Legal

Privacy Policy

startbuddi provides GDPR-ready controls for service businesses without claiming legal compliance has been independently verified.

Data we process

startbuddi may process account data, workspace business data, client/contact data, marketing subscriber data, payment and invoice data, automation logs, and audit logs.

Customer ownership

Workspace business data belongs to the workspace. startbuddi acts as a processor for most customer-managed client and subscriber records.

Your controls

Users can request access, export, correction, deletion, restriction, objection, and unsubscribe actions through the privacy center or GDPR request page.

AI-assisted features

When a workspace uses Chip, startbuddi may send the user's prompt and relevant, permission-scoped workspace context to configured AI service providers to generate the requested response or action. Workspace knowledge is retrieval context and does not by itself train the underlying model. Provider processing and retention are governed by the applicable provider agreement and the workspace's configured data controls.

Messaging and calls

Voice calls, SMS, and WhatsApp messages may be processed by the communication provider connected by the workspace. Workspace administrators are responsible for establishing an appropriate lawful basis, collecting consent where required, honouring opt-outs, limiting access, and configuring retention for contact data, message content, recordings, and delivery metadata.