Privacy Policy

This policy explains what information Buyable, LLC ("Buyable", "we", "us") collects, why, who we share it with, and the choices you have. It covers getbuyable.com, app.getbuyable.com, and the emails, calls, and meetings we have with you (together, the "Services").

The short version. We collect what we need to run the business and the app. We don't sell personal information. We don't use it for advertising. We don't train AI models on it. We tell you the kinds of companies that help us run the Services, and you can ask at any time what we hold about you and have it corrected or deleted.

1. Two kinds of information

Information about you. Your account details, our records of who you are and how we know you, how you use the website and the app, and our correspondence. This policy governs that information, and Buyable is responsible for it.

Customer Data. Information a company provides to us or to our delivery partner for an engagement: contracts, invoices, billing records, usage data, and the findings that come from them. Customer Data can include personal information about the company's own customers, vendors, or employees. We process it only on that company's instructions, under our Master Services Agreement and Data Processing and Security Addendum with them. Those agreements, not this policy, govern Customer Data. In most engagements the delivery partner handles the raw contract and billing data, and Buyable receives summarized findings and the records needed to compute fees. If you have questions about how your company's data is handled, ask your company first and we will help.

2. What we collect and why

Account information. When you join the app we collect your name, work email, company, title, and a password or a sign-in through Google. We use it to create and secure your account, show you the right engagement, and contact you about it. If you sign in with Google, we receive your name, email address, and profile picture, and we use them only to sign you in and identify you in the app. We do not request access to your email, calendar, or files.

What you add to the app. Notes, approvals, uploads, and messages. We use them to run the engagement they relate to.

Engagement records. Status and figures supplied by our delivery partners through their systems (for example, contracts reviewed, opportunities found, invoices issued and collected). These are mostly business records about your company. They can include names of your personnel or counterparties.

Business contact information. Names, titles, companies, work email addresses, phone numbers, and public profile links for people we work with or would like to. We get this from you, from introductions, from events, from public and professional sources such as LinkedIn and company websites, and from business-data providers. We use it to introduce Buyable, keep a record of our relationships, and send occasional emails about our work. You can opt out of marketing email at any time by using the unsubscribe link or replying to tell us. We keep this information in our CRM.

Website and app usage. IP address, browser and device type, pages viewed, actions taken in the app, timestamps, and error logs, collected through server logs, error reporting, and the privacy-friendly usage analytics built into our hosting platform. We use it to keep the Services secure, fix problems, and understand which parts are used. We use first-party cookies to keep you signed in, and no advertising cookies or tracking pixels. Because we don't track you across other sites, there is nothing for a Do Not Track or Global Privacy Control signal to turn off; if that changes, we will honor those signals.

Communications. Emails, meeting notes, call recordings where you have agreed, and support requests. We use them to respond, to do the work, and to keep accurate records. Our email tools tell us whether a message was delivered and, for some messages, whether it was opened.

Payments. We invoice companies, not individuals, and we do not collect card numbers in the app.

3. How we use information

In summary, we use information about you to provide and secure the Services, run engagements, communicate with you, improve how the Services work, meet our legal and accounting obligations, and protect Buyable and the people we work with.

We may create aggregated or de-identified statistics about how the Services are used. They do not identify you or your company, and we don't try to re-identify them.

4. Artificial intelligence

Some features of the Services use large-language-model services from established providers to summarize, organize, or draft. We send those providers only the information a feature needs, only when you use the feature, and under our agreements with them they do not use that information to train their models. We do not train our own models on information about you or on Customer Data, and we will not start without telling you first and, for Customer Data, obtaining the company's written approval. We use AI tools internally as well, and we don't put Customer Data into tools that may use it for training.

5. When we share information

We share personal information only in these situations:

Service providers. Companies that help us run the Services: hosting and database, sign-in, content delivery, error monitoring, email delivery, electronic signatures, business-contact data, our CRM, and AI model providers. They act on our instructions, may use the information only to provide their service to us, and are bound by confidentiality. We share the current list with customers on request.

Delivery partners. For an engagement, we share the information the partner needs to do its part, under written confidentiality and data-protection obligations. Which partner is involved is stated in your company's Outcome Order.

Professional advisers. Our lawyers, accountants, and insurers, bound by confidentiality.

Legal requirements. If the law requires it, or to protect the rights, safety, or property of Buyable, our customers, or others. Where the law allows, we tell you before we respond, and we don't hand over more than a request requires.

Business transfers. If Buyable is acquired or merges, information may transfer with the business. This policy continues to apply, and we will notify account holders before a different policy does.

At your direction. For example, when you ask us to introduce you to someone.

We do not sell personal information, we have not sold it in the past twelve months, and we do not share it for cross-context behavioral advertising.

6. Security

We encrypt information in transit and at rest, hash passwords, keep each company's data scoped to its own workspace, limit access to the people who need it, require multi-factor authentication on our own systems, and choose vendors with security in mind. No method is perfect. If a security incident affects your information, we will notify you and, where relevant, your company without undue delay and as our agreements and the law require.

7. How long we keep information

• Account information: while your account is active, then deleted within 30 days of a closure or deletion request, with backups cleared within a further 30 days.
• Engagement records and Customer Data: for the period your company's agreement with us requires, then returned or deleted, subject to legal retention and routine secure backups.
• Business contact information: while we have an active relationship or a reasonable business interest, deleted on request.
• Usage logs and error reports: up to 13 months.
• Correspondence, contracts, and financial records: as long as needed for the relationship and for legal and accounting purposes, typically seven years for financial records.

8. Your choices and rights

You can ask us to tell you what personal information we hold about you, correct it, delete it, give you a copy, or stop using it for marketing. Email hello@getbuyable.com. We may need to verify who you are. We respond within 30 days, we don't charge for reasonable requests, and we will never treat you differently for exercising these rights. If you disagree with our response, reply and tell us why and we will take another look.

We offer these choices to everyone, whatever state or country you live in. If a law gives you additional rights, we honor those too. If your request concerns Customer Data, we will refer it to your company and help them respond.

9. Where information is stored

We are based in the United States and store information there. If you access the Services from outside the United States, your information will be transferred to and processed in the United States. We do not currently market the Services outside the United States. If we work with a company in the European Union or United Kingdom, we sign a data-processing addendum with the standard contractual clauses before processing its personal data.

10. Children

The Services are for business use by adults. We do not knowingly collect information from anyone under 18. If you believe we have, tell us and we will delete it.

11. Changes to this policy

When we change this policy, we post the new version here and update the date at the top. For material changes, we notify account holders by email or in the app before the change takes effect. A change to how we use information applies only to information collected after the change takes effect, unless you agree otherwise. Previous versions are available on request.

12. Contact

Questions, requests, and complaints: hello@getbuyable.com

See also: Terms of Service