Legal
Privacy Policy
This policy explains what data buddy collects when you build and run AI agents on our platform, why we collect it, and the choices you have. We keep it plain. If anything here is unclear, write to hello@buddy.ui.pe.
01Who this covers
This policy applies to people who create a buddy account and build agents (account holders), and to end users who chat with an agent through a shared link or an embedded widget (visitors). Account holders are responsible for telling their own visitors how their agent uses conversation data.
02What we collect
Account data
We use Auth0 to handle sign-in. When you authenticate we receive your name, email address and a unique identifier. We do not see or store your password.
Content you create
- Agent configuration — identity, system prompt, personality and settings.
- Knowledge you upload or paste for an agent to draw on.
- Tool and API connections you configure for an agent to call.
Conversations
buddy stores the messages exchanged with your agents. This is core to the product: agents remember past conversations so they get more useful over time. Stored messages may include anything a visitor types, so avoid collecting sensitive personal data you don't need.
Technical data
We log IP address, browser type, timestamps and a per-request correlation ID for security, rate limiting and debugging.
03How we use it
- To run your agents and generate their responses.
- To give agents memory of earlier conversations.
- To authenticate you and keep your account secure.
- To prevent abuse, enforce rate limits and investigate incidents.
- To operate, maintain and improve the service.
We do not sell your data, and we do not use the content of your conversations to train foundation models of our own.
04Model and infrastructure providers
To produce agent responses we send the relevant prompt, knowledge and conversation context to third-party large-language-model providers. These providers process that data only to return a response and act as our processors under contract. Identity is handled by Auth0. We host on infrastructure that applies industry-standard physical and network security.
05Retention
We keep account data and agent content for as long as your account is active. Conversation history is retained so agents can recall it; you can delete agents, knowledge and conversations from your dashboard at any time. When you delete your account we remove associated data within a reasonable period, except where we must retain it to meet a legal obligation.
06Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. You can exercise most of these directly in the dashboard, or by emailing hello@buddy.ui.pe.
07Security
We protect data in transit with TLS, scope access to the people and services that need it, and follow standard web-application security practices. No system is perfectly secure, but we work to reduce risk and will notify affected users of a material breach as required by law.
08Children
buddy is not directed to children under 16, and we do not knowingly collect their personal data.
09Changes
We may update this policy as the product evolves. When we make a material change we will update the date above and, where appropriate, notify account holders.