Privacy notice

What Buzz keeps

• For everyone: your email address, your account type and when you confirmed your email. Sign-in codes and session keys are stored only in a scrambled form that cannot be turned back into the original. When you ask for a sign-in code, we record the internet address (IP address) the request came from, to limit how many codes can be asked for and to look into misuse.
• For businesses and agencies: the profile you fill in (name, website, Instagram handle, country and city), what Lo reads from your website and any text you paste to build your profile, and the campaign briefs you write.
• For creators: your profile (name, country, city and languages), the details you give for campaigns (such as your niche, city and availability), and when you accepted the terms and gave each consent.
• If you connect Instagram as a creator: your Instagram account ID, username and account type, and an access key, which we store encrypted. With that key we read your posts (link, caption and date) and their numbers (reach, views, likes, comments, shares and saves, and for Reels the average watch time and skip rate), and your daily reach.
• For agencies that connect a client's Instagram account: that account's Instagram ID, username and an access key, which we store encrypted.
• When you connect Instagram, Lo reads your recent posts and your bio to draft your profile: what you post about, who watches, the languages you post in and your city. You can edit every line. Google's Gemini model writes the draft. We keep the captions and the bio only until the draft is written, or for an hour at most when it cannot be, and then delete them.
• When your campaign Reel goes live, Buzz reads its video file from Instagram once and compares it with the draft the business approved: its length and five small still frames. It also counts your other Reels posted the same day. Buzz keeps only the result (the two lengths, how many frames differ and how many other Reels) and deletes the video it read as soon as the check ends.
• Drafts you submit for a campaign: the video or images, your note, the caption you plan to post, your answers about where the sound comes from and whether you used AI, and the result of the review.
• Money: the amounts owed and paid to creators, and tips. Buzz does not keep bank details.
• Campaign links: when someone opens a campaign link, we record which link and when. We do not record their IP address or device.
• A record of actions in Buzz (who did what, and when), so our team can check what happened.
• Emails we send you: your address, the subject and when it was sent. We do not keep a copy of the email text.

How Buzz uses Instagram data

• Buzz asks Instagram for two permissions only: to read your basic account details (instagram_business_basic) and to read the numbers of your posts and account (instagram_business_manage_insights). Buzz never posts, comments or sends messages on Instagram for you.
• For creators, we use this data to draft your profile with Lo, to see how your posts perform when we choose creators for campaigns, to find the Reel you published for a campaign by the ad tag in its caption, to measure its reach and views so we can rank each wave's creators and work out what we pay you, and to show the business that ran the campaign a link to your published Reel and its views.
• For agencies, when you connect a client's Instagram account, we use it only to confirm that you represent that client.
• We do not sell Instagram data and do not use it for advertising. We share it only as this notice describes: with the business that ran your campaign, as set out under "Who sees what", and with the services listed under "Services that handle data for us".
• To stop Buzz reading your Instagram account, remove Buzz in the Instagram app under Settings and activity, then Website permissions, then Apps and websites. To have the data deleted, see "Deleting your data".

How AI checks your drafts

When you submit a draft, Attractor uses AI to check it against the campaign brief. The sound of your video goes to a speech-to-text service that keeps nothing after the check. Your video or carousel images, the transcript and the brief then go to Google's Gemini model, and Google may keep them for safety monitoring. If the AI is unsure about your draft, a person on our team reviews it.

Who sees what

• Businesses and agencies see creators as "Creator 1", "Creator 2" and so on until a creator's post is published. After that they see a link to the creator's published post on Instagram and its views. They never see a creator's name, email address or individual pay.
• Creators never see who the other creators in a campaign are, or the campaign's budget.
• The Attractor team that runs Buzz can see everything listed above. We use it to run campaigns, review drafts, pay creators and answer your questions.

Services that handle data for us

• Render hosts the Buzz app and its database.
• A cloud file store keeps draft videos and images.
• Resend sends our emails.
• OpenRouter carries draft checks to the speech-to-text service and to Google's Gemini model, and carries Lo's text work to Google's Gemini model.
• Google's Gemini model helps Lo with text work: drafting your business profile and your campaign brief from what you give us, and replying when a creator plans a video with Lo. Google may keep this text for safety monitoring.
• Instagram (Meta) provides the posts and numbers we read for creators who connect their account, and the account details that confirm an agency's client.

Cookies

Buzz sets two cookies. One remembers your language for a year. The other keeps you signed in; only our server can read it, and it lasts until you sign out, and at most 30 days. Buzz uses no analytics or advertising cookies.

How long we keep data

This list says how long Buzz keeps each kind of data.

• Your account: your email address, your sign-in account and, for creators, your name, country, city and languages. Buzz cannot delete these yet, so we keep them with no end date. They stay even after we delete a creator account in full.
• Sign-in: a sign-in code works for 10 minutes, and a session lasts 30 days at most. We keep the record of each code request, with the IP address it came from, for 30 days, and then delete it.
• Business and agency data: your profile, your campaign briefs and your answers to Lo while you write a brief. We keep them with no end date, because Buzz cannot delete a business or agency account yet. If you ask us to delete yours, a person on our team handles your request by hand.
• Creator data: your campaign details, your answers to Lo when you plan a video, the opens of your campaign links and the result of the live Reel check. We keep them until we delete your creator account in full. That delete removes them.
• Drafts: the video or images, your note, the caption you plan to post, your answers about the sound and AI, the review result and a short record of each AI check (which model ran, what it cost and a fingerprint (a hash) of the text, which cannot be turned back into the text). We keep them until we delete your creator account in full. That delete removes them, with the stored video and image files.
• Instagram: we keep the access key while you stay connected, and Buzz renews it before it runs out. If we remove your creator account, we delete the access key at the same time and stop reading your account; if you join again, you connect Instagram again. We keep your post numbers and daily reach with no end date.
• Payment records: what each creator was owed and paid, tips, and how a campaign's money was split. We need them to pay creators, to settle disputes and to meet the law. We keep them at least as long as the law requires us to keep financial records.
• Campaign results: each wave's ranking and any correction to it, ranking disputes, reach reviews, and the numbers read from published posts. We keep them with no end date, because we need them for payments, for disputes and to meet the law. Buzz never deletes them.
• The record of actions: we keep it with no end date, so our team can check what happened. Buzz never deletes it, and changes it only to swap your old account ID for the new one if your account moves to the main Attractor platform. New lines name a creator by an ID only. Older lines may still name a creator by their Instagram handle.
• Emails we sent you: we keep the record (address, subject and time) with no end date, so we can check what we sent and when. Details needed only to send an email, such as a sign-in code, are cleared once it is sent or cannot be sent.
• Instagram deletion requests: when Instagram asks us to delete your data, we keep a record of the request (its code, your Instagram account ID and the dates). We keep it with no end date, so you can check the status of your request with its code.
• If your account moves to the main Attractor platform, Buzz keeps a list that pairs your old account ID with the new one. We keep it with no end date, so records made before the move can still be checked.

Deleting your data

Buzz has no delete button yet. To delete your account and your data, email privacy@theattractor.ai from the address on your account. A person on our team handles each request. We reply within 30 days.

We delete a creator account in full only when it holds no payment, no published campaign post, no ranking dispute and no reach review. A full delete removes your campaign details and offers, your drafts and their files, your chats with Lo, your Instagram connection and its key, and the numbers we read from your account. Your sign-in account stays, with your name, country, city and languages. The record of actions and the record of emails we sent you stay too.

Payment records are kept. If your account holds a payment, a published post, a ranking dispute or a reach review, we cannot delete it in full. A person on our team handles your request by hand. While a payment, a published post, a ranking dispute or a reach review holds your account, we take it out of new campaigns, so you get no new offers. Your account keeps its data. Work already under way goes on, and we still pay what we owe you. To stop Buzz reading your Instagram account at any time, remove Buzz in your Instagram settings, and we delete the access key.

If you remove Buzz from your Instagram settings, Instagram tells us and we delete the access key. If you ask Instagram to delete the data Buzz holds, we delete your Instagram connection and its key, and keep a record that you asked. Numbers we have already read from your posts stay, as set out under "How long we keep data".

Contact

Questions about this notice or your data: privacy@theattractor.ai.

Buzz is run by S P G Marketing Management LLC, a company registered in Dubai, United Arab Emirates.