This page describes how BuyableAI processes personal data on behalf of clients, and lists the sub-processors involved. It is generated from the same source as the privacy policy, so it never goes stale.
Roles
The client is the data controller for their customer data. BuyableAIis the data processor, acting on the client's documented instructions.
What we process and why
Product and catalog data, business contact details, and assessment results, solely to provide the measurement and optimization service.
Security
Encryption in transit and at rest, role-based access, least privilege, a second secret for sensitive actions, and a full audit trail.
Your rights and ours
Personal data can be exported or erased on request, and old records are purged automatically past their retention window. We handle data under the relevant laws, including GDPR, CCPA, and India's DPDP Act.
Sub-processors
- Hosting and database: Running the platform and storing records
- AI model providers: Generating content and measuring AI engines
- Email provider: Transactional and operator email
- Payment provider: Billing and payments