Privacy Policy

1. Who we are

BuyersX, LLC, a Nevada limited liability company is the controller of the personal information described here. Write to us at privacy@buyersx.com.

2. What we collect

2.1 Account and workspace information

Your email address, and your name and company if you provide them. Your workspace memberships and role. Your plan and quote usage count. Workspace owners and admins can see the members of their workspace and the analyses in it.

2.2 Quote content

The PDFs you upload are parsed in memory and are not written to disk or object storage. What we store for each file is its filename, size and page count, up to 50,000 characters of extracted text, and the structured line items produced from it, including SKU, description, manufacturer, quantity and unit price. Before quote text is sent to our AI provider, we replace email addresses, telephone numbers and government identifier patterns with placeholders.

Quote Materials are business documents. Please do not upload personal information beyond the business contact details of people acting in a professional capacity. Terms of Service section 5.3 puts that obligation on you.

2.3 Usage information

We record first-party product events: the event name, a small set of properties, the page path, and an anonymous session key stored in your browser’s local storage. Events are associated with your account and workspace when you are signed in. We use no third-party analytics or advertising technology, and we do not track you across other websites.

2.4 Billing information

Our payment processor handles card details. We never receive or store your full card number. We store the processor’s customer and subscription identifiers, plan, amount, currency and status.

2.5 Operational records

An audit log of significant workspace actions (who did what, and when), a queue of transactional emails we have sent you, and technical error records. Server and platform logs held by our hosting providers may include IP addresses.

2.6 Acceptance records

When you accept these documents we store your account identifier, which document and version you accepted, the date and time, your IP address and browser user agent. This is how we can show that agreement was given, so we keep it for as long as we need to evidence it.

3. Why we use it

• To provide the Service: authenticate you, extract and benchmark your quotes, produce reports and exports, and keep your history.
• To communicate with you: analysis-complete notifications, workspace invitations, service and security notices, and replies to your support requests.
• To bill you, if you are on a paid plan.
• To secure the Service: detect abuse, investigate incidents, and enforce our Terms.
• To improve the Service: understand which features are used, diagnose extraction and matching errors, and evaluate our models.
• To create anonymized pricing data and benchmarks, as described in Terms of Service sections 4, 6 and 7. Anonymized Data and Derived Data are, by definition, no longer personal information.

If you are in the European Economic Area or the United Kingdom, our legal bases are performance of a contract with you (providing and billing for the Service), our legitimate interests (securing and improving the Service, and creating anonymized benchmark data, balanced against your interests by the protections in Terms section 7), and your consent where we ask for it.

4. Who processes it for us

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not disclose it to advertisers. We use these categories of service provider, each bound to process data only on our instructions:

• Cloud database, authentication and storage (Supabase, United States): accounts, workspaces, extracted quote data, logs.
• Application hosting and content delivery (Vercel, United States): serving the application; platform logs.
• Artificial intelligence provider (Anthropic, United States): line-item extraction from quote text and product matching. Quote text is sent after the redaction described in section 2.2. Our agreement with this provider does not permit your content to be used to train its models.
• Payment processing (Stripe, United States): subscriptions and card handling.
• Transactional email (Resend, United States): notification and invitation emails.

We may also disclose information where required by law or valid legal process, to protect our rights or someone’s safety, and to an acquirer in a merger, acquisition or sale of assets, in which case this policy continues to apply until replaced with notice to you.

5. How long we keep it

• Uploaded PDFs: never stored.
• Extracted text and line items: until you delete the analysis, elect deletion under Terms section 6.2, or close your account.
• Account and workspace records: for the life of the account, then deleted within 30 days of a written closure or deletion request.
• Usage events and audit log: up to 24 months.
• Billing records: as long as required by tax and accounting law, typically seven years.
• Anonymized Data and Derived Data: retained indefinitely. Terms section 6.4 explains why a benchmark cannot be un-computed.

6. How we protect it

Data is encrypted in transit with TLS and at rest by our database provider. Every table enforces Postgres row-level security, so one workspace cannot read another’s rows even if application code is wrong. Privileged database keys are held server-side only and never exposed to the browser. Significant workspace actions are written to an audit log. No system is perfectly secure; if you believe you have found a vulnerability, please write to security@buyersx.com and we will respond.

7. Your choices and rights

Whoever and wherever you are, you can ask us to: give you a copy of your personal information; correct it; delete it; export your analyses (PDF and Excel export is built into the Service); or stop creating new anonymized data from your quotes (Terms section 4.5). Write to privacy@buyersx.com and we will respond within 30 days.

7.1 If you are in California

You have the right to know what we collect and why, to access and delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of. We will not discriminate against you for exercising a right. You may use an authorized agent, and we may ask for proof of authority.

7.2 If you are in the EEA or the UK

You have rights of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent where we rely on it. Your data is processed in the United States; we rely on the European Commission’s standard contractual clauses with our providers where required. You may lodge a complaint with your local supervisory authority.

7.3 Email preferences

Transactional emails about your analyses, workspace and account are part of the Service. Anything optional carries an unsubscribe link, and you can also write to support@buyersx.com.

7.4 Cookies and local storage

We use a session cookie to keep you signed in, which is strictly necessary for the Service to work, and one local-storage key holding an anonymous analytics session identifier. We set no advertising, profiling or cross-site cookies. Clearing your browser storage for this site removes the analytics identifier; you will need to sign in again.

8. Children

The Service is for business use by adults. It is not directed to anyone under 18, and we do not knowingly collect their information. If you believe a child has given us information, write to privacy@buyersx.com and we will delete it.

9. Changes to this policy

The current version and effective date appear at the top of this page. For material changes we will give notice by email or in the Service and, where the change affects how we use your data, ask you to accept the new version.

10. Contact

BuyersX, LLC
Privacy and data requests: privacy@buyersx.com
Security reports: security@buyersx.com