Privacy Policy
Effective September 30, 2026
This policy explains what BuzzChat collects, why, how long we keep it, and who can see it. BuzzChat is run by BuzzCloud on our own servers. We don't sell your data, and we don't show ads.
What we collect
- Account: your username, a securely hashed password (we can't see your actual password), your friend code, profile photo, and your recovery email if you add one.
- Messages and media: the messages, photos, voice messages, files, reactions, and reminders you send or create, plus group names, photos, and chat backgrounds.
- Unsent and edited messages: when you unsend a message, we keep a private copy of the original, including media and any earlier edited versions, for safety investigations. See "How long we keep things" below.
- Devices and sign-ins: a label for each signed-in device (like "Safari on iPhone"), your browser's user-agent, and sign-in times. We record your IP address when you sign up, sign in, fail to sign in, or reset your password.
- Notifications: if you turn on notifications, the push address your browser gives us.
- Safety records: reports you file or that are filed about you (including a snapshot of the reported conversation at that moment), AI moderation results, and any moderator actions on your account such as bans.
Voice and video calls connect directly between devices where possible. We don't record or store calls.
How we use it
- To run BuzzChat: deliver messages, send notifications, and let you sign in and recover your account.
- To keep people safe: automated scanning of messages and images by an AI model running on our own hardware (not a third-party AI service), human review of flagged and reported content, and detecting ban evasion.
- To enforce our Terms and comply with the law.
Who can see it
- People in your conversations see what you send there.
- BuzzChat moderators can see account details, sign-in history, and flagged or reported content. Viewing unsent messages or exporting records requires moderators to re-confirm their password, and every such access is logged.
- Service providers we rely on: Cloudflare (our network provider, which carries traffic to our servers), Google (Gmail sends our emails, and a Google server helps set up calls), and the push service built into your browser (Apple, Google, or Mozilla), which carries notifications in encrypted form.
- Law enforcement and safety organizations: we share information when required by valid legal process (such as a subpoena, court order, or search warrant); when you report something and choose to let us share your report and the messages saved with it with law enforcement; when we believe in good faith that it's needed to prevent death or serious physical harm, and to report apparent child sexual exploitation to NCMEC as federal law requires. We may preserve records when we receive a preservation request or learn of an investigation.
How long we keep things
| Data | Kept for |
|---|---|
| Messages and media you haven't unsent | While your account exists, or until you ask us to delete it |
| Private copies of unsent messages | 90 days, then automatically deleted |
| Sign-in IP addresses and history | 90 days, then automatically deleted |
| Reports, bans, and moderator records | As long as needed for safety and legal purposes |
| Server backups | Up to 30 days |
Legal holds: if something is reported, flagged as seriously harmful, or subject to an investigation or legal request, we may preserve the related records past these periods until the matter is resolved. Content involving suspected child exploitation is preserved for at least one year, as required by law.
Security
BuzzChat runs on servers we operate ourselves. Passwords are hashed with Argon2, sign-in sessions use cookies that page scripts can't read, moderator access is logged, and backups are stored on our own separate hardware. No system is perfectly secure, but we work to protect your data.
Your choices
- Add, change, or remove your recovery email and sign out other devices from your profile.
- Turn notifications on or off at any time.
- Contact us to request a copy of your data, a correction, or deletion of your account. We'll honor deletion requests except where we're required to keep something, for example records under a legal hold or safety investigation.
Children
BuzzChat isn't for children under 13. If we learn an account belongs to a child under 13, we'll delete it, except for anything we're legally required to preserve.
Changes
If we change this policy in a significant way, we'll ask you to review it the next time you open BuzzChat.
Questions? Contact [email protected].