Privacy Policy
Last updated: July 14, 2026
1. Who We Are
BuzzFuzz Inc. ("BuzzFuzz," "we," "us," or "our") is a done-for-you authority placement agency headquartered in the United States. We help founders, executives, consultants, and brands get featured on podcasts, in publications, newsletters, webinars, and on speaking stages. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the rights and choices you have regarding your information. It applies to our website at buzzfuzz.ai, our client portal, and all services we provide ("Services"). If you have questions about this policy, contact us at [email protected].
2. Information We Collect
We collect information in three ways: information you give us directly, information generated through your use of our Services, and information from third parties. 2.1 Information You Provide • Identity and contact data: name, email address, phone number, job title, company name, LinkedIn profile URL, and photo or headshot. • Account credentials: username and password for any account you create with us. • Billing and payment data: billing address and payment card details. Payment card numbers are processed directly by Stripe and are never stored on our servers. • Client materials: pitch bios, topic ideas, interview talking points, media kit assets, previous placements, and any other materials you submit for us to use in placement outreach. • Communications: the content of emails, chat messages, support tickets, intake forms, onboarding questionnaires, and scheduling messages you send to us. • Survey and feedback data: responses to satisfaction surveys, testimonials, and case study interviews. 2.2 Information Generated Automatically • Usage data: pages visited, features used, links clicked, time spent on pages, referring URLs, and search queries. • Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers, and time zone. • Cookies and similar technologies: see Section 6 for full details. • Log data: server logs recording requests made to our infrastructure. 2.3 Information From Third Parties • Payment processors: billing status, transaction history, and fraud signals from Stripe. • CRM and marketing tools: contact enrichment data from tools such as HubSpot or Apollo when we add a prospect to our pipeline. • Referral sources: when someone refers you to us, we may receive your name and contact details. • Publicly available sources: we may review your public website, LinkedIn profile, or published content to better understand your expertise and positioning before pitching on your behalf.
3. Legal Basis for Processing (GDPR and UK GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases: • Contract performance: processing necessary to deliver the Services you have purchased, including sending pitches on your behalf, coordinating bookings, and delivering placement reports. • Legitimate interests: improving our Services, maintaining network security, preventing fraud, conducting analytics, and sending direct marketing to existing clients where permitted. We balance our interests against your rights before relying on this basis. • Legal obligation: processing necessary to comply with tax, accounting, anti-money-laundering, or other legal requirements. • Consent: where we rely on your consent (e.g., marketing emails to non-clients, or certain cookies), you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you may object to that processing at any time. See Section 9 for instructions.
4. How We Use Your Information
We use the information we collect to: • Deliver, manage, and improve our placement services. • Develop pitch angles, bios, and outreach materials on your behalf. • Research and contact podcast hosts, editors, newsletter operators, event organizers, and other placement partners. • Communicate with you about your account, upcoming bookings, placement results, and billing. • Process payments and manage subscriptions. • Respond to your support and service requests. • Send you marketing communications about new services, case studies, or resources: you can opt out at any time. • Personalize your experience and remember your preferences. • Analyze usage patterns to improve our website, tools, and service quality. • Detect, investigate, and prevent fraudulent or abusive activity. • Meet our legal, regulatory, and contractual obligations. • Enforce our Terms of Service and other agreements.
5. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances: 5.1 Service Providers We engage trusted vendors who process data on our behalf under strict confidentiality and data processing agreements. These include: • Stripe: payment processing • Resend / Postmark: transactional email • HubSpot: CRM and marketing automation • Google Analytics / Plausible: website analytics • Notion / Airtable / Coda: internal project management • Zoom / Riverside: call and recording coordination • AWS / Cloudflare: hosting and CDN infrastructure 5.2 Placement Partners To secure appearances for you, we share relevant pitch materials: typically your name, bio, headshot, proposed topics, and media kit, with podcast hosts, show producers, newsletter editors, event organizers, and similar third parties. These parties receive only what is necessary to evaluate your guest fit. 5.3 Professional Advisors We may share information with attorneys, accountants, auditors, and insurers in the course of professional services, under confidentiality obligations. 5.4 Business Transfers If BuzzFuzz is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify affected clients via email. 5.5 Legal Compliance and Safety We may disclose information if we reasonably believe disclosure is required by law, regulation, legal process, or governmental request; to enforce our Terms; to protect the safety, rights, or property of BuzzFuzz, our clients, or others; or to detect and prevent fraud. 5.6 With Your Consent We may share information with other parties when you explicitly ask us to or give your permission.
6. Cookies and Tracking Technologies
We use cookies, web beacons, pixels, and similar technologies to operate our website and understand how people use it. 6.1 Types of Cookies We Use • Strictly necessary cookies: required for the site to function (session management, security tokens). Cannot be disabled. • Functional cookies: remember your preferences and settings (e.g., form autofill, language). • Analytics cookies: collect aggregate usage data so we can understand and improve the site. We use tools such as Google Analytics and Plausible. Where required by law, these are loaded only with your consent. • Marketing and advertising cookies: used to understand the effectiveness of our campaigns and, where applicable, to retarget visitors. These are loaded only with your consent in jurisdictions that require it. 6.1.1 Google Advertising Features We have enabled Google Analytics Advertising Features, including Google Signals, Demographics and Interests Reporting, and cross-device reporting. This means Google may associate visit information from this site with Google account holders who are signed in and have consented to Ads Personalization, and may use third-party cookies (such as the DoubleClick cookie) together with our first-party cookies. We use this only to understand aggregate audience characteristics and campaign performance; we do not receive or store any individually-identifying information from it. You can control this at any time via Google Ads Settings (adssettings.google.com), My Activity (myactivity.google.com), or the Google Analytics Opt-Out Browser Add-on. 6.2 Managing Cookies You can control cookies through: • Our cookie consent banner (shown on first visit in applicable jurisdictions). • Your browser settings: most browsers allow you to refuse or delete cookies. Note that disabling cookies may affect site functionality. • Opt-out tools provided by specific vendors: Google Analytics Opt-Out, LinkedIn Insight Tag opt-out. 6.3 Do Not Track We currently do not respond to Do Not Track (DNT) signals from browsers because no uniform standard exists. If a standard is adopted, we will update this policy.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer period is required by law. • Active client records: retained for the duration of the engagement and for 7 years afterward for accounting, legal, and audit purposes. • Placement materials and reports: retained for 3 years after engagement ends, then deleted or anonymized. • Marketing contacts: retained until you unsubscribe or request deletion, whichever comes first. • Website analytics: aggregated data is retained indefinitely; individual-level logs are retained for 13 months. • Support communications: retained for 3 years. • Payment records: retained for 7 years per tax and accounting requirements. When data is no longer needed, we securely delete or anonymize it. You may request earlier deletion; see Section 9.
8. Data Security
We take the security of your information seriously and implement appropriate technical and organizational measures, including: • TLS/HTTPS encryption for all data in transit. • Encryption at rest for sensitive data fields. • Role-based access controls: staff can access only the data needed for their specific job functions. • Multi-factor authentication required for all internal systems. • Regular security assessments and penetration testing. • Third-party vendors are evaluated for SOC 2 Type II compliance or equivalent certifications where available. • Incident response procedures, including breach notification protocols. No system can be made perfectly secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware, as required by law.
9. Your Privacy Rights
Depending on where you are located, you may have the following rights regarding your personal information. We honor all rights requests without charge and respond within 30 days (extendable to 60 days for complex requests). 9.1 Rights Available to All Users • Access: request a copy of the personal information we hold about you. • Correction: ask us to correct inaccurate or incomplete information. • Deletion: ask us to delete your personal information, subject to legal retention requirements. • Objection: object to our processing of your data based on legitimate interests, including for direct marketing. • Restriction: ask us to restrict processing while a dispute is resolved. • Portability: receive your data in a structured, machine-readable format. • Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing. 9.2 California Residents (CCPA / CPRA) In addition to the above, California residents have the right to: • Know what categories of personal information we have collected, used, disclosed, or sold in the past 12 months. • Opt out of the sale or sharing of personal information (we do not sell personal information). • Limit the use of sensitive personal information. • Not be discriminated against for exercising CCPA rights. To submit a CCPA request, email [email protected] with "CCPA Request" in the subject line. We may need to verify your identity before processing the request. 9.3 EEA, UK, and Swiss Residents (GDPR / UK GDPR) You have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at edpb.europa.eu. 9.4 How to Submit a Request Email [email protected] with the subject line "Privacy Rights Request." Include your full name, email address, and a description of your request. We will verify your identity and respond within the applicable timeframe.
10. International Data Transfers
BuzzFuzz is headquartered in the United States. When we collect information from individuals in the EEA, UK, Switzerland, or other jurisdictions with data transfer restrictions, we transfer that information to the US and process it there. We rely on the following transfer mechanisms as appropriate: • Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to the US and other third countries. • The EU-U.S. Data Privacy Framework and UK Extension where applicable. • Adequacy decisions where the destination country has been recognized as providing an adequate level of protection. You may request a copy of the applicable transfer mechanism by emailing [email protected].
11. Third-Party Links and Services
Our website may contain links to third-party websites, tools, or services (e.g., podcast platforms, social media, partner tools). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information. When we place you on third-party platforms (podcast hosts, newsletter platforms, event sites), those platforms' own privacy policies govern how they handle your information after it is submitted to them.
12. Children's Privacy
Our Services are designed for businesses and are directed solely to adults aged 18 and older. We do not knowingly collect, use, or disclose personal information from children under 16 (or under 13 in jurisdictions where that is the relevant age threshold). If we discover that we have inadvertently collected personal information from a child under the applicable age threshold, we will delete it promptly. If you believe we have collected such information, please contact us immediately at [email protected].
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will: • Update the "Last updated" date at the top of this page. • Notify active clients by email at least 14 days before the changes take effect. • Where required by law, seek fresh consent. We encourage you to review this policy periodically. Your continued use of our Services after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
For privacy questions, rights requests, or concerns, please contact: BuzzFuzz Inc. Attn: Privacy Team 228 Park Ave S, PMB 47291 New York, NY 10003-1502 Email: [email protected] We aim to respond to all privacy inquiries within 5 business days and to complete rights requests within 30 days.