Privacy Policy

01 - Roles

Who controls what

buduss serves two kinds of people, and the privacy roles differ for each:

• Creators - the photographers and videographers who hold a buduss account. For a creator's own account information, buduss acts as the controller.
• The creator's clients - the people a creator prepares proposals for. The creator decides what client details to enter and why. For that client information, the creator is the controller and buduss is the processor, handling the data on the creator's behalf and under their instructions.

In plain terms: your clients' details are yours. We process them so the service works, and we don't use them for our own purposes.

02 - Collection

What we collect

We collect only what we need to run buduss:

• Account information - your name, email address, login credentials, studio/brand details, and billing information needed to manage your subscription.
• Content you create - the proposals, contracts and invoices you generate, the text of client inquiries you paste in, and the client details you enter (such as a client's name, email, phone, event date and location).
• Signature & transaction records - the audit trail for signed documents (signer identity, timestamps, and device/location signals) and records of payments your clients make.
• Usage data - how you interact with the product, device and browser information, approximate location derived from IP, and diagnostic logs that help us keep things working.
• Cookies & similar technologies - used to keep you signed in, remember preferences, and understand how the product is used. You can control cookies through your browser settings.

03 - Use

How we use it

We use information to:

• Provide, maintain and improve buduss - including generating your proposals and enabling signing and payment.
• Process your subscription and send you account, security and service messages.
• Maintain the integrity and legal validity of signed documents through the audit trail.
• Protect against fraud, abuse and security threats, and comply with legal obligations.
• Understand product usage in aggregate so we can make buduss faster and simpler.

We do not use the content you create, or your clients' details, to build advertising profiles or to market to your clients.

04 - Sharing

Who we share with

We share information only with service providers who help us run buduss, and only as needed to perform their function, under confidentiality obligations. These include:

• Payment processors - to handle the payments your clients make to you. (When a client pays you, that transaction is between your client and you, facilitated by the processor; buduss is not a party to it.)
• Email and communication providers - to deliver account and document notifications.
• Hosting and infrastructure providers - to store data and run the service securely.

We may also disclose information if required by law, to enforce our terms, or in connection with a business transfer (such as a merger or acquisition), in which case we will continue to protect it under this policy.

05 - No sale

We do not sell your data

We do not sell your personal information or your clients' personal information, and we do not share it for cross-context behavioral advertising. We have no interest in being an advertising business - we're a tool you pay for.

06 - Your rights

US state privacy rights

Depending on where you live - including under the California Consumer Privacy Act as amended by the CPRA, and comparable laws in other US states - you may have the right to:

• Know what personal information we hold about you and access a copy of it.
• Request correction of inaccurate information.
• Request deletion of your personal information, subject to legal exceptions.
• Opt out of any "sale" or "sharing" of personal information (note: we do neither).
• Not be discriminated against for exercising these rights.

To exercise a right, contact us at [Contact email]. Where buduss acts as a processor for your clients' data, we will direct requests to the relevant creator (the controller) and assist them in responding. We will verify your identity before acting on a request.

07 - Retention

How long we keep it

We keep information for as long as your account is active and as needed to provide the service. Signed documents and their audit trails may be retained longer to preserve their legal validity and to meet record-keeping obligations. When information is no longer needed, we delete or de-identify it. You can export and delete your content as described in our Terms.

08 - Security

How we protect it

We use administrative, technical and physical safeguards designed to protect information - including encryption in transit, access controls, and monitoring. No method of transmission or storage is perfectly secure, but we work to protect your information and to promptly address issues if they arise.

09 - Children

Adults only

buduss is intended for adults aged 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it.

10 - Changes

Updates to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the effective date above and, where appropriate, notify you. Your continued use of buduss after an update means you accept the revised policy.

11 - Contact

Reach us

Questions about this policy or your information? Contact [Legal entity name] at [Contact email]. This policy is governed by the laws of [Governing state].