Privacy

Who holds what

Businesses use Brain Buzz Chat to answer their customers. When you talk to one of these assistants, the business decides what to do with the conversation and we store it for them. If you want something removed, the business can do it, and so can we on their instruction.

Website voice recordings

When a business enables voice recording, we show a recording notice before you start. Selecting Start recorded voice chat accepts recording of your microphone and the assistant’s spoken replies during that call. You can choose typing instead or end the call at any time. We also keep the notice version and the time you accepted it.

Audio is held in private Vercel Blob storage and is accessible through the business’s authenticated inbox. Recordings expire after 90 days by default; a business can choose 30 or 365 days for new recordings. Expired audio cannot be played and is removed by a daily deletion process. Audio expiry does not delete the conversation transcript.

What is stored when you use a chat

• What you and the assistant said to each other.
• The page you were on when you opened it.
• A random identifier in your browser, so the conversation is still there if you come back. It is not a cookie and it is not shared with the site you were visiting.
• A one-way hash of your IP address, used to stop abuse. The address itself is not kept.
• Anything you volunteer — your name, email, phone number, what you need — and only what you volunteer.

Who else sees it

The message you send is processed by OpenAI to generate a reply, and by Google when a conversation uses voice or needs to search the business’s own material. Neither trains on it. If the business has connected a calendar, an appointment you book is written to it. Text messages go through Twilio. When voice recording is enabled, Vercel stores the private audio files for us. Your conversation is never sold.

Calendar access

When a business connects Google Calendar, Microsoft 365, Calendly, Cal.com, Acuity Scheduling, or Setmore, we ask only for what booking needs: reading availability, creating the booking (or, where a provider cannot take one directly, a one-time scheduling link), and receiving booking updates. The details you give for a booking, such as your name, email address and phone number, are sent to that provider to create it. With Acuity Scheduling and Setmore we also read the business’s upcoming appointments there from time to time, to notice changes made in the provider. We do not use the contents of existing appointments to answer conversations, and provider credentials are encrypted at rest. Disconnecting removes our stored access and provider webhook; personal access tokens and API keys can also be revoked in the provider account. Brain Buzz Chat’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long

Conversations are kept for as long as the business chooses, up to a year by default, then deleted along with the IP hash. A business can set a shorter period. Ask, and yours can be removed sooner.

Text messages

See the SMS terms for when you are texted and how to stop.

Getting in touch

Write to privacy@brainbuzzchat.com to see what is held about you or to have it deleted. Tell us which business you were talking to, so we can find it.