1. Introduction

isitbuzz ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use isitbuzz.com ("the Service"), in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

isitbuzz
Email: office@isitbuzz.com

3. Data We Collect

3.1 Data You Provide

• Account data: Email address, name, and profile picture from Google OAuth
• Search queries: Product names and URLs you submit for analysis
• Preferences: Region selection, newsletter opt-in

3.2 Data We Collect Automatically

• Technical data: IP address, browser type and version, operating system, screen resolution, language preferences
• Usage data: Pages visited, features used, analysis history, search frequency, session duration
• Device data: Device type, unique device identifiers
• Referral data: How you arrived at the Service (referrer URL, UTM parameters)

3.3 Data from Third Parties

• Google: Profile information provided through Google OAuth (email, name, profile picture)
• Analytics providers: Aggregated usage data from PostHog and Google Analytics

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Service Delivery (Legal Basis: Contract Performance)

• Authenticating your identity and managing your account
• Processing your product analysis requests
• Delivering analysis results and reports
• Providing customer support

4.2 Analytics and Improvement (Legal Basis: Legitimate Interest)

• Understanding how users interact with the Service
• Identifying popular products and trending searches
• Improving analysis accuracy and quality
• Debugging and resolving technical issues

4.3 Marketing and Communications (Legal Basis: Consent)

• Sending product insights newsletters (only if you opt in)
• Notifying you about new features or changes to the Service

4.4 Business Intelligence and Third-Party Sharing (Legal Basis: Legitimate Interest / Consent)

• Creating anonymized, aggregated reports about product trends and consumer sentiment
• Sharing aggregated and anonymized data with third-party partners for market research, advertising, and analytics purposes
• Developing commercial data products based on aggregated analysis trends

5. Data Sharing

We may share your data with the following categories of recipients:

5.1 Service Providers

• Cloud infrastructure: Amazon Web Services (AWS) — database hosting, compute, email delivery
• Hosting: Vercel — application hosting and CDN
• Authentication: Google — OAuth sign-in
• Analytics: PostHog, Google Analytics — usage analytics
• AI/ML providers: Anthropic (Claude), Perplexity — analysis processing

5.2 Third-Party Partners

We may share anonymized and aggregated data (not individual personal data) with third parties for:

• Market research and consumer sentiment analysis
• Advertising and campaign targeting
• Product trend reports and industry insights
• Academic and journalistic research

We will never sell your individual personal data (email, name, individual search history) to third parties without your explicit consent.

5.3 Legal Requirements

We may disclose your data if required by law, regulation, legal process, or governmental request.

6. Data Retention

• Account data: Retained for as long as your account is active, plus 30 days after deletion request
• Analysis history: Retained indefinitely in anonymized/aggregated form for product intelligence
• Technical logs: Retained for 90 days
• Aggregated analytics: Retained indefinitely (no personal data)

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at office@isitbuzz.com. We will respond within 30 days.

8. Your Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, and shared
• Request deletion of your personal information
• Opt out of the sale of your personal information
• Non-discrimination for exercising your privacy rights

We do not sell individual personal information. Aggregated data shared with partners is not considered a "sale" under CCPA.

9. Cookies and Tracking

We use the following types of cookies and tracking technologies:

• Essential cookies: Authentication session cookies (required for the Service to function)
• Analytics cookies: PostHog and Google Analytics cookies to understand usage patterns
• Marketing cookies: Google Tag Manager for conversion tracking

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (AWS, Vercel, Google, Anthropic, Perplexity) and the European Union (AWS Frankfurt). We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) where required.

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication via Google OAuth
• Access controls and least-privilege principles
• Regular security reviews

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware of such data, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, providing additional notice (such as email notification). Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related inquiries, data access requests, or to exercise your rights:

Email: office@isitbuzz.com

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.