Your information
Privacy policy
For the BUYZ iPhone app, admin website and Shopify app.
Last updated:
What we collect and why
BUYZ uses your sign-in email or Apple sign-in identity and account identifier to sign you in and keep your account separate from other accounts. We store your company name, time zone, default markup, memberships and roles to give your team access to the right store. Invitations include the recipient’s email, invited role, expiry and acceptance or revocation status.
Your buying records include markets, cities, trip dates, vendors, booth details, orders, categories, Products, Variants, quantities, costs, retail prices, delivery dates and notes that you enter. Photos, voice recordings and available transcripts belong to those buying records. We use these records to save your work, calculate buying totals and sync it with your team.
The service also stores device identifiers, sync versions, changes, mutation receipts and activity records, such as invitations, membership changes and company changes, to coordinate devices, enforce access and avoid applying a change twice.
Camera, microphone and speech
The iPhone app asks for camera access to photograph Products and price and size labels, microphone access to record Product notes, and speech recognition permission to transcribe notes. Text recognition and supported speech transcription run on the iPhone. Audio is not sent to a transcription service. A recording can still upload as part of your store’s buying records.
Original captures stay on the iPhone. Photo uploads use resized JPEGs and thumbnails with source metadata removed. Voice uploads use the recorded audio. Raw recognized label text is stored locally; fields you apply become part of your buying records.
Where information is kept and who receives it
The iPhone keeps account-specific buying records and media in the app’s local storage so you can work offline. Sign-in credentials are kept in the iPhone Keychain. Synced records are kept in the service’s PostgreSQL database; uploaded photos and audio are kept in Cloudflare R2 object storage. Supabase Auth handles sign-in.
Your company’s members can access shared buying records according to their role. Resend delivers invitation emails and receives the recipient address and invitation content: company name, roles, expiry and the acceptance link.
The admin website uses sign-in and company-selection cookies to maintain your session. The Shopify embedded app also uses sign-in cookies. This public website at buyz.app does not set cookies or load analytics.
Shopify connections
When you connect Shopify, BUYZ stores the shop domain, company connection, granted permissions, encrypted access token, installation state and subscription status received from Shopify. This supports your store connection. It does not yet send Written orders to Shopify.
Shopify customer data-request and customer-redaction notifications are accepted without saving their customer payloads. BUYZ does not store Shopify customer profiles or customer orders. A Shopify shop-redaction notification removes the applicable shop connection and token; uninstalling removes the token and disables the integration. These actions retain the company’s buying records in BUYZ. Event receipts and activity records can remain.
Retention and deletion
Local records, original captures and unsent changes are retained when you sign out, for when you return to that account. Signing out or leaving a store does not delete the store’s shared buying records.
Company deletion is restricted to the company owner. It ends access to that company, revokes open invitations and queues media cleanup. The cleanup worker removes uploaded media for deleted companies, deleted Products and deleted media records. Pending uploads idle for more than seven days are eligible for cleanup. Cleanup runs in the background and may retry after storage failures.
Company deletion does not immediately erase all database records. Company, buying, invitation, sync and activity records can remain. Removing a Shopify connection does not delete your BUYZ account.
To request deletion of your account and data, email hello@yetiwerks.io. Include the email you use to sign in and your store name. There is currently no self-service account deletion screen.
No advertising or tracking
BUYZ has no advertising or tracking features. We do not sell your data.
Contact
For privacy questions or deletion requests, email hello@yetiwerks.io.