1. Who we are
Buddy is operated by Deploy and Forget ("we", "us", "our"). We build Buddy, a personal AI companion that works across messaging and the web. Our website is hibuddy.deployandforget.com.
If you have questions about this policy, email us at jaiya@deployandforget.com.
2. What data we collect
We collect different types of data depending on how you use Buddy:
Account data
- Email address (used for login and notifications)
- Display name you choose for your Buddy
- WhatsApp or Telegram connection identifiers
Conversation data
- Messages you send to Buddy and Buddy's replies
- Messages from people in your trust circle who interact with Buddy
- Media files you share with Buddy (images, documents)
Connected service data
- Google Calendar events (if you connect Google Calendar)
- Google Drive, Sheets, and Docs metadata and content needed for the Workspace features you enable
Memory and context
- Facts, preferences, and notes Buddy stores about you to be helpful
- Task lists, reminders, and scheduled actions you create
- Dashboard data Buddy generates for you
Technical data
- Browser type, device info, and IP address when you visit our website
- Local storage tokens for session management
3. How we use your data
- To provide the service: Process your messages, remember your preferences, manage your calendar, work with connected Google Workspace files, create dashboards, and perform tasks on your behalf.
- To improve Buddy: Understand usage patterns, keep the service reliable, prevent abuse, and fix bugs. We do not use your private conversations or Google Workspace content to train generalized AI models.
- To communicate with you: Send waitlist confirmations, service updates, and security alerts.
4. Privacy isolation
Buddy is designed with privacy isolation at its core. This is not a setting you toggle — it is how the system is built:
- Per-person memory: When someone in your household chats with Buddy privately, their conversation and memory are loaded in isolation. You cannot see their private messages, and they cannot see yours.
- Role-based tool access: Different people get different capabilities. Your child can chat with Buddy but cannot access your calendar, connected files, or settings.
- Owner permanence: Only the account owner can grant or revoke access. This is enforced at the system level, not through prompts.
5. AI and service providers
Buddy uses OpenAI's API to process conversations and perform reasoning. When you send a message, the relevant context (your recent conversation, relevant memories, and any connected service data needed) is sent to OpenAI for processing.
OpenAI's API data usage policy states that data sent via the API is not used to train their models. We rely on this policy for your privacy.
We also use service providers for things like messaging transport, authentication, hosting, and transactional email delivery.
- Messaging providers to send and receive messages on supported channels
- Google OAuth and Google APIs when you connect Google services such as Calendar, Drive, Sheets, or Docs
- Email providers for transactional emails such as login and product updates
- Hosting and infrastructure providers to run the web app, APIs, databases, and file handling systems
6. Google API Services data handling
If you connect Google services to Buddy, we access Google user data only to provide the user-facing features you ask Buddy to perform, such as reading and updating calendar information or working with Google Drive, Sheets, and Docs when you explicitly request it.
- We do not sell Google user data.
- We do not use Google user data for advertising.
- We do not allow humans to read Google user data except when required for support you request, security purposes, or legal compliance.
- We do not use Google user data to train generalized or shared AI or machine learning models.
- We aim to request and retain the minimum Google permissions reasonably needed for the features you choose to enable.
7. Data storage and security
Your data is stored on secure servers. Conversations, memories, and connected service data are stored in encrypted databases. We use HTTPS for all data in transit.
We do not sell your data. We do not share your data with advertisers. We do not use your conversations to train AI models.
8. Data retention
- Active accounts: Your data is retained for as long as your account is active.
- Cancelled accounts: Your data is retained for 30 days after cancellation, during which you can reactivate or export your data.
- Deletion requests: You can request full deletion of your data at any time by emailing us. We will process deletion within 14 days.
9. Your rights
You have the right to:
- Access the data we hold about you
- Export your memories, notes, and conversation history
- Delete your account and all associated data
- Disconnect Google Calendar, Drive, Sheets, Docs, or any connected service at any time
- Revoke access for any trust circle member
To exercise any of these rights, email jaiya@deployandforget.com.
You can also revoke Buddy's Google access directly from your Google account permissions settings at any time.
10. Cookies and local storage
Our website uses local storage (not cookies) to keep you signed in. We store:
buddy_token — your session authentication tokenbuddy_id — your Buddy instance identifierbuddy_email — a convenience value used for reconnect and onboarding flows
We do not use tracking cookies, analytics pixels, or third-party advertising scripts.
11. Children
Buddy is not intended for use by children under 13. On Household plans, children may interact with Buddy under parental supervision, but the account must be owned by an adult.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you via email or through Buddy itself. The "last updated" date at the top reflects the most recent revision.