the fine print

Privacy Policy

Last updated: September 13, 2026

1. Introduction

BUOY ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy explains our data practices. Where we ask for consent to optional website analytics, you may decline or withdraw that consent without losing access to the Service.

2. Information We Collect

Information You Provide

  • Account Information: When you create an account, we collect your email address, name, and authentication credentials (via third-party providers like GitHub or Google).
  • Payment Information: Payment processing is handled by Lemon Squeezy, which acts as the merchant of record. We never see or store your card details. Lemon Squeezy may collect billing information as described in their privacy policy.
  • Support Communications: When you contact us for support, we collect the information you provide in your messages.

Information Collected Automatically

  • Device Information: We collect device identifiers, operating system version, and device type for license management purposes.
  • Usage Data: We may collect information about how you use the Service, including features accessed and interaction patterns.
  • Log Data: Our servers automatically record information including IP address, browser type, and access times.

Application Debug Data

  • Debug tools inspect data inside your application. Desktop and MCP connections can send selected tool data to your configured broker.
  • Ask Buoy sends selected context to your configured model endpoint. Review your connection, export, and model settings before sharing application data.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage subscriptions
  • Register your devices and manage your license
  • Send transactional emails (receipts, subscription updates)
  • Respond to your inquiries and provide customer support
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Information Sharing

We may share your information with:

  • Service Providers: Third-party vendors who perform services on our behalf, including:
    • Lemon Squeezy (payment processing, merchant of record)
    • Clerk (authentication)
    • Keygen (license management)
  • Legal Requirements: When required by law or to respond to legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information after account closure for legitimate business purposes, including:

  • Complying with legal obligations
  • Resolving disputes
  • Enforcing our agreements

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure authentication via trusted providers
  • Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Object to or restrict processing of your information
  • Data portability
  • Withdraw consent

To exercise these rights, please contact us at support@buoy.gg.

8. Cookies and Tracking

We use essential storage for authentication, security, and remembering your privacy choice. These functions remain available whether you accept or reject analytics.

Optional website analytics uses a random browser identifier and remembers the first observed referring website and campaign labels. We record page paths, visits, and selected interactions, and may connect these to your account, signup, and payments to understand which sources bring customers. We use Cloudflare to process and store these analytics. The attribution records do not include full referrer URLs, search queries, or payment-card details.

Where our regional policy requires consent, optional analytics remains off until you accept. In the United States, this first-party analytics is enabled unless you reject it. In other unreviewed locations, or when we cannot determine the applicable region, it remains off unless you choose to accept. We use the approximate country and, where needed, region supplied by our hosting provider to select this behavior; we do not request your device's precise location. We honor Global Privacy Control by keeping these analytics off.

Your privacy choice is stored for up to 180 days in the first-party buoy_privacy_v1 cookie. When analytics is enabled, buoy_vid and buoy_acquisition_v1 are stored in your browser's local storage to remember visits and their original source. These local records persist until you reject analytics or clear browser data. The analytics event history is retained for up to 90 days.

You can change your choice at any time below or through Privacy choices in the footer. Rejecting analytics stops future optional browser tracking and removes its local browser records. It does not automatically erase previously collected server records; contact support@buoy.gg to request deletion. Account, security, billing, and licensing records needed to provide the Service are managed separately.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the modified policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

support@buoy.gg