Privacy policy

The controller for account, billing, security, and website data is Nikolaus Redl, Kleistgasse 18/41, 1030 Vienna, Austria. Buyerfly is a product of this business. VAT ID: ATU82884407.

Send privacy requests to contact@supercenter.app. We have not appointed a data protection officer, because our current activities do not meet the criteria that require one.

For account, billing, security, and website data, we act as an independent controller.

Customers use Buyerfly to build websites for their own business. For the content of these sites, chat messages, attachments, and contact-form messages, the customer decides the purpose, and we act as the processor of the customer. Our Data processing agreement sets out the Article 28 GDPR terms for this processing.

If you visit or contact a site that a customer built with Buyerfly, the business that runs that site is responsible for your data, and its own privacy policy applies. Contact that business first.

You must give us your account data and, for paid plans, your billing data. Without them, we cannot provide the service.

When you ask for a change, Buyerfly sends data to an AI model through Vercel AI Gateway. The model receives your chat message, earlier requests for the same site, the site files that the agent reads, your attachments, screenshots of preview pages, and the text of web pages that the agent loads. The default model today is Claude from Anthropic. We can change the model.

Pictures that the model receives are copies without metadata, such as camera and location data. When the agent puts an attachment on your site, Buyerfly stores a copy without this metadata.

When you name a public web page in the chat, Buyerfly loads it, directly or through Firecrawl, so that the agent can read it.

Do not put personal data into a chat message or an attachment unless your site needs it. The AI does not make decisions about people. It changes the code and the text of websites.

Published sites can have contact forms. A form sends its message to Buyerfly, and Buyerfly emails it through Resend to the workspace member that the site owner chose. Buyerfly does not keep a copy of the message and does not show messages in an inbox. For this processing, we act as the processor of the business that runs the site.

To stop spam, we keep one record for each form and IP address: a counter and the start time of a 10-minute window. We delete these records within about 24 hours.

We share personal data only when we need it to run, secure, or charge for the service, when you instruct us, or when the law requires it. We do not sell personal data. These providers receive personal data:

Our app, our database, and the Sandboxes that run previews and edits are in Frankfurt, Germany. Some providers process data outside the European Economic Area, mainly in the United States. Where a country has no EU adequacy decision, we rely on the Standard Contractual Clauses of the European Commission and additional safeguards. Some providers are certified under the EU-US Data Privacy Framework. You can ask our privacy contact for information about the safeguards for a provider.

• Accounts and workspaces. We keep account, workspace, and membership records while the account or workspace exists. After it closes, we normally delete them within 30 days, unless the law requires us to keep them.
• Sites. We keep the chat, attachments, versions, and files of a site while the site exists, so that you can see its history and restore any version.
• Media files. A media file can belong to several versions and sites, so a removal on the Media screen does not delete the stored file. When you ask us to delete a file, we delete it unless another site still uses the same file.
• Sessions and sign-in codes. A session ends when you sign out, or 30 days after you last used Buyerfly. A sign-in code is valid for 10 minutes.
• Rate-limit records. We delete them automatically: sign-in records after a few minutes, and contact-form records within about 24 hours.
• Audit log. The audit log of a workspace stays after a member leaves or the workspace closes. We keep it while we need it to show what happened in the workspace, for example to defend legal claims.
• Billing records. We keep invoices, payment records, and tax records for the statutory period, which can be up to ten years in Austria.
• Analytics and marketing. We keep your consent choice for 3 years, to show that you agreed. We delete the analytics context of a browser 13 months after its last change, and the record of each event that our server sent 90 days after the delivery. Google Analytics keeps data for 14 months. PostHog and Meta keep data under their own rules.
• Logs and emails. Our host keeps request logs, and our email provider keeps sent emails and delivery records, for a limited time under their own retention rules.
• Backups. Deleted data stays in the backups of our database provider until these backups expire.

We use encrypted connections (TLS), encryption at rest at our providers, sign-in codes and directory tokens that we store only as hashes, role-based permissions, separate records for each workspace, private repositories, and isolated Sandboxes for site code. No service can guarantee complete security. If you think that your account or data is at risk, contact us at once.

Buyerfly staff can sign in to a customer account only for support, troubleshooting, or abuse checks. The audit log of the workspace records each such session, and the app shows a banner while it lasts.

Under the GDPR, you can ask for access to your data, correction, deletion, restriction of processing, data portability, and information about recipients. You can object to processing that is based on legitimate interests. You can withdraw a consent at any time. The withdrawal does not affect processing that took place before it.

Send your request to contact@supercenter.app. We may need to confirm your identity. We normally answer within one month. When we process the data for a customer, we forward your request to that customer.

You can complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, www.dsb.gv.at, or to the supervisory authority in the country where you live or work or where the infringement took place.

Necessary storage keeps you signed in, keeps the editor working, and remembers your privacy choice. Under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), storage that is necessary for a service that you request needs no consent. Analytics and marketing storage is optional: it starts only after you agree in the banner or in Privacy choices, and a rejection does not limit Buyerfly in any way. If your browser sends Global Privacy Control, we treat it as a rejection. We host our fonts ourselves, so your browser does not contact Google Fonts.

Necessary storage:

Optional storage, only after your consent:

With your consent, our server also sends conversion events (sign-up, checkout, payment, lead) to the tools that you agreed to, with the same event ID as your browser, so that each event counts once. Without your consent, our server sends nothing to these tools. You can change or withdraw your choice at any time with Privacy choices at the bottom of each page. A withdrawal stops the tools for the future and removes their storage in this browser where the browser allows it.

When you pay, the checkout and the customer portal are pages of Stripe. Stripe sets its own cookies there, as its privacy policy describes.

The sites that customers build are the responsibility of each customer. When a site owner adds trackers in Buyerfly, the site template shows a consent banner. The site loads the trackers only after consent, and it stores the choice of the visitor in the cookie and the local storage entry buyerfly-consent for 180 days.

We do not make decisions about you that are based only on automated processing and that have legal or similarly significant effects. Buyerfly is for business users aged 18 or older. It is not directed at children.

We update this policy when our processing changes. We announce material changes in the app or by email to the account address. The effective date and the version at the top show the current text.