Privacy Policy
Last updated: April 22, 2026
BuzzMesh Creator takes your privacy seriously. This policy explains exactly what data we collect, why we collect it, and how you can control it.
BuzzMesh Creator ("we", "our", or "us") operates https://www.buzzmesh.ai and the BuzzMesh Creator platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
Information We Collect
Information you provide directly
Account information
Name, email address, and password (stored as a bcrypt hash — we never store plaintext passwords).
Profile information
Optional details such as your company name, website, and content preferences.
Payment information
Billing details processed by Stripe. We do not store full card numbers on our servers.
Communications
Messages you send us via email or support channels.
Information collected automatically
Usage data
Pages visited, features used, time spent, clicks, and navigation paths within the Service.
Device & log data
IP address, browser type, operating system, referring URLs, and timestamps.
Cookies
Session cookies for authentication and analytics cookies to understand how the Service is used.
Information from third-party services
If you sign in via Google OAuth, we receive your name, email, and profile picture from Google. We do not receive your Google password.
How We Use Your Information
- Provide, operate, and maintain the Service
- Process transactions and manage your subscription
- Send transactional emails (account confirmation, password reset, billing receipts)
- Send product updates and newsletters — you can unsubscribe at any time
- Analyse usage patterns to improve features and performance
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
Contract performance
Processing necessary to provide the Service you signed up for.
Legitimate interests
Analytics, security, and improving the Service.
Consent
Marketing emails and non-essential cookies.
Legal obligation
Compliance with applicable laws.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g., financial records).
Data Security
We implement industry-standard technical and organisational measures to protect your data:
TLS encryption
All data in transit is encrypted.
Bcrypt hashing
Passwords are never stored in plaintext.
Access controls
Role-based access to production systems.
No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Deletion
Request deletion of your data ("right to be forgotten").
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests.
Withdraw consent
Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will delete it promptly. If you believe we may have collected data from a child, please contact us.
Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we may also notify you by email. Your continued use of the Service after any changes constitutes your acceptance of the new policy.