Draft

Privacy

Draft placeholder. Legal review required before commercial launch.
This text was written by an engineer to describe intended behaviour. It has not been reviewed by a qualified lawyer, it is not a contract, and it must not be relied upon.

What is collected today

This deployment has no backend and no database.

The company profile you confirm stays in your browser. It is held in this browser's local storage, keyed on your company domain. It is never transmitted. Clearing your browser storage deletes it. Saved, watched and dismissed opportunities are held the same way.

The website you give us is read. BuzzBaboon fetches the public pages of that site (the homepage and up to two about or services pages) and sends their text, with the domain, to a language model provider to write the company profile you then confirm or correct. The provider is chosen by configuration and named on the sources page. Nothing you type is sent with it, the profile comes back to your browser, and the site text is not kept by BuzzBaboon.

The company domain you give us is sent to analytics as an event property. The domain only, so BuzzBaboon can count how many distinct companies have been checked. It is not published anywhere, and it is only sent if you accepted analytics on the consent banner.

No email address is ever sent to analytics. Every event property is checked before it is sent and anything that looks like an address is replaced.

Saving your results sends your first name, your work email, your company domain, the profile you confirmed, the scan date, a scan reference, whether you asked for alerts, and where you arrived from (campaign parameters and referrer, where present) to a Google Apps Script that writes one row to a private Google Sheet and emails a notification to BuzzBaboon. Turning on alerts sends the same, plus your chosen frequency. Relevance feedback sends the signal, the company domain and the score, and asks for no email address. Corrections and missing-source submissions send what you typed into them.

What will be collected

Once email delivery exists: which developments you open, so the brief can be made useful. Analytics events are listed in the methodology.

Points a lawyer must settle

UK GDPR lawful basis for processing business contact data. Whether a company domain typed by a visitor is personal data where the company is a sole trader. Retention periods. Processor agreements with Google for the Sheet and for analytics. International transfers. Subject access and deletion procedure. Cookie and consent position.