Privacy Policy

Last updated 17 October 2026

BuzzHoot is a social listening service. This policy explains what personal data we handle, why, who we share it with, and the choices you have. It covers two groups of people: our customers (people who sign up for and use BuzzHoot), and people whose public posts appear in BuzzHoot because a customer is monitoring a topic they wrote about.

1. Who we are

BuzzHoot is operated by Andy Tanu Ciaputra, an individual business operator based in Indonesia ("BuzzHoot", "we", "us"), at Cluster Monaco Village, Jl. Prince Albert 1 No. 3, Gading, Kec. Serpong, Kabupaten Tangerang, Banten 15810, Indonesia. We are the data controller for customer account data. For any privacy question or request, email [email protected].

2. Data we collect about customers

• Account data: your name, email address, password (stored only as a hash), and, if you sign in with Google, the basic profile Google shares with us.
• Workspace content: the organisations, campaigns, keywords, labels, notes, dashboards, reports, alert rules and other settings you create.
• Integration data: when you connect Slack, Google Sheets, Discord, Telegram, webhooks or an AI assistant over MCP, we store the access tokens and destinations needed to deliver to them. Tokens are encrypted at rest.
• Billing data: payments are handled by our reseller, Creem (see section 6). We receive your name, email, plan, payment status and billing country. We never see or store your card details.
• Usage and technical data: credit usage, feature usage, IP address, browser type and server logs, which we use for security, debugging and billing accuracy.
• Communications: messages you send to support.

We use only the cookies needed to keep you signed in and remember preferences such as light or dark mode. We do not use advertising or third-party analytics cookies.

3. Public social media data

To provide the service, BuzzHoot collects publicly available posts, comments and profile information from social platforms (currently X, TikTok, Threads, Instagram, Facebook and YouTube) that match the keywords, accounts or topics a customer chooses to monitor. This can include a public author's username, display name, profile picture, follower counts, and the text, media links and engagement figures of their public posts.

• We collect only content the author has made public. We do not access private messages, private accounts or content behind a login the author controls.
• We analyse this content (for example sentiment, topics and classification, partly with AI) to produce aggregate insight for the customer who asked for it.
• We do not sell this data, use it for advertising, or build profiles of private individuals for any purpose other than the customer's brand and market research.
• Customers must use this data lawfully; our Terms of Service forbid using BuzzHoot to stalk, harass, surveil or discriminate against individuals.

If your public content appears in BuzzHoot and you want it removed, email [email protected] with a link to the post or profile. We will remove it and stop collecting from that account where we reasonably can.

4. Why we use personal data

• To provide the service you signed up for (performing our contract with you).
• To bill you and keep accurate credit and usage records (contract and legal obligations).
• To keep BuzzHoot secure, prevent abuse and fix problems (our legitimate interests).
• To send service email such as sign-in links, alerts, reports, invoices and important changes. We do not send marketing email without your consent, and you can opt out at any time.
• To comply with the law, including tax and accounting obligations.
• For public social data: our and our customers' legitimate interest in understanding public conversation about brands, products and topics, balanced by the safeguards in section 3.

5. AI processing

Some features send content to AI model providers (OpenAI and Anthropic) to classify posts, summarise conversation and answer questions about your data. These providers process the content to return a result and, under their business API terms, do not use it to train their models. AI output can be wrong; treat it as a starting point, not a fact.

6. Who we share data with

We share personal data only with service providers that help us run BuzzHoot:

When you connect an integration (for example Slack or Google Sheets), we send data to it on your instruction. We may also disclose data if the law requires it, or to protect our rights or someone's safety. We never sell personal data.

7. International transfers

Our providers operate in several countries, including the United States and the European Union, so your data may be processed outside Indonesia or your own country. We rely on these providers' contractual and security commitments to protect it.

8. How long we keep data

• Account and workspace data: for as long as your account is active, then deleted within 90 days of closing your account, except where we must keep records for longer by law.
• Collected social content: the full raw data returned by a platform is deleted after 30 days. The processed mention (text, author handle, metrics and classification) is kept while the campaign that collected it exists, and is deleted with the workspace.
• Billing and tax records: as long as tax law requires, generally up to 10 years.
• Logs: kept for a short period for security and debugging, then deleted.

9. Security

We use encryption in transit (HTTPS), encrypt integration secrets at rest, hash passwords, restrict access by role, and check every outbound address a customer configures. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

10. Your rights

Depending on where you live, including under Indonesia's Personal Data Protection Law (UU No. 27 of 2022) and, for people in the EU or UK, the GDPR, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent. To use any of these rights, email [email protected]. We will reply within 3 x 24 hours to acknowledge your request and act on it as the law requires. You can also complain to your local data protection authority.

11. Children

BuzzHoot is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children through sign-up.

12. Changes to this policy

If we make material changes, we will update the date above and tell customers by email or in the app before the changes take effect.

13. Contact

Andy Tanu Ciaputra, Cluster Monaco Village, Jl. Prince Albert 1 No. 3, Gading, Kec. Serpong, Kabupaten Tangerang, Banten 15810, Indonesia. Email: [email protected].