WeBuzz Inc. runs referral programs for businesses. This policy explains what we collect, why, and what we deliberately do not collect. It describes the product as it actually works today, not as a template.
Who we are
WeBuzz Inc., a Delaware corporation. Questions about this policy or your data go to admin@webuzz.ai.
The two kinds of people in WeBuzz
A brand is a business running a referral program. An ambassador is a person sharing a referral link. A brand is our customer. An ambassador may have been invited by a brand. Where a brand decides something about its own program, we say so below rather than implying the choice is ours.
What we collect
When you create an account: your name and email address, and your phone number if you choose to give one. Sign in itself is handled by Clerk, our authentication provider, which holds your password or your linked Google or Apple account. We never see your password.
When someone uses a referral link: we record that the link was used, when, and a coarse location from the network request. We also record a one way hash of the visitor IP address and, where available, a one way hash of a device fingerprint. These hashes let us tell a real referral from a click flood without keeping the underlying identifiers.
If you are paid a reward: a reference to your payout account held at Stripe, and the status of your tax paperwork, for example whether a W-9 has been collected.
Records of your activity in the product, such as referrals you created, rewards you earned, and changes made in an admin account. Records of administrative actions exist so a brand can audit its own program.
What we do not collect
This list is as important as the one above, and every line is enforced by how the system is built.
- We do not store raw IP addresses or raw device fingerprints. Only one way hashes, which cannot be reversed back into an address.
- We do not store your card number or your bank details. Payments and payouts run through Stripe, which holds those details. We keep only a reference to the account.
- We do not store your taxpayer identification number. Our tax records hold a status and a validation flag, not the number itself.
- We do not run advertising trackers or third party analytics. There is no Google Analytics, no advertising pixel, and no session recording on this product. We set no tracking cookies of our own. The only cookies are the ones Clerk needs to keep you signed in.
- We do not sell your personal information, and we do not share it for cross context behavioural advertising.
Why we use it
To run referral programs and attribute a referral to the right person, to detect fraud and click flooding, to calculate and pay rewards, to provide support, to keep the service secure, and to meet legal, tax, and accounting obligations.
Who we share it with
We use a small number of service providers, each for a stated purpose, and none of them receives your data to use for their own purposes:
- Clerk, authentication and sign in.
- Google Cloud Platform, hosting and the database, in the United States.
- Cloudflare, which sits in front of the service for security and abuse protection.
- Stripe, payments and payouts, where a brand pays rewards in cash.
- Tremendous, gift card fulfilment, only for brands that choose gift card rewards.
Where an AI assistance feature is switched on for a brand, content that brand submits to that feature is sent to a third party model provider to generate a response. That content is not used to train models.
We also disclose information when the law requires it, and to a buyer or successor if the business is acquired, in which case this policy travels with the data.
A brand running a program can see the referral and reward activity of the ambassadors in that program. That is the point of the product, and a brand is responsible for how it uses what it sees.
How long we keep it
We keep your account information while your account is open. Referral events, reward records, and ledger entries are kept longer, because they are financial and audit records and because a fraud pattern is only visible over time. Where the law sets a minimum retention period for tax or financial records, we follow it. You can ask us to delete your account, and we will, except for records we are required to keep.
Your choices
You can ask us to show you the personal information we hold about you, correct it, delete it, or send you a copy. Write to admin@webuzz.ai. Depending on where you live you may have additional rights, including under the California Consumer Privacy Act. We do not charge you or degrade your service for exercising any right.
Children
WeBuzz is not for children. You must be at least 18 to hold an account, because accounts can be paid money.
Security
Traffic to WeBuzz is encrypted in transit. The application is reachable only through Cloudflare, and the origin refuses requests that do not arrive that way. Access to production data is limited to people who need it. No system is perfectly secure, and we will not pretend otherwise.
Changes
If we change this policy we will change the effective date above, and for a significant change we will tell account holders directly rather than relying on you to notice.