Privacy policy
How Buzzflo collects, uses, stores and protects personal data, including message encryption, location data, retention and your rights over your information.
This policy explains what data Buzzflo collects, why, and what control you have over it. It covers the Buzzflo website and the Buzzflo application.
Who we are
Buzzflo provides team communication and business management software. If you use Buzzflo through an employer or another organisation, that organisation is the controller of the data in its workspace and we process it on their behalf.
What we collect
Account information. Name, email address, phone number, profile photo and any bio details you choose to add.
Content you create. Messages, files, projects, tasks, contacts, financial records and anything else you enter into the product.
Location data. Only where a feature requires it and your administrator has enabled it. This covers field attendance check-ins, visit logging, task location capture and device tracking on enrolled company handsets. Location is not collected in the background unless the relevant feature is switched on.
Device and usage data. Device model, operating system version, app version, network type, battery and storage levels for enrolled devices, plus IP address and session activity for security purposes.
Payment data. Handled by our payment processor. We store the subscription status and invoice history, not card numbers.
How we use it
- To provide the service and keep your workspace working
- To send notifications you have asked for, including deadline reminders and mentions
- To secure accounts, detect abuse and investigate incidents
- To provide support when you contact us
- To bill for paid plans
- To improve reliability and performance
We do not sell personal data, and we do not use the content you create to advertise to you.
How we protect it
Message content and sensitive fields — including financial amounts, contact details and notes — are encrypted at rest using AES-256-GCM. Traffic is encrypted in transit. Access is scoped on the server by role, so an organisation owner sees their organisation, a team lead sees their teams and any nested sub-teams, and a member sees their own records.
Two-factor authentication is available and can be required across an organisation. Administrators can end sessions on any device, and a selective wipe clears application data on a device without touching anything personal on it.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify affected users and, where required, the relevant authority.
Sharing
We share data only with service providers that make the product work — hosting, email delivery, push notification delivery, payment processing and, where you enable them, integrations such as calendar or messaging providers. Each processes data on our instructions.
We may disclose data where legally required, and we will tell you unless we are prohibited from doing so.
Retention
We keep your data for as long as your account is active. When an account is deleted, associated content is removed, except where we must retain records for legal, tax or accounting purposes. Backups are cycled on a schedule and deleted data disappears from them as they rotate.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to certain processing, and to withdraw consent. Most of this is available directly in the product; for anything else, contact us.
If you use Buzzflo through an employer, please direct requests about workspace content to them first, as they control that data.
Cookies
The Buzzflo website uses only what is necessary to serve pages. The application uses local storage to keep you signed in and to remember preferences such as theme and view choices. We do not use advertising cookies.
Children
Buzzflo is a business product and is not directed at children under 16. We do not knowingly collect their data.
Changes
We will post any material change to this policy on this page and update the date below. Continued use after a change means you accept the revised policy.
Contact
Questions about privacy can go to our team through the contact page.
This policy is provided as a starting point and should be reviewed by a qualified legal adviser in your jurisdiction before you rely on it.