Privacy Policy

Effective Date: May 4th, 2026

This Privacy Policy describes the practices of Buzzator (“Buzzator,” “we,” “us,” or “our”) regarding the collection, use, disclosure, and safeguarding of personal information associated with the Buzzator platform (the “Service”). Our Service facilitates social media content creation, scheduling, distribution, data analytics, and team-based collaboration. This policy also governs the use of buzzator.com and its associated sub-domains (the “Site”).

Scope of Policy

This policy pertains to all individuals who interact with us, including:

• Users visiting our Site.
• Registered account owners and participants within customer Brand workspaces.
• Potential customers (prospects) and participants of our events.

Consent and Terms By accessing our Site or utilizing the Service, you confirm that you have read and understood the terms of this Privacy Policy. For comprehensive details regarding your legal agreement with us, please consult our Terms of Service.

1. Who We Are (Data Controllers)

The Buzzator platform is operated through a joint arrangement between two legal entities. We have coordinated our responsibilities to ensure your data is protected. For the purposes of this Policy, “Buzzator,” “we,” “us,” or “our” refers to:

• Buzzator LLC: A Wyoming limited liability company (30 N Gould St, Ste N, Sheridan, WY 82801, USA). This is our primary operating entity and your central point of contact. It manages account registrations, payment processing, customer support, and the technical integrations with third-party social media platforms (such as Meta, LinkedIn, and TikTok).
• AI Global Reach LLC: A Delaware limited liability company (8 The Green, Ste B, Dover, DE 19901, USA). This entity is the legal owner of the platform’s technology and assets and acts as a joint controller regarding account and subscription data.

Essence of our Joint Arrangement: We have designated Buzzator LLC as the entity responsible for providing you with this privacy information and serving as the lead contact for exercising your data subject rights (such as access or deletion requests). While both entities collaborate to provide the Service, Buzzator LLC handles the day-to-day administration of your privacy choices. Regardless of this arrangement, you may exercise your rights in respect of and against each of the controllers.

For all day-to-day privacy matters, data access requests, or complaints, Buzzator LLC is your primary point of contact. You may reach our legal compliance team at [email protected].

For residents of the EU, UK, or Canada: Please see Section 17.3: Regional Representatives below for specific local contact details as required by law.

2. Overview of the Service

Buzzator provides a centralized environment for cross-platform social media management, allowing users to link nine or more networks to orchestrate, deploy, and assess their digital content. The platform’s core architecture consists of:

• Content Orchestration: A synchronized posting calendar and automated scheduling infrastructure.
• Asset Management: A dedicated media repository equipped with native image manipulation tools.
• Delivery & Insights: Continuous publishing queues and detailed data analytics.
• Generative AI Suite: Sophisticated tools for the creation of individual posts and broader marketing initiatives.
• The "Brand Intelligence" Engine: A proprietary indexing system that aligns AI-generated outputs with your specific brand identity by referencing your uploaded assets.
• Unified Engagement Hub: An AI-supported centralized inbox for managing cross-network comments and direct messages.
• Organizational Management: Administrative frameworks for coordinating team members and distinct multi-brand workspaces.
• Third-Party Connectivity: API-driven integrations with external digital platforms.

Service Limitations: Please be advised that the availability of specific functionalities is determined by your chosen subscription plan, the specific third-party platforms you choose to authorize, and the volume of brand-specific data you provide to the Service.

3. Categories of Information Collected

3.1 Identity and Account Credentials

• User Profile Information: Full name, email, salted-hash passwords, role within your organization, profile image, and regional/language settings.
• Third-Party Logins: Public profile details and email addresses provided when using external identity providers for authentication.
• Brand Ecosystem Data: Participation in workspaces, membership status, issued or accepted invites, and specific access levels assigned within a Brand workspace.
• Sensitive Personal Information: We do not collect "Sensitive Personal Information" (such as precise geolocation, health data, biometric identifiers, or neural data) as defined by US State Privacy Laws without your prior, affirmative opt-in consent. If we process such data based on your consent, you maintain the right to withdraw that consent at any time. For residents of states such as Texas, please note that we do not process "Sensitive Data" for purposes of targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects without your express, prior consent.

3.2 Integrated Platform and API Data

When linking social media or communication accounts to Buzzator, we utilize platform APIs to collect and store:

• Security Tokens & Metadata: Username, unique identifiers, account-level stats (e.g., follower counts), and OAuth access/refresh tokens (secured via authenticated symmetric encryption at rest).
• Functional Content: Data required for service delivery, including drafted or scheduled posts, existing feed content, replies, and direct messages (if the inbox feature is active).
• Engagement Metrics: Aggregated audience data and post-performance stats such as reach, impressions, and clicks.

Third-Party Compliance & Revocation:

• YouTube and Google APIs: When you connect a YouTube account to Buzzator, you authorize us — through the Google OAuth 2.0 consent screen — to access certain Google user data on your behalf so that we can deliver Buzzator's YouTube features. We request only the minimum permissions required and use what we receive solely for the purposes described below.

  What we access. Your Google account identity (name, email, profile picture) so you can see which account is connected; your YouTube channel identity and the metadata of videos you have uploaded (title, description, thumbnail, published date); the comments and replies left on your own videos; and aggregate YouTube Analytics figures for your channel (views, watch time, likes, comments, subscribers gained, traffic sources). When you compose a new video inside Buzzator, we also access the video file and metadata you provide so we can upload it on your behalf.

  How we use it. To label the connected account in your Buzzator workspace; to publish or schedule videos you compose in Buzzator to your channel when you click Post Now or Schedule; to display your recent uploads on your dashboard; to surface viewer comments in our unified Engagement Inbox so you can read and reply to them in one place; to post your reply when you submit it; and to render your YouTube performance dashboard. Every Google API call is server-side, on demand, and triggered by an explicit user action — we do not run background crawlers, do not access channels you do not own, and do not access videos outside your own channel. We do not use Google user data to train any AI or machine-learning model, ours or our vendors'.

  How we store it. OAuth access and refresh tokens are encrypted at rest with authenticated symmetric encryption before being written to our database hosted on Microsoft Azure. Cached channel identity, video metadata, comments, replies, and analytics snapshots are stored in the same database and encrypted at rest at the storage layer. Video files you upload through Buzzator are temporarily buffered on our infrastructure only for the duration of the upload to YouTube, and deleted from our side as soon as YouTube confirms ingestion.

  How long we keep it. OAuth tokens and cached YouTube data are retained while the YouTube connection is active. When you disconnect the integration in Buzzator — or revoke access at https://myaccount.google.com/permissions — we delete the encrypted tokens and purge cached channel metadata, comments, and analytics snapshots within 30 days (sooner on request). Closed Buzzator accounts are fully purged in line with Section 9 of this Policy.

  How we share it. We do not sell Google user data, do not use it for advertising, and do not allow human access except (a) with your explicit consent, (b) to investigate a credible security incident or abuse, (c) where required by applicable law, or (d) in aggregated or anonymised form that cannot identify you or your channel. Google user data is processed by a small set of sub-processors that operate the service (cloud infrastructure provider, payment processor, customer support tooling); a current list is available on request. We do not share Google user data with any other Buzzator customer.

  Compliance. Buzzator's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube API Services subject to the YouTube API Services Terms of Service and the YouTube API Services Developer Policies. When you connect a YouTube account you also agree to the YouTube Terms of Service and the Google Privacy Policy.

  Your controls. You can revoke Buzzator's access at any time at https://myaccount.google.com/permissions or from inside Buzzator (Brand Settings → Connections → YouTube → Disconnect). To request a copy or deletion of the Google user data we hold about you, email [email protected].

• Meta (Instagram, Facebook, Threads): Services are governed by Meta Terms, Instagram Terms, and the Meta Privacy Policy. Revoke access via Meta Accounts or Business Tools.

• Other Platforms: Revoke access through settings on TikTok, LinkedIn, X/Twitter, Pinterest, or Bluesky.

3.3 Brand Intelligence and Knowledge Base

Our AI uses "Brand Assets" you provide—such as style guides, tone-of-voice docs, logos, sample posts, and audience profiles—to generate content. We extract embeddings and metadata to ensure AI outputs match your visual and verbal identity. These assets remain isolated within their specific Brand workspace.

3.4 User-Generated Content

Media (images/video/audio), text, captions, hashtags, prompts, internal comments, and edits made within our in-app editor.

3.5 Transactional and Payment Data

Subscription details and tax identifiers. While our processor handles full payment details, Buzzator only stores tokenized references, card brand, expiry, and the last four digits.

3.6 Technical Logs and Usage Metrics

• Device Info: IP address, OS, browser version, and approximate location.
• Telemetry: Feature usage, API calls, error logs, and system performance.
• Security Events: Session tokens, MFA enrollment, and login history.
• Bot Protection: IP address, basic browser/device info, and a one-time security token sent to Cloudflare Turnstile on our sign-in and sign-up pages to block automated abuse. Not used for tracking or marketing.

3.7 Support and Feedback

Communications via email or chat, survey responses, and engagement tracking for marketing emails (e.g., open/click rates).

3.8 Consent Management

We maintain records of marketing opt-ins, including timestamps and the specific consent text shown, to fulfill GDPR Article 7 requirements.

4. Utilization of Data and Legal Grounds

We process your information based on the following justifications:

• Service Delivery: Running Brand workspaces, AI pipelines, and social publishing. (Contractual Necessity)
• Financial Operations: Managing invoices and preventing fraud. (Contractual Necessity / Legal Mandate)
• Security & Protection: Preventing infrastructure attacks and enforcing terms. (Legitimate Interest / Legal Mandate)
• Product Improvement: Debugging and A/B testing features. (Legitimate Interest)
• Communication: Sending account alerts or requested marketing. (Contractual Necessity / Consent)
• Legal Defense: Complying with lawful data requests. (Legal Mandate / Legitimate Interest)

Note: We do not sell your data or use your private Brand Assets or inbox messages for third-party advertising.

5. Artificial Intelligence and Automated Features

5.1. How AI Powers the Service Our platform utilizes advanced AI to streamline social media management, including the generation of captions, visual briefs, campaign structures, and analytics summaries. To provide these features, we transmit your specific prompts and selected Brand Assets to external AI model providers who act as our sub-processors. These providers may change as technology evolves; a current list of our AI sub-processors is available upon request.

5.2. Data Privacy and Model Training We prioritize the confidentiality of your data. Through our enterprise agreements, we strictly prohibit our AI providers from utilizing your inputs (prompts) or outputs (generated content) to train their machine learning models. Your data remains isolated and is not used to improve third-party AI systems.

5.3. Accuracy and Human Oversight Because AI outputs are generated probabilistically, they may occasionally be inaccurate or inconsistent. You maintain full responsibility for reviewing, editing, and fact-checking all AI-generated content before it is published or shared. Our AI tools are intended to assist, not replace, human judgment.

AI Logic and Profiling: Our AI generates content and analytics based on a probabilistic analysis of your Brand Assets and provided prompts. It does not perform automated processing that produces legal or similarly significant effects on users without human intervention. You have the right to request a description of the logic used in our AI-generated performance summaries.

5.4. User Control and Customization You retain complete authority over how much automation you use. You may choose to:

• Use AI for end-to-end post generation.
• Utilize AI for initial drafts and then refine them manually.
• Bypass AI entirely by creating content from scratch or using our manual editing tools.

5.5 AI Content Labeling and User Compliance

A. Provision of Transparency Tools

Buzzator offers integrated features designed to help identify AI-generated or modified content. These include:

• Visible Watermarking: An optional toggle to apply a visual indicator identifying the media as AI-generated.
• Invisible Metadata: The embedding of machine-readable provenance data (such as C2PA standards) into the file’s technical headers.

B. Disclaimer of Regulatory Responsibility

While Buzzator provides these tools as a convenience, the provision of such features does not constitute legal advice or a guarantee of regulatory compliance. Laws such as the EU AI Act, the California AI Transparency Act, and other regional statutes impose specific, varying obligations on how content must be disclosed.

• No Warranty of Alignment: Buzzator does not warrant that its watermarking or metadata features will satisfy the specific legal requirements of your jurisdiction or the requirements of third-party social media platforms.
• No Liability for Non-Compliance: Buzzator LLC and AI Global Reach LLC expressly disclaim any liability for fines, penalties, or legal actions resulting from your failure to correctly label content as required by law.

C. Sole Responsibility of the User (The "Deployer")

As the individual or entity publishing the content, you are the "Deployer" under most AI regulations. You maintain sole and exclusive responsibility for:

• Determining whether a specific post requires a label (e.g., if it constitutes a "deepfake" or relates to matters of public interest).
• Ensuring the accuracy and prominence of any disclaimers provided to the public.
• Verifying that your use of AI-generated content complies with the specific terms of the social media networks you connect to the Service.

6. Data Roles: Controller vs. Processor

6.1 When Buzzator is the Data Controller Buzzator acts as the "Data Controller" for information used to manage our business relationship and protect our platform. This includes data related to:

• User accounts and profile identity.
• Subscription billing and financial records.
• Website analytics and system telemetry.
• Marketing communications and security logs.
• General administration of the Brand Intelligence engine.

6.2 When Buzzator is the Data Processor For the content you distribute via our Service—including the personal data of your social media followers, audience members, and messaging contacts—you are the Data Controller and Buzzator acts as your Data Processor. In this capacity, we process this data only on your behalf and according to your instructions. As the Controller of this data, you are responsible for:

• Establishing a valid legal basis for processing (e.g., consent or legitimate interest).
• Providing the necessary transparency notices to your end-users.
• Managing and fulfilling requests from your users to exercise their privacy rights.

6.3 Data Processing Addendum (DPA) To formally govern this relationship, we offer a standard Data Processing Addendum (DPA). This agreement incorporates the current EU Standard Contractual Clauses (SCCs) and the UK Addendum to ensure compliant international data transfers where applicable. To receive and sign our DPA, please contact our legal team at [email protected].

7. Data Disclosure and Recipients

We maintain a strict policy against selling your personal information or renting it to third-party marketers. We only distribute your data to the following categories of recipients:

• Internal Entities: Buzzator LLC and AI Global Reach LLC exchange data to facilitate the joint operation of the Service. Specifically, the technical permissions and tokens managed by Buzzator LLC are utilized by the automated publishing pipelines and technology owned by AI Global Reach LLC to execute tasks on your behalf.
• Service Providers and Sub-processors: We engage third-party vendors to support our infrastructure. This includes cloud hosting, managed databases, content delivery networks (CDNs), identity management, AI model providers, payment gateways, and tools for analytics, error tracking, and customer support. These vendors are contractually bound to process data only under our direction and must maintain industry-standard security measures. A list of material sub-processors is available upon request.
• Cloudflare (Bot Protection): We use Cloudflare Turnstile on our sign-in and sign-up pages to block automated abuse. Cloudflare receives the technical signals listed in Section 3.6 to perform the check. See Section 15 for their privacy notice.
• Integrated Social Media Platforms: When you choose to publish or analyze content, we transmit or retrieve information from the specific third-party networks you have linked. Your data on those platforms is subject to their respective privacy policies.
• Workspace Collaborators: Your content, Brand Assets, drafts, and communication within the platform are visible to other authorized members of your specific Brand workspace, based on the permissions and roles you or your administrator have assigned.
• Professional Consultants: We may share necessary information with our legal counsel, accountants, auditors, and insurers, provided they are bound by professional confidentiality obligations.
• Legal and Regulatory Authorities: We may disclose data if required by a court order, subpoena, or valid government request, or when essential to prevent fraud, address security vulnerabilities, or protect individuals from harm. If legally permitted, we will make reasonable efforts to refer such requests to you directly.
• Corporate Transitions: In the case of a business merger, asset sale, restructuring, or financing, your data may be transferred to a successor entity. We will require any such successor to uphold the commitments made in this Privacy Policy.
• Residents of certain states, including Delaware, have the right to request a list of the specific third parties (not just categories) to whom we have disclosed personal data.

8. Cross-Border Data Transfers

Buzzator maintains its primary operations within the United States. Our service infrastructure is hosted on third-party cloud platforms, and we engage sub-processors located in the U.S., the European Union, the United Kingdom, and other global regions. Consequently, your personal information may be moved to and processed in jurisdictions outside your home country. Some of these locations may not be formally recognized by the European Commission, the UK Information Commissioner’s Office (ICO), or other regulatory bodies as offering an "adequate" level of data protection.

For data transfers originating in the European Economic Area (EEA) or the UK to countries lacking an adequacy decision, we ensure your information remains protected by:

• Contractual Safeguards: Utilizing the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, where applicable.
• Security Enhancements: Implementing supplementary technical and organizational protocols, including authenticated encryption for data both in transit and at rest, rigorous internal access controls, and strict contractual limitations on how our sub-processors manage your data.

You have the right to request a copy of the specific safeguards governing your data transfers by contacting us at [email protected].

9. Data Storage and Retention Periods

We retain your information only for the duration necessary to fulfill the purposes outlined in this Policy. Our specific retention schedules are as follows:

• User Account Information: Maintained for the life of your active account. Upon closure, we preserve this data for a grace period of up to 90 days to facilitate potential recovery. Thereafter, it is permanently purged or anonymized, unless a legal hold applies.
• Brand Intelligence & Assets: Stored as long as the relevant Brand workspace remains active. Individual assets are removed from the active index immediately upon deletion. If a workspace is closed, all associated embeddings and source documents are deleted within a reasonable timeframe.
• Pending Content: Drafts and scheduled posts are kept until they are successfully published or manually removed by the user.
• Historical Analytics: Published post records and performance metrics are kept for the duration of your account to provide you with continuous historical insights.
• Connection Tokens (OAuth): Valid tokens are maintained while the platform link is active. If a connection is revoked—either via our Service or through the third-party platform—the associated tokens are deleted without delay.
• Communication Data: Unified inbox messages and conversation histories are retained while your account is active, though users may delete specific threads at any time.
• Financial & Tax Records: Transactional data and invoices are preserved in accordance with statutory tax and accounting obligations (generally 7 years).
• System Logs: We typically keep operational and security telemetry for a maximum of 12 months for troubleshooting and auditing purposes.
• Disaster Recovery Backups: Encrypted backups of our database follow a standard rotation schedule and are fully overwritten within 30 to 90 days following a deletion from our live environment.

Extended Retention: We may extend these periods when necessary to comply with legal mandates, resolve ongoing disputes, prevent fraudulent activity, or respond to regulatory inquiries.

10. Information Security Protocols

We implement a comprehensive framework of administrative, physical, and technical measures to protect your personal data from accidental loss, unauthorized access, or unlawful alteration. Our security architecture includes:

• Encryption Standards: All data is protected via Transport Layer Security (TLS) during transmission. Sensitive information and OAuth credentials are encrypted at rest using authenticated symmetric encryption, with access keys managed strictly by the Service.
• Access Management: We utilize modern salted-hashing algorithms for password storage. Internal access to production environments is governed by the principle of least privilege, enforced through role-based access controls (RBAC) and mandatory multi-factor authentication (MFA) for our staff.
• Infrastructure & Application Defense:
  • Outbound HTTP requests are strictly validated to protect against Server-Side Request Forgery (SSRF).
  • External API calls utilize bounded timeouts to maintain system stability.
  • Task processing is isolated within background workers managed by secure message queues.
• Monitoring & Compliance: We maintain detailed audit logs and perform regular security reviews of our third-party vendors, ensuring they are contractually committed to equivalent data protection standards.
• Readiness: We maintain documented incident response plans to address and mitigate potential security events promptly.

Security Acknowledgment: While we strive to implement industry-leading protections, no digital environment is entirely impenetrable. Consequently, we cannot guarantee the absolute security of your information.

11. Your Privacy Rights and Choices

Depending on your jurisdiction, you are entitled to specific rights regarding the personal information we manage. These typically include the right to:

• Access & Portability: Request a clear summary of the data we hold about you and obtain a copy in a standard, machine-readable format.
• Rectification: Mandate the correction of any details that are outdated, incorrect, or incomplete.
• Erasure: Request the permanent removal of your data, provided we are not legally obligated to retain it for tax, regulatory, or security reasons.
• Objection & Restriction: Limit or stop the processing of your data for specific purposes, including opting out of direct marketing communications.
• Withdrawal of Consent: Revoke any permission you previously granted (such as marketing opt-ins) at any time. This will not retroactively invalidate any processing performed while the consent was active.
• Opt-Out of Data Sales/Sharing: Under California law and similar statutes, you may opt out of the "sale" or "sharing" of data for behavioral advertising. Note: Buzzator does not sell your information or participate in cross-context behavioral advertising as defined by California privacy laws.
• Regulatory Recourse: File a formal complaint with the relevant Data Protection Authority (such as the ICO in the UK or your local Supervisory Authority in the EU) or any other competent regulator in your region.
• Verification Process: To protect your data, we typically verify requests by asking you to confirm the request via the email address associated with your account or by providing information that matches our existing records.
• Withdrawal of Consent (Canada): Residents of Canada have the right to withdraw consent to the collection, use, or disclosure of their personal information at any time, subject to legal or contractual restrictions and reasonable notice. We will inform you of the implications of such withdrawal, which may include our inability to provide certain features of the Service.

Exercising Your Rights

We empower you to manage your data directly within the Service. Most updates—including profile changes, billing adjustments, workspace management, and platform disconnections—can be performed through your Account Settings.

For requests that cannot be completed through the user interface, please contact us at [email protected]. We will process your request within the legally mandated timeframe (usually 30 days, unless an extension is required for complex inquiries). To protect your privacy, we may verify your identity before fulfilling a request. We strictly adhere to a policy of non-discrimination for users who exercise their privacy rights.

12. California Resident & Nevada Disclosures

For individuals residing in California, the California Consumer Privacy Act, as enhanced by the California Privacy Rights Act (collectively referred to as "California Privacy Laws"), provides specific protections regarding your personal data.

A. Your Statutory Rights In addition to the rights outlined in Section 11 of this Policy, California residents have the following entitlements:

• Right to Know: You may request disclosure of the specific categories of personal information we have collected and the business purposes for such collection (as detailed in Sections 3 and 4).
• Right to Delete & Correct: You may request the removal of your data or the rectification of inaccurate records.
• Right to Limit Sensitive Data: You have the right to restrict the use of "sensitive personal information" to only those services necessary to provide the platform to you.
• Right to Non-Discrimination: We will not deny services, provide a different level of quality, or charge different prices if you choose to exercise your privacy rights.
• To comply with the CCPA/CPRA, the table below maps the categories of personal information we have collected in the last 12 months. Please note that your 'Right to Know' is not limited to this 12-month period; California residents may request access to any personal data we have maintained about them dating back to January 1, 2022.

B. Data Sales and Behavioral Tracking

Buzzator confirms that it does not sell your personal information to third parties. Furthermore, we do not "share" your data for cross-context behavioral advertising (as defined by California law) or process it for targeted advertising purposes under the laws of Nebraska, Florida, and other applicable US states. Any processing of data for these purposes, should it occur, is subject to your right to opt-out as described in Section 11 (Your Privacy Rights and Choices).

C. Exercising Your California Rights

To submit a formal request under California Privacy Laws, please email us at [email protected]. We will verify your residency and identity before processing your request in accordance with statutory timelines.

D. Nevada Privacy Rights: Although Buzzator does not currently sell personal information as defined by Nevada law, residents of Nevada may submit a request to [email protected] to opt-out of the future sale of any "covered information" we have collected or will collect about you. Please use the subject line "Nevada Opt-Out Request." We will verify your identity using commercially reasonable means and fulfill the request within sixty (60) days of receipt.

13. Policy Regarding Minors

The Buzzator platform is a professional tool designed exclusively for business purposes. We do not target or knowingly engage with individuals under the age of 18. Furthermore, we do not intentionally gather or store personal information from anyone in this age group.

If you have reason to believe that a minor has shared personal data with us, please notify our team immediately at [email protected]. Upon verification, we will take swift action to permanently remove that information from our systems.

For any user we reasonably believe to be under the age of 18 residing in California, we apply 'high privacy' settings by default. This includes disabling precise geolocation tracking and ensuring that personal information is not utilized for profiling or automated decision-making that could be detrimental to a minor’s well-being. We are committed to providing these disclosures in clear, age-appropriate language to ensure that all users understand their privacy rights.

14. Managing Your Marketing and Cookie Preferences

We provide you with full control over how we communicate with you and how we use tracking technologies:

• Marketing Communications: You may opt out of receiving promotional emails at any time. This can be done by clicking the "unsubscribe" link found at the bottom of our marketing messages or by adjusting your communication preferences within your account settings.
• Essential Service Notifications: Please note that opting out of marketing does not affect transactional or administrative emails. We will continue to send necessary account alerts, security notices, and billing receipts as long as your account remains active.
• Cookies and Tracking: You can customize your cookie settings through the interactive consent banner available on our website or by modifying your individual browser configurations. While you can disable non-essential cookies, please be aware that certain functional features of the platform may require cookies to operate correctly.
• Opt-Out Preference Signals: We recognize and honor Global Privacy Control (GPC) signals. If your browser or device transmits a GPC signal, we will treat it as a valid request to opt-out of the sharing of your data for behavioral advertising.
• Authorized Agents: You may designate an authorized agent to submit a privacy request on your behalf. We may require written proof of the agent's authority and may verify your identity directly before fulfilling such a request.
• Regarding our cookie consent banner, please note that closing the window or navigating away without clicking 'I Accept' does not constitute valid consent for the use of non-essential cookies.

15. External Services and Third-Party Integrations

Our Website and Service contain links to, and functional integrations with, external platforms. Please be aware that these third-party services operate independently of Buzzator. Their data processing activities are governed strictly by their own respective privacy disclosures, and this Policy does not apply to their internal practices.

We strongly advise you to examine the privacy policies of any network you link to your account, particularly those listed below:

• Meta (Instagram, Facebook, Threads): https://www.facebook.com/privacy/policy

• LinkedIn: https://www.linkedin.com/legal/privacy-policy

• X / Twitter: https://x.com/en/privacy

• TikTok: https://www.tiktok.com/legal/page/row/privacy-policy/en

• YouTube / Google: https://policies.google.com/privacy

• Pinterest: https://policy.pinterest.com/en/privacy-policy

• Bluesky: https://bsky.social/about/support/privacy-policy

• Cloudflare Turnstile (bot protection on sign-in/up): https://www.cloudflare.com/privacypolicy/

16. Amendments to this Privacy Policy

We reserve the right to modify this Privacy Policy as our technology and legal requirements evolve. Should we implement any significant changes that affect your rights or how we handle your data, we will provide you with advance notice via email or through a prominent notification within the platform.

The "Last Updated" date at the beginning of this document reflects the most recent revision. We recommend that you check this page occasionally to stay informed about our current privacy practices.

17. Contact Information & Dispute Resolution

17.1 Primary Contact

For all privacy-related inquiries, formal requests to exercise your data rights, or to submit a complaint, please reach out to our legal team via email:

• Email: [email protected]

17.2 Mailing Addresses (United States)

You may also correspond with our legal entities via postal mail:

• For Operational Matters: Buzzator LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA
• For Corporate & Asset Matters: AI Global Reach LLC, 8 The Green, Ste B, Dover, Kent County, DE 19901, USA

17.3 Regional Representatives (EU & UK & Canada)

Residents of the European Union or the United Kingdom may direct their privacy concerns to our designated GDPR Representative, DataRep, at the following regional offices:

• European Union (Republic of Ireland): DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
• United Kingdom: DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom
• Canada Privacy Officer: Residents of Canada may direct inquiries regarding our compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) to our Privacy Officer at [email protected]. Please include 'Canada Privacy Inquiry' in the subject line.

To contact our GDPR/UK GDPR Representative, please use the mailing addresses above or email [email protected] with 'Buzzator' in the subject line.

17.4 Specific State Rights (US Residents)

If you reside in Colorado, Connecticut, Delaware, Oregon, or Virginia, you are entitled to additional protections, including the right to appeal our decision regarding a data request and the right to opt-out of automated profiling that produces legal or similarly significant effects.

How to Appeal: If we decline to take action on your privacy request, you may initiate an appeal by emailing [email protected] within a reasonable timeframe of receiving our decision. We will respond to your appeal in writing within forty-five (45) days, explaining the reasons for our decision and any actions taken. If your appeal is denied, you have the right to contact your state’s Attorney General to lodge a formal complaint.

17.5 Dispute Resolution

In the event of a disagreement concerning our management of your personal information, we are committed to working with you in good faith to reach a fair resolution. We encourage users to contact us directly as a first step toward resolving any concerns.