BotBuyer Privacy Policy

Status: Early access

Operator: Build Star Labs (Florida)

Domain: botbuyer.ai (BotBuyer PWA / site)

Contact: We don’t have a public contact channel open yet; see botbuyer.ai/contact.

Effective date: October 9, 2026

Note: This Policy is not legal advice to you. We do not claim licenses, insurance, live payment methods, or escrow that we do not have.

Early access

BotBuyer is in early access. Features may change, be limited, or be unavailable.

This Policy describes how Build Star Labs (“BotBuyer,” “we,” “us”) handles personal information when you use BotBuyer at botbuyer.ai.

1. Who we are

BotBuyer is a product offered at https://botbuyer.ai (site and PWA).

Operator: Build Star Labs (Florida).

For privacy questions: We don’t have a public contact channel open yet; see botbuyer.ai/contact.

2. Scope

This Privacy Policy describes how we intend to handle personal information when you use:

• the BotBuyer website and PWA at botbuyer.ai;
• related BotBuyer services we make available in connection with that experience.

Early access. BotBuyer is currently an early-access experience. Features, payment methods, and workflows may be incomplete or unavailable. This Policy applies to the services as offered.

This Policy does not cover third-party merchant sites, payment-processor privacy practices, or other services you reach outside BotBuyer — those parties have their own policies.

3. Data we collect

Depending on how you use BotBuyer, we may collect:

3.1 Account, email, and authentication

• Account identifiers (e.g., email address)
• Authentication-related data (e.g., credentials hashes, session tokens, 2FA status where enabled)
• Profile or contact details you provide

3.2 Intent, search, and preferences

• Purchase intent / search queries and preferences you set
• Category or channel preferences (e.g., software across channels first; other categories may open later)
• Product settings relevant to searches and workflow

3.3 Spend limits and search metadata

• Spend limits / gates you configure (including the product spend gate, e.g., up to the configured cap such as $1,000 where applied)
• Search metadata needed to run, present, and approve searches, and to record any spend you separately approve (e.g., merchant, amount, status, approval records)
• Approval history: BotBuyer is designed so approving a search lets the agent get more information and is not a purchase, and any spend needs a separate yes from the designated account holder; auto-approve is OFF

3.4 Vault / payment-method information (processor tokens — not full card numbers in our systems, if design holds)

• Payment vault uses provider references / tokens via third-party processors
• Intended design: no raw PAN/CVC stored in BotBuyer application databases or logs
• We hope to support more payment methods over time over time. We do not claim payment methods that are not available
• We may receive limited payment-related metadata from processors (e.g., last4, brand, status) as needed to operate the vault UX
• BotBuyer’s product model does not hold custodial stored-value balances; vault = linked methods / pay-at-purchase via partners

3.5 Device, log, and usage data

• Device/browser type, approximate location derived from IP (where collected), IP address, timestamps
• App/site usage events, error logs, performance diagnostics
• Security-related signals (e.g., captcha outcomes, unusual activity flags)

3.6 Cookies and similar technologies

• Cookies, local storage, pixels, or similar tech for session, security, preferences, and analytics as configured
• A separate cookie notice / CMP may apply — see Section 10

3.7 Communications

• Messages and other communications you send us
• Records needed to respond and improve support

3.8 KYC / identity when required

• Where human gates require KYC, we or a designated provider may collect identity-verification data when required

We do not invent or claim collection of data categories we do not actually process. If a feature is not available, related processing may be limited or absent.

4. How we use data

We use personal information to:

• Provide the service — account, PWA/site access, vault UX, search workflow
• Search and approval workflow — match your intent, present search results, record approvals, and, only if you separately approve spend, support payment steps with merchants/processors as needed
• Spend gating and approvals — enforce spend limits; require account-holder approval before spend; keep auto-approve off unless expressly changed by product policy (current design: OFF)
• Security — authenticate users; detect fraud/abuse; captcha/2FA and bank/approval gates as configured
• Support — respond to requests and troubleshoot
• Product improvement — We may use usage data to fix bugs and improve search quality, within this Policy.

• Legal compliance — respond to lawful requests; enforce terms; protect rights and safety

We do not use this to claim marketing uses (e.g., selling personal info for ads) that are not product intent. See Section 6.

5. Where this Policy applies

BotBuyer is designed for users in the United States.

• If you are in California and CCPA/CPRA applies, you may have the rights described in Section 11.

6. Sharing

We may share personal information with:

Sale of personal information for ads: It is not BotBuyer’s product intent to sell personal information for advertising. We do not sell personal information for advertising.

We do not claim Escrow is operational. Escrow is not available. Do not treat any third party as BotBuyer escrow unless we expressly say so.

7. Retention

We retain personal information only as long as needed for the purposes above, including:

• account life and search/audit records needed for spend gating and support;
• security and legal hold requirements;
• processor-driven retention we do not fully control.

We keep information only as long as we need it for the purposes above.

When we no longer need data, we delete or de-identify it as reasonably practicable, subject to backups and legal requirements.

8. Security

Protecting real-money workflows is paramount. We intend to use measures appropriate to the risk, including access controls, encryption in transit where standard, tokenization via processors for payment methods, and human gates (approvals, captcha/2FA, bank gates where used).

No absolute security guarantee. No method of transmission or storage is 100% secure. You are responsible for protecting account credentials and devices.

9. Children’s privacy

BotBuyer is for users 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, let us know through the contact page and we will take appropriate steps to delete it. We don’t have a public contact channel open yet; see botbuyer.ai/contact.

10. Cookies and similar technologies

We may use cookies and similar technologies for authentication, security, preferences, and analytics as configured.

A detailed cookie list is not published yet.

11. Your choices and rights

Subject to applicable law, you may have rights to:

• Access personal information we hold about you
• Correct inaccurate information
• Delete information (subject to legal/operational exceptions, e.g., approval audit trails)
• Opt out of certain processing where required (where required by law)
• Appeal or escalate denied requests where law requires

How to exercise: We don’t have a public contact channel open yet; see botbuyer.ai/contact. When a channel opens it will be listed there, and we may need to verify who you are before acting.

12. International transfers

Our service providers may process information in other countries (for example, where they host data). We will describe any transfer safeguards here if they apply.

13. Changes to this policy

We may update this Policy. For material changes, we will post a notice on the site. Continued use after the effective date of an updated Policy constitutes acceptance where permitted by law.

14. Contact

• Privacy / legal contact: We don’t have a public contact channel open yet; see botbuyer.ai/contact.
• Site: botbuyer.ai
• Legal entity / operator: Build Star Labs (Florida).