we rely on: performing our contract with you (to provide the features you signed up for); your consent (for optional things like product analytics, which you can decline); our legitimate interests (to keep Blipzy secure, prevent abuse, and improve the product), kept in balance with your rights; and, where it applies, meeting a legal obligation. You can withdraw a consent at any time without affecting what we did before.

AI processing

Review, comment and message text is processed by Anthropic's Claude models to analyze sentiment and draft replies. Content sent through the Anthropic API is not used by Anthropic to train models.

Separately, the visibility tools ask several public AI assistants what they say about your business, so we can report on how you show up in AI search. Those questions go to OpenAI, Perplexity and Google Gemini, and they contain your business name, location and the search wording being tested. They never contain a customer's review, message or contact details. Each of those assistants applies its own terms and its own retention to what it receives, which may differ from Anthropic's.

AI drafts are suggestions, not automated decisions

Blipzy uses AI to draft and score content, not to make decisions that have a legal or similarly significant effect on any person. You control whether a reply posts automatically or waits for your approval, and you can keep any topic in human hands. We do not use AI to profile the people who contact you, whether for advertising or for eligibility decisions.

Service providers

We use a small set of processors to run Blipzy: Supabase (database and authentication), Vercel (hosting), Anthropic (AI drafting and analysis), OpenAI, Perplexity and Google Gemini (AI visibility checks only, as described above), Resend (email delivery), Stripe (payments), PostHog (product analytics), Sentry (error monitoring, so we can find and fix problems), UptimeRobot (checking the site is up), and search data providers (Serper, SerpApi) for public listing and ranking data. Platform data from Google and Meta is accessed through their official APIs under their terms, which for booking means Google Calendar's free and busy service and nothing else on your calendar.

If you give Blipzy a webhook address of your own (in Your voice, under the Business Brain), Blipzy posts each Instagram and Facebook DM and comment to that address as it arrives, and posts the reply again when Blipzy answers one by itself. Each post carries the sender's name and the text they wrote. Reviews are not sent to it. That destination is chosen by you, it is not one of our processors, and whatever happens to the data once it arrives there is governed by whoever runs it. Remove the address and the posts stop immediately.

A small weather touch

The app can tint its background to match your local sky. To do that it uses the approximate, city-level location our hosting provider derives from your connection (never GPS, never a browser permission prompt) to look up the current weather from Open-Meteo, a public weather service. We do not store your location or send anything that identifies you to the weather service, and if the lookup fails the app simply uses its default look.

Cookies and Do Not Track

Blipzy sets a small number of cookies: to keep you signed in, to remember which of your businesses is active, to remember your light or dark preference, and, during sign-in to a platform, to protect that connection from being hijacked. If you arrive through someone's referral link we also set a cookie for 30 days so their referral is credited if you sign up; you can clear it in your browser at any time. Product analytics stays off until you accept it, and you can decline. We do not use third-party advertising cookies.

Once you are signed in, your business name, your email and your account's id are also kept in your own browser's local storage so the sign-in screen can greet you next time. That stays on your device. We clear it when you delete your account, when you delete the business it names, when you press "Not you?" on the sign-in screen, and whenever we check and find the account no longer exists. Clearing your browser data removes it too. Because there is no common standard for browser Do Not Track signals, we do not respond to them, but our analytics choice above gives you the same control.

Security

Data is encrypted in transit and encrypted at rest by our database provider, and access is scoped per business at the database level (row-level security). The access tokens Blipzy holds for the platforms you connect are stored in our database, in tables that no browser session can read: they are reachable only by our server. Our own service keys are held in our hosting provider's encrypted configuration and are never in the code. Replies can only be sent for the business that connected the account.

Where your data is processed

Blipzy runs on providers located in the United States and Canada, so your data is processed and stored there. When information moves across borders, we rely on our providers' safeguards for international transfers (such as standard contractual clauses where they apply) to keep it protected to the standard of this policy.

How long we keep it

Account and business information: while your account is active, then deleted when you close it.
Reviews, messages and drafts: while the related business exists, and deleted when you delete the business or close your account. Disconnecting a platform stops us receiving anything further from it and deletes the access token, but it does not delete what was already imported. That is deliberate: a disconnection is often temporary, and Instagram does not let us re-read messages from before a reconnection, so deleting them would lose them for good. If you want the imported content gone, delete the business or your account, which does remove all of it.
Your private voice profile: only for your business, and deleted with it.
What we read from your website: kept while the business exists, replaced whenever we read the site again, and cleared straight away when you press Forget what we read in your Playbook.
Review invitation records: kept while the business exists, so an invitation is not sent twice. Unsubscribe records are kept even after the rest is deleted, in a separate list with no link to the business or the account, because forgetting an unsubscribe would mean contacting someone who asked us not to. That list holds the address and nothing else about you.
Requests to stop being messaged on Instagram or Facebook: kept indefinitely and on purpose, for the same reason as the unsubscribe list above. When somebody tells a business to stop, we keep the platform id that sent that message so we can refuse to message them again. It is that id and nothing else, it is not linked to any other record about them, and it survives the business being deleted, because an opt-out that a deletion can erase is not an opt-out.
Deletion requests received from Instagram or Facebook: we keep a record of the request and the platform id it names, so we can show the platform that it was carried out. Kept indefinitely for the same reason.
The postal address a business gives us for its marketing emails: kept while the business exists and deleted with it. Anti-spam law in Canada and the United States requires a real sender address on commercial email, so it appears in the footer of emails sent on that business's behalf.
Scorecard leads (an email entered on our website without an account): kept for up to 24 months, then deleted. To have one removed sooner, email us at the address below.
Limited records we must keep for legal, tax or security reasons (such as billing records): for as long as the law requires, then deleted.
Routine backups: cycled out on a rolling basis after deletion.

Retention and deletion

You can delete individual businesses, or your whole account and its data, at any time from inside Blipzy; see data deletion instructions. Disconnecting a platform stops the flow of new data and deletes our access token; deleting the business or your account is what removes the content already imported.

Your privacy rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a copy in a portable form, to limit or object to certain processing, and to withdraw a consent. Much of this you can do yourself in the app; for anything else, email privacy@thebuddylabs.com and we will respond within the time the law allows. You do not need a Blipzy account to exercise any of this. If a business you dealt with uses Blipzy and we hold your review, your comment, your message or your email address, write to the same address with the name of the business and roughly when you contacted them. How to ask. We will not treat you differently for exercising these rights. If you are in Canada you may also contact the Office of the Privacy Commissioner, and in the UK or EU your local data protection authority, if you are not satisfied with our response.

For California residents

In the past year we have collected the categories described under "Information we collect" above (identifiers, business and contact details, connected-platform content, and usage and analytics data). We do not sell or share your personal information as those terms are used under California law, and we have not in the past year. You have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing (which we do not do), and we will not discriminate against you for exercising them. You may use an authorized agent to make a request. To exercise these rights, email privacy@thebuddylabs.com.

Meta and Google platform data

Data received from Meta (Facebook and Instagram) and Google is used only to provide the features above for the business that connected it, and is never sold. Disconnecting stops the flow and deletes our access token, so we can neither receive nor send anything more. Content already imported is deleted when the business or the account is deleted. All of this is in line with the Meta Platform Terms and the Google API Services User Data Policy, including the Limited Use requirements.

Children

Blipzy is a tool for businesses and is not directed at children under 16. We do not knowingly collect data from children.

If there is a data breach

We work to protect your data, but if a breach happens that affects your personal information, we will notify you and the relevant authorities as required by the laws that apply, without undue delay, and tell you what we know and what we are doing about it.

Changes to this policy

If this policy changes in a way that matters, we will update the date above and note the change on this page before it takes effect.

Who we are

Blipzy is a product of The Buddy Labs AI Inc., incorporated in Ontario, Canada. Reach us by email at the address below; we will give you a postal address on request.

Contact

Questions or requests: privacy@thebuddylabs.com. The Buddy Labs AI Inc.