Privacy Policy

Effective Date: August 28, 2025
Last Updated: August 28, 2025
Version: 1.0

1. Introduction

SmartBuzzAI (“we,” “our,” or “us”) operates the website smartbuzzai.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our services.

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Service.

2. Information We Collect

2.1 Personal Information You Provide

We may collect the following categories of personal information that you voluntarily provide:

• Identity Information: Name, username, email address, phone number
• Account Information: Profile information, preferences, account settings
• Communication Data: Messages, feedback, support requests, survey responses
• Transaction Information: Payment details, billing address, purchase history
• Professional Information: Job title, company name, industry (if relevant to our services)

2.2 Information Automatically Collected

When you use our Service, we automatically collect:

• Technical Data: IP address, browser type and version, device information, operating system
• Usage Data: Pages visited, time spent on pages, click patterns, referral sources
• Location Data: General geographic location based on IP address
• Cookie Data: Information collected through cookies and similar technologies

2.3 Information from Third Parties

We may receive information about you from:

• Social media platforms (if you connect your accounts)
• Business partners and affiliates
• Public databases and information services
• Marketing and analytics providers

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

3.1 GDPR (for EU/UK residents)

• Contract Performance: Processing necessary for contract execution or pre-contractual measures
• Legitimate Interests: Our legitimate business interests (e.g., service improvement, security)
• Consent: Where you have provided explicit consent
• Legal Obligation: Compliance with applicable laws and regulations
• Vital Interests: Protection of life or physical safety (rare circumstances)

3.2 Other Jurisdictions

• Business Purposes: As permitted under applicable privacy laws
• Consent: Where required by law
• Legal Compliance: To meet regulatory and legal obligations

4. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: Delivering, maintaining, and improving our services
• Account Management: Creating and managing user accounts
• Communication: Responding to inquiries, providing support, sending notifications
• Personalization: Customizing user experience and content
• Analytics: Understanding usage patterns and service performance
• Marketing: Sending promotional materials (with appropriate consent)
• Security: Detecting fraud, preventing abuse, ensuring platform security
• Legal Compliance: Meeting regulatory requirements and legal obligations
• Business Operations: Internal administration and business development

5. Cookies and Similar Technologies

5.1 Cookie Types

We use the following types of cookies:

• Essential Cookies: Necessary for basic website functionality
• Performance Cookies: Collect anonymous usage statistics
• Functional Cookies: Remember user preferences and settings
• Marketing Cookies: Track users across websites for advertising purposes

5.2 Cookie Management

You can control cookies through:

• Browser settings and preferences
• Our cookie consent management tool
• Third-party opt-out mechanisms
• Industry opt-out programs

5.3 Do Not Track

We currently do not respond to “Do Not Track” signals but provide other privacy controls as described in this policy.

6. Information Sharing and Disclosure

6.1 We May Share Information With:

Service Providers: Third-party vendors who assist with:

• Cloud hosting and data storage
• Payment processing
• Analytics and performance monitoring
• Customer support services
• Marketing and advertising platforms

Business Partners: Trusted partners for joint services or promotions

Legal Requirements: When required by law, regulation, or court order

Business Transfers: In connection with mergers, acquisitions, or asset sales

Consent: With your explicit permission for specific purposes

6.2 We Do Not Sell Personal Information

We do not sell, rent, or trade personal information to third parties for monetary consideration.

7. Your Privacy Rights

7.1 General Rights

All users have the right to:

• Access personal information we hold
• Request correction of inaccurate data
• Opt-out of marketing communications
• File complaints with supervisory authorities

7.2 GDPR Rights (EU/UK Residents)

• Right of Access: Obtain copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Revoke consent for consent-based processing

7.3 CCPA Rights (California Residents)

• Right to Know: Information about data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of personal information sales (if applicable)
• Right to Non-Discrimination: Equal service regardless of privacy choices

7.4 Exercising Your Rights

To exercise these rights, contact us at:

• Email: smartbuzzai@gmail.com
• Mail: PO Box 346, Prairieville, LA 70769

We will respond to requests within applicable legal timeframes (typically 30 days).

8. Data Retention

8.1 Retention Periods

We retain personal information for:

• Account Data: Duration of account plus 3 years after closure
• Transaction Records: 7 years for financial and tax compliance
• Communication Data: 2 years after last interaction
• Marketing Data: Until consent withdrawal or opt-out
• Legal Hold Data: As required by legal proceedings or investigations

8.2 Retention Criteria

Retention periods are based on:

• Business necessity and service provision
• Legal and regulatory requirements
• User account status and activity
• Data sensitivity and privacy risk

9. Security Measures

9.1 Technical Safeguards

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Network Security: Firewalls, intrusion detection, and monitoring systems
• Secure Development: Security-by-design principles and regular code reviews

9.2 Organizational Safeguards

• Privacy Training: Regular staff training on data protection
• Data Processing Agreements: Binding contracts with service providers
• Incident Response: Formal procedures for security incidents
• Regular Audits: Periodic security assessments and penetration testing

9.3 Limitations

No security system is 100% secure. We cannot guarantee absolute security but maintain industry-standard protections.

10. Data Breach Notification

10.1 Internal Procedures

• Detection: Continuous monitoring and incident detection systems
• Assessment: Rapid evaluation of breach scope and risk
• Containment: Immediate steps to limit exposure and prevent further access
• Investigation: Forensic analysis to determine cause and impact

10.2 Notification Timeline

• Supervisory Authorities: Within 72 hours of becoming aware (GDPR)
• Affected Users: Without undue delay when high risk to rights and freedoms
• Other Jurisdictions: As required by applicable breach notification laws

10.3 Notification Content

Breach notifications will include:

• Nature and scope of the incident
• Types of data potentially affected
• Likely consequences and risks
• Measures taken to address the breach
• Recommended actions for affected individuals

11. International Data Transfers

11.1 Transfer Mechanisms

When transferring data internationally, we use:

• Adequacy Decisions: EU Commission-approved countries
• Standard Contractual Clauses: EU-approved data transfer agreements
• Binding Corporate Rules: For intra-group transfers
• Certification Programs: Privacy Shield successors and equivalent frameworks

11.2 Safeguards

All international transfers include appropriate safeguards to protect personal data according to applicable privacy laws.

11.3 Transfer Locations

Data may be transferred to and processed in:

• United States
• European Union member states
• Other countries with adequate data protection laws

12. Children’s Privacy

12.1 Age Restrictions

Our services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages.

12.2 Parental Rights

If we become aware that we have collected information from a child without proper consent, we will delete such information promptly.

Parents may contact us to:

• Review their child’s information
• Request deletion of their child’s data
• Refuse further collection of their child’s information

13. Third-Party Links and Services

13.1 External Links

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to such external sites.

13.2 Third-Party Responsibility

We are not responsible for the privacy practices of third-party websites or services. Users should review the privacy policies of any external sites they visit.

14. Changes to This Privacy Policy

14.1 Updates

We may update this Privacy Policy periodically to reflect:

• Changes in our practices
• Legal or regulatory requirements
• Service enhancements
• User feedback

14.2 Notification

We will notify users of material changes through:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications (if applicable)

14.3 Continued Use

Continued use of our Service after changes take effect constitutes acceptance of the updated Privacy Policy.

15. Contact Information

15.1 Privacy Officer

For privacy-related questions, requests, or complaints:

Email: smartbuzzai@gmail.com
Subject Line: Privacy Policy Inquiry

Mailing Address:
SmartBuzzAI Privacy Officer
PO Box 346
Prairieville, LA 70769
United States

15.2 Response Time

We strive to respond to all privacy inquiries within 5 business days and fulfill rights requests within applicable legal timeframes.

15.3 Supervisory Authority Contact

EU/UK residents may also contact their local data protection authority:

• EU: European Data Protection Board (edpb.europa.eu)
• UK: Information Commissioner’s Office (ico.org.uk)

16. Legal Provisions

16.1 Severability

If any provision of this Privacy Policy is found to be unenforceable or invalid, the remainder of the policy will remain in full force and effect.

16.2 Jurisdiction

This Privacy Policy is governed by the laws of the State of Louisiana, United States, without regard to conflict of law principles. Disputes will be resolved in the courts of Louisiana.

16.3 Entire Agreement

This Privacy Policy, together with our Terms of Service, constitutes the entire agreement regarding privacy matters between you and SmartBuzzAI.

17. Revision History

Last Reviewed: August 28, 2025
Next Scheduled Review: February 28, 2026

This Privacy Policy is effective as of the date listed above and supersedes all previous versions. For questions about this policy, please contact us at smartbuzzai@gmail.com.