Legal

Privacy Policy
Your Data, Protected.

We take your privacy seriously. Here is how we handle your information.

A plain-language look at what we collect, who we work with, and the choices you have.

Read our full privacy policy below to understand how we protect your personal information.

Close-up of hands typing on a laptop keyboard at a clean, organized desk
Plans from $129/mo, no long-term contracts

Last updated: September 20, 2026

This page explains, in plain English, what information BuzFind collects, who we share it with, and what say you have over it. We wrote it to actually be read, not just filed away. If anything here is unclear, reach out and we will explain it in plain terms.

1. Who is responsible for this policy

BuzFind is registered at 405 W Main Street, 3, Portland, Indiana 47371. BuzFind has been doing SEO work since 2004, started by our founder, and this policy covers every page on buzfind.com and every service we run for customers. If you have a question about your data, email or use the contact form.

2. What we collect directly from you

Most of what we have is information you choose to give us. Here is what each part of the site asks for:

  • Contact form: your name, email, and message, plus phone number, website, service you are asking about, and city if you fill those in.
  • Support form: your name, email, what your question is about, your message, and whether you are already a customer.
  • Free tools: the website address or text you check. If you type your email in the box under the results, we save it with the address you checked and whether you asked for our newsletter.
  • IP address and browser type: when you send the contact form, the support form, or the free-tool email box, we also save your IP address and the type of browser you used. This helps us stop spam.
  • Free SEO audit tool: the website URL you want checked and your email, so we can send you the results.
  • Book a call form: your name, email, preferred call times, and time zone, plus phone, website, and topic if you add them.
  • Creating an account: your email and a password. We never store your password as plain text - it is scrambled (hashed) the moment you set it, and we cannot read it back even if we wanted to. You can also sign up or log in with the "Sign in with Google" button, which shares your name, email, and Google profile photo with us.
  • BuzFind AI Help chat: whatever you type into the chat window. You do not need to give a name or email to use it.
  • Newsletter emails: if you are already a lead or customer, we may occasionally send a plain-language update. Every one has a real, working unsubscribe link.
  • Paying for a service: your payment details go straight to Stripe (see section 3). BuzFind never sees or stores your full card number.

3. The companies we actually work with

We keep this list short on purpose - it only names companies that really touch your data today, not every tool we have ever tried:

  • Stripe: handles every payment on our site. When you buy an audit, a website, or a subscription, Stripe processes the transaction directly. Read their policy at stripe.com/privacy.
  • Mailgun: sends emails from us to you (confirmations, replies, receipts) and delivers email sent to our addresses. Read their policy at mailgun.com/privacy-policy.
  • Google: shows up in three separate ways on our site. Google Analytics counts visits and shows us which pages people read, with ad personalization turned off and your IP address shortened before it is stored. "Sign in with Google" is an optional way to create an account, only used if you click that button. And our AI chat widget, Buzzy, normally runs on our own computer; Google's Gemini AI only steps in as a backup on the rare occasion our own server is briefly down, so your question does not get lost. Read Google's policy at policies.google.com/privacy.
  • Cloudflare: routes traffic to our website and blocks attacks before they reach us, the way a security desk sits in front of an office building. Your device's IP address passes through Cloudflare as ordinary internet traffic, which is standard for almost every website on the internet today. Read their policy at cloudflare.com/privacypolicy.

One thing worth knowing: our AI agents, our database, and the voice you hear from our chat assistant all run on computers we own ourselves. They are not a separate company, so your data does not leave our hands to reach them.

4. Cookies we actually set

A cookie is a small file your browser holds onto. Here is the full, honest list of what we use, none of which are sold to advertisers:

  • session_token: keeps you logged into your dashboard. Lasts 7 days and cannot be read by JavaScript, which protects it from most attacks.
  • bf_signed_in: a small helper that just tells the page whether to show the "logged in" menu. Lasts 7 days.
  • admin_token: only set when BuzFind staff log into our internal tools. Lasts 24 hours. Regular visitors and customers never get this cookie.
  • language: remembers whether you prefer the English or Spanish version of the site.
  • Google Analytics: we configured Analytics to skip Google's usual long-term tracking cookie. Your visit is still counted, but Analytics does not leave a lasting identifier on your device.

We do not use advertising cookies or cross-site tracking cookies. You can always clear cookies or block them in your browser settings; the login cookies simply will not work if you do, which just means you will need to log in again each visit.

5. How long we keep your information

  • Contact form, free audit, and call booking leads: kept while we are actively following up, generally up to 2 years, then deleted or fully anonymized.
  • Accounts you create but never finish setting up (no plan and no purchase): we send a reminder, then delete them automatically after about 7 days.
  • Customer accounts: kept for as long as your account is active, plus whatever period US tax and accounting rules require afterward, then deleted on request.
  • Chat widget conversations: not linked to your identity unless you type one in, and kept only as long as needed to improve the assistant.

6. What we never do

  • We never sell, rent, or trade your personal information to anyone, for any reason.
  • We never build advertising profiles on our visitors.
  • We never hand your information to a third party so they can market to you.
  • We never send marketing email to someone who has not already reached out to us, and every marketing email we do send can be unsubscribed from instantly.

7. Our legal basis for using your information

We are a US business, but people from other countries visit and hire us too, so we try to meet common international standards. In plain terms: we use your information because you asked us to do something with it (answer a question, run an audit, build a website), because we have a real business reason to follow up on an inquiry you sent us, or because you gave us clear consent (like signing up for a newsletter). You can withdraw consent at any time.

8. Your rights

No matter where you live, you can ask us to:

  • Tell you what personal information we hold about you
  • Correct anything that is wrong or out of date
  • Delete your personal information
  • Stop sending you marketing email
  • Send you a copy of your data in a portable format

Email or use the contact form to ask. A real person reads every request, and we respond within 30 days.

9. If you are outside the United States

BuzFind is based in Indiana, USA, and the companies we work with in section 3 (Stripe, Mailgun, Google, Cloudflare) are also US-based, global services. If you are visiting or hiring us from another country, your information may be processed in the United States. Each of those companies publishes its own safeguards for handling international data; we linked to each policy above so you can read them directly.

10. How we protect your information

Every page on our site loads over HTTPS, so information sent to us is encrypted in transit. Cloudflare sits in front of our server and blocks common attacks before they arrive. Passwords are hashed, never stored as plain text. Outbound emails go through a review step before they send, and our forms are rate-limited to slow down abuse. That said, no website can promise perfect, unbreakable security, and we will not claim otherwise. If we ever discover a real problem with how your data was handled, we will tell you directly.

11. Changes to this policy

When we change how we handle your information, we update this page and change the "Last updated" date at the top. We do not make quiet changes to this policy after the fact. Check back here if you want to see the current version.

Related pages