Privacy Policy

At BuyerWatch, we treat your privacy and data security with the utmost care. This Privacy Policy explains how we collect, process, safeguard, and respect your information when you use our website and lead monitoring platform.

1. Information We Collect

We collect only the information necessary to provide, secure, and operate social intent monitoring and draft assistance:

• Account Information: Name, email address, avatar, and authentication identifiers when you register via Google, GitHub, X, or email magic link. We do not store plaintext passwords.
• Connected Platform Credentials: Encrypted OAuth tokens and session data for accounts you connect (Reddit, X, or Bluesky). We never store your passwords or two-factor authentication secrets.
• Configuration & Workspace Data: Monitored keywords, target communities, business descriptions, negative filters, and brand voice guidelines you configure.
• Public Social Signals: Publicly available posts, threads, authors, and timestamps matching your monitoring rules across supported social networks.

2. Connected Social Platforms (Reddit, X, Bluesky)

When you connect a social account to deliver replies or monitor leads:

• Connection data is encrypted at rest using industry-standard AES-256 encryption.
• Credentials are accessible only to our secure server-side processes for authorized actions you initiate or approve.
• We never use your connected social accounts to publish unsolicited content, access private direct messages, or alter personal profile settings.
• You can disconnect any social network at any time from your account settings, which immediately purges stored platform tokens.

3. How We Use and Process Your Data

Your data is processed strictly for the following purposes:

• Discovery & Intent Scoring: Scanning public feeds against your keyword criteria and scoring commercial intent.
• AI Response Generation: Matching conversations are analyzed by our AI processing pipelines to craft contextual draft responses. We do not use your private business data, profile details, or customer drafts to train general public AI models.
• Guarded Delivery: Replies require manual review by default. Automated delivery is only triggered if you explicitly configure confidence-gated thresholds, and can be disabled instantly.

4. Payment Processing

All paid subscriptions, billing management, and invoices are handled by our Merchant of Record, Dodo Payments. BuyerWatch does not process, handle, or store full credit card numbers or payment instruments. All transactions are governed by Dodo Payments' privacy and security standards.

5. Cookies and Local Storage

We use essential first-party cookies and browser local/session storage solely to maintain your authenticated login session, preserve your UI preferences, and provide fast dashboard caching. We do not sell your personal data or use cross-site tracking cookies.

6. Data Retention and Security

We employ strict security measures, including HTTPS/TLS 1.3 in transit, authenticated AES-256 database encryption at rest, and restricted server-side access controls. We retain your monitoring history and draft logs only for the duration of your active account.

7. Your Privacy Rights (GDPR & CCPA/CPRA)

Regardless of your jurisdiction, BuyerWatch provides comprehensive control over your personal data:

• Access & Export: You can export your account data and monitored leads at any time directly from your account settings.
• Correction & Updating: You can edit your profile information, connected channels, and monitoring preferences at any time.
• Deletion (Right to be Forgotten): You can request complete deletion of your account and associated data. Once initiated, all profile details, encrypted credentials, keywords, and history are permanently expunged.

8. Contact Us

If you have any questions, requests, or privacy concerns regarding this Privacy Policy, please contact our team at [email protected].