Privacy Policy

(Last Updated: April 20, 2026)

1. Who We Are

BuzzBoard, Inc. ("BuzzBoard," "we," or "us") builds and operates Zylo (ZYLO⁵), an AI-powered autonomous marketing platform designed for small businesses. This Privacy Policy explains how we collect, use, share, and protect your information when you visit zylo5.com or use the Zylo platform (the "Service").

BuzzBoard is headquartered at 345 California St., Suite 600, San Francisco, CA 94104, United States.

---

2. Information We Collect

2.1 Information You Provide

When you sign up, contact us, or use the Service, you may provide:

• Account information: name, email address, phone number, company name, and billing details
• Business information: your website URL, business address, services, and offers — used to set up your account and tailor your marketing
• Content you upload: logos, images, copy, or other materials you provide for marketing use
• Communications: messages you send to our support team or feedback you submit

2.2 Information We Collect Automatically

When you visit our website or use the platform, we automatically collect:

• Device and browser information: browser type, operating system, screen resolution, and device identifiers
• Usage data: pages visited, features used, clicks, session duration, and navigation paths
• Network information: IP address, approximate location (city-level), and referring URL
• Cookies and similar technologies (see Section 7)

2.3 Information from Your Website

During setup, Zylo scans your publicly accessible website to learn about your business. This may include your business name, contact details, service descriptions, pricing, testimonials, images, color palette, and tone of voice. This information is used to configure your account and ensure that all marketing content Zylo creates matches your brand. We only scan pages that are publicly available — we do not access password-protected areas, customer databases, or internal systems.

2.4 Information from Third-Party Platforms

If you connect Zylo to third-party services (such as Google Ads, Google Business Profile, Meta, or email platforms), we may receive performance data (impressions, clicks, spend) and account identifiers needed to manage campaigns on your behalf. We access only the data necessary to deliver the Service and in accordance with each platform's API terms.

---

3. How We Use Your Information

We use your information to:

• Deliver the Service: Set up your account, generate and publish marketing content, manage ad campaigns, respond to reviews, and optimize your presence across channels on your behalf
• Improve the platform: Analyze usage patterns to enhance features, fix bugs, and optimize performance
• Communicate with you: Send account-related notifications, billing confirmations, product updates, and (with your consent) marketing communications
• Ensure security: Detect fraud, prevent abuse, and protect the integrity of our systems
• Comply with legal obligations: Respond to lawful requests from authorities and meet regulatory requirements

---

4. AI & Automated Processing

4.1 Website Scanning & Business Profile

When you provide your website URL, our AI scans your publicly accessible pages to understand your business — including your name, visual identity, tone of voice, services, and key offerings. This information is stored in your account profile and used to ensure that all marketing content Zylo creates is consistent with your brand.

4.2 Content Generation

Zylo uses AI models to create marketing content — including social posts, ad copy, email campaigns, review responses, and images — tailored to your business profile. This content is generated for your account and is not shared with other users.

4.3 Model Training

Zylo's AI models are trained on publicly available data. We do not use your private business data, account profile, generated content, or any non-public information you provide to train or improve our AI models. Your private data is used solely to deliver the Service to you — never to build or refine the models themselves.

Zylo may use aggregated, de-identified usage patterns (such as which content formats perform best across categories of businesses) to improve the Service. No personally identifiable information or individual business details are included in this aggregated data.

If you have questions or concerns about how your data is used in connection with service improvement, please contact us at support@buzzboard.com.

4.4 Google Workspace APIs

BuzzBoard affirms that Google Workspace APIs are not used to develop, improve, or train generalized AI or machine learning models. Any Google Workspace API integration adheres strictly to the scope required to support your business objectives.

---

5. How We Share Your Information

We do not sell, rent, or lease your personal information. We may share your data in these circumstances:

• Service providers: We use trusted third parties to help deliver the Service — including cloud hosting, payment processing, email delivery, and analytics. These providers are contractually bound to use your data only to perform services for us.
• Third-party platforms: When you connect Zylo to platforms like Google Ads or Meta, we transmit data necessary to create and manage campaigns on those platforms.
• Provider channel: If you access Zylo through a marketing agency or reseller (via BuzzBoard's provider channel), your agency may have access to your account and performance data as part of the managed service they provide.
• Legal requirements: We may disclose your information in response to lawful requests by public authorities, including national security or law enforcement requirements.
• Business transfers: If BuzzBoard is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

---

6. Data Processed on Behalf of Clients

When Zylo is deployed through BuzzBoard's provider channel (marketing agencies and resellers), BuzzBoard acts as a data processor on behalf of those clients. In this capacity:

• BuzzBoard processes personal data under the direction of its clients and has no direct relationship with the end consumers whose data may be processed
• Individuals who wish to access, correct, or delete their data should contact the agency or business that they interact with directly
• If requested to remove data by a client, we will respond within 30 business days

Provider-channel clients who require a standalone Data Processing Agreement (DPA) for regulatory or contractual purposes may request one by contacting support@buzzboard.com.

---

7. Cookies & Tracking Technologies

7.1 Cookies

We use cookies to personalize your experience, remember your preferences, and analyze how the Service is used. You can control cookies through your browser settings. Disabling cookies may affect the functionality of some features.

7.2 Analytics

We use analytics tools to understand how users interact with our website and platform. This data is collected in aggregate and is used to improve the Service.

7.3 Advertising

We may partner with third-party advertising networks that use cookies and web beacons to serve targeted ads based on your browsing activity. You can opt out of interest-based advertising through the NAI opt-out page or the DAA opt-out page. Opting out does not prevent all advertising — you will still see non-targeted ads.

7.4 Web Beacons

We use clear GIFs (web beacons) in our HTML-based emails to track open rates and measure the effectiveness of our communications. We do not tie web beacon data to your personally identifiable information.

---

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your account, we will retain your data for 30 days to allow for export, after which it will be deleted in accordance with our standard data lifecycle procedures. We may retain certain data longer where required by law or to resolve disputes.

---

9. Data Security

We use industry-standard security measures to protect your information — including encryption in transit (TLS/SSL), access controls, and secure hosting environments. No method of protection is 100% secure. If you believe your account has been compromised, contact us immediately at support@buzzboard.com.

---

10. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Request portability of your data
• Opt out of marketing communications
• Withdraw consent where processing is based on consent

To exercise any of these rights, email support@buzzboard.com. We will respond within 30 days.

---

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete your personal information
• The right to opt out of the sale or sharing of your personal information — BuzzBoard does not sell your personal information
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit use and disclosure of sensitive personal information

To submit a request, email support@buzzboard.com with the subject line "California Privacy Request."

---

12. EU-U.S., UK, and Swiss Data Privacy Frameworks

BuzzBoard complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data transferred from the EU, UK, and Switzerland to the United States.

BuzzBoard has certified to the U.S. Department of Commerce that it adheres to the DPF Principles. If there is any conflict between this Privacy Policy and those Principles, the Principles shall govern. To learn more, visit dataprivacyframework.gov.

BuzzBoard is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). BuzzBoard remains responsible and liable under the DPF Principles if third-party agents process personal data on its behalf in a manner inconsistent with the Principles, unless BuzzBoard proves it is not responsible for the event giving rise to the damage.

DPF Complaints

If you are located in the EU, UK, or Switzerland and have a privacy complaint, please contact:

If your complaint is not resolved satisfactorily, you may file a complaint with the Data Privacy Framework Services, operated by BBB National Programs, at bbbprograms.org. This service is free of charge.

If your complaint cannot be resolved through the above channels, you may — under certain conditions — invoke binding arbitration. See DPF Arbitration Procedures.

---

13. Children's Privacy

Zylo is designed for use by businesses, not by individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at support@buzzboard.com and we will delete it promptly.

---

14. Social Media Features

Our website may include social media features (such as "Share" or "Like" buttons) provided by third parties. These features may collect your IP address and set cookies. Your interactions with these features are governed by the privacy policy of the company providing them.

---

15. Links to Other Websites

Our site contains links to third-party websites whose privacy practices may differ from ours. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policy of any website you visit.

---

16. Unsubscribing from Communications

You may unsubscribe from BuzzBoard marketing emails by clicking the "unsubscribe" link at the bottom of any email. Note that BuzzBoard's clients may send emails through our platform with BuzzBoard branding. We do not control those email lists — please contact the sender directly to unsubscribe from their communications.

---

17. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or by a notice on the Service at least 30 days before they take effect. The "Last Updated" date at the top reflects the most recent revision.

---

18. Contact