Back to home

Privacy Policy

Last updated: August 12, 2026

1. Who we are

Buddy is operated by Deploy and Forget ("we", "us", "our"). We build Buddy, an AI personal assistant that works across messaging and the web. Our website is hibuddy.deployandforget.com.

If you have questions about this policy, email us at jaiya@deployandforget.com.

2. What data we collect

We collect different types of data depending on how you use Buddy:

Account data

  • Email address (used for login and notifications)
  • Display name you choose for your Buddy
  • WhatsApp or Telegram connection identifiers

Conversation data

  • Messages you send to Buddy and Buddy's replies
  • Messages from people in your trust circle who interact with Buddy
  • Media files you share with Buddy (images, documents)

Connected service data

  • Google Calendar events (if you connect Google Calendar)
  • Google Drive, Sheets, and Docs metadata and content for files you select for Buddy or Buddy creates
  • Email addresses, subjects, and message content you explicitly ask Buddy to send through Gmail

Memory and context

  • Facts, preferences, and notes Buddy stores about you to be helpful
  • Task lists, reminders, and scheduled actions you create
  • Dashboard data Buddy generates for you

Technical data

  • Browser type, device info, and IP address when you visit our website
  • Local storage tokens for session management

3. How we use your data

  • To provide the service: Process your messages, remember your preferences, manage your calendar, work with connected Google Workspace files, create dashboards, and perform tasks on your behalf.
  • To improve Buddy: Understand usage patterns, keep the service reliable, prevent abuse, and fix bugs. We do not use your private conversations or Google Workspace content to train generalized AI models.
  • To communicate with you: Send waitlist confirmations, service updates, and security alerts.

4. Privacy isolation

Buddy is designed with privacy isolation at its core. This is not a setting you toggle — it is how the system is built:

  • Per-person memory: When someone in your household chats with Buddy privately, their conversation and memory are loaded in isolation. You cannot see their private messages, and they cannot see yours.
  • Role-based tool access: Different people get different capabilities. Your child can chat with Buddy but cannot access your calendar, connected files, or settings.
  • Owner permanence: Only the account owner can grant or revoke access. This is enforced at the system level, not through prompts.

5. AI and service providers

Buddy uses OpenAI's API to process conversations and perform reasoning. When you send a message, the relevant context (your recent conversation, relevant memories, and any connected service data needed) is sent to OpenAI for processing.

OpenAI's API data usage policy states that data sent via the API is not used to train their models. We rely on this policy for your privacy.

We also use service providers for things like messaging transport, authentication, hosting, and transactional email delivery.

  • Messaging providers to send and receive messages on supported channels
  • Google OAuth and Google APIs when you connect Google services such as Calendar, Drive, Sheets, or Docs
  • Email providers for transactional emails such as login and product updates
  • Hosting and infrastructure providers to run the web app, APIs, databases, and file handling systems

6. Google API Services data handling

If you connect Google services to Buddy, we access Google user data only to provide the user-facing features you ask Buddy to perform, such as reading and updating calendar information or working with Google Drive, Sheets, and Docs when you explicitly request it.

  • We do not sell Google user data.
  • We do not use Google user data for advertising.
  • We do not allow humans to read Google user data except when required for support you request, security purposes, or legal compliance.
  • We do not use Google user data to train generalized or shared AI or machine learning models.
  • We aim to request and retain the minimum Google permissions reasonably needed for the features you choose to enable.
  • Buddy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who receives Google user data

We do not share, transfer, or disclose Google user data to third parties except in the limited circumstances below, and only to provide or secure the Buddy features the user requested:

  • AI processing providers (OpenAI and, if our configured fallback is required, OpenRouter): Buddy may send the minimum relevant portion of a user's request and connected Google data needed to understand and carry out that request. These providers process the data on our behalf and are not permitted by us to use it for advertising or to train generalized AI or machine-learning models.
  • Hosting and infrastructure providers: Google OAuth tokens and the limited Google data Buddy must retain to operate the requested features may be processed or stored by service providers that host Buddy's application, database, backups, and security systems. They process this data only on our instructions to operate and protect Buddy.
  • Google: Buddy sends API requests back to Google to perform the user-requested Calendar, Drive, Docs, Sheets, or Gmail action.
  • Recipients chosen by the user: when a user asks Buddy to send an email or share Google-derived content, Buddy discloses that content only to the recipient or destination the user selected.
  • Authorities or security investigators: we may disclose Google user data only when required by applicable law or when reasonably necessary to investigate abuse, fraud, or a security incident.
  • A successor in a corporate transaction: Google user data may be transferred as part of a merger, acquisition, or sale of assets only after obtaining the user's explicit prior consent where required by the Google API Services User Data Policy.

We do not transfer or disclose Google user data to advertisers, data brokers, information resellers, or other third parties for their own purposes. We do not sell Google user data, use it for advertising, credit or lending decisions, or permit it to be used to train generalized or non-personalized AI or machine-learning models.

7. Data storage and security

Your data is stored on secure servers. Conversations, memories, and connected service data are stored in encrypted databases. We use HTTPS for all data in transit.

We do not sell your data. We do not share your data with advertisers. We do not use your conversations to train AI models.

8. Data retention

  • Active accounts: Your data is retained for as long as your account is active.
  • Cancelled accounts: Your data is retained for 30 days after cancellation, during which you can reactivate or export your data.
  • Deletion requests: You can request full deletion of your data at any time by emailing us. We will process deletion within 14 days.

9. Your rights

You have the right to:

  • Access the data we hold about you
  • Export your memories, notes, and conversation history
  • Delete your account and all associated data
  • Disconnect Google Calendar, Drive, Sheets, Docs, Gmail, or any connected service at any time
  • Revoke access for any trust circle member

To exercise any of these rights, email jaiya@deployandforget.com.

You can also revoke Buddy's Google access directly from your Google account permissions settings at any time.

10. Cookies and local storage

Our website uses local storage (not cookies) to keep you signed in. We store:

  • buddy_token — your session authentication token
  • buddy_id — your Buddy instance identifier
  • buddy_email — a convenience value used for reconnect and onboarding flows

We do not use tracking cookies, analytics pixels, or third-party advertising scripts.

11. Children

Buddy is not intended for use by children under 13. On Household plans, children may interact with Buddy under parental supervision, but the account must be owned by an adult.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via email or through Buddy itself. The "last updated" date at the top reflects the most recent revision.

13. Contact

For any privacy-related questions or requests, contact us at: jaiya@deployandforget.com