Privacy Policy

The short version

This website is a set of static pages. It sets no cookies, runs no analytics, embeds no third-party scripts, and has no forms or accounts. We do not build a profile of you, and we have nothing to sell to anyone. When you buy a licence, the payment is handled entirely by Paddle. Your source code goes only to the AI providers you choose, under your own account with them, and is never sent to us.

The one exception is the checkout page at /buy. When you open it to buy a licence, that single page loads Paddle.com's secure checkout, which runs Paddle's own checkout code and sets cookies it needs to process your payment. Every other page on this site remains cookie-free and script-free, exactly as described above.

Who we are

The controller of the personal data described in this policy is Manasvi Srivastava, trading as Buddhi. Contact details: Järvevana tee 9, Kesklinna linnaosa, Tallinn, Harju maakond, 11314, Estonia; [email protected]; +1 971 259 4681. Orders are sold by Paddle.com as Merchant of Record, as described in our Terms of Service.

What this website collects

Buddhi sets no cookies, tracking pixels or analytics on any page other than the checkout at /buy, and loads no fonts, scripts or images from anyone else's servers. The checkout page is the single exception described above. Cloudflare, our host, does receive technical request data including your IP address, as described next.

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes the technical details of each request, including your IP address, in order to serve the page and to protect the site from attack. Cloudflare acts as our hosting provider for this purpose. You can read Cloudflare's privacy policy for how it handles that data.

Payments: Paddle.com is the Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.

For the personal data involved in taking your payment, Paddle collects and handles your payment details directly under its own Privacy Notice.

When you buy a licence, you give your payment details, billing address, and email address to Paddle, not to us. We never see, receive, or store your card number or any other payment credential. Paddle uses that information to take the payment, to work out and remit the correct sales tax or VAT, to detect fraud, and to send you your receipt.

Paddle and Buddhi are independent controllers of the personal data involved in your purchase, each responsible for our own use of it. Paddle explains what it does with your data in Paddle's Privacy Notice.

After a sale, Paddle passes us a limited record of the transaction: your email address, your country, the product you bought, and the amount. We use it only to issue and manage your software licence, to answer your support emails, and to meet our accounting obligations. We do not use it for marketing unless you have separately asked us to, and we never sell it.

The software itself

Buddhi runs on your own computer, against your own repositories, using the AI subscriptions and API keys you configure. Your source code is sent to the AI providers you choose, under your own account with them, and is governed by their terms. It is never sent to us. We operate no service that receives, stores or processes your code.

Licence activation and validation

Buddhi Review Pro periodically contacts our Licence Service to activate the Software and confirm that a licence remains valid. For this purpose, the service processes the minimum account, licence, device and technical connection information needed to provide and protect the licence service. It does not receive your source code, Git history, credentials or secrets.

We process licence-service data needed to issue, activate, validate and administer your licence because this is necessary to perform our contract with you. We process it to prevent fraud and unauthorised use and to maintain the Licence Service on the basis of our legitimate interests in operating and protecting Buddhi Review Pro. We retain it while your licence is active and afterwards only as necessary for accounting, security and legal claims.

The Licence Service is operated for us by a third-party licensing provider whose servers are in the United States. Where this involves transferring personal data outside the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses. Where the United Kingdom's data-protection law applies, the transfer is covered by the UK Addendum to those clauses. We will name the provider and supply a copy of the safeguard on request, at the contact address below.

How long we keep things

We keep the transaction record Paddle passes us for as long as your licence is active, and afterwards for as long as tax and accounting law requires us to. Support emails are kept only as long as they are useful for supporting you.

Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to complain to your data protection authority. Email [email protected] and we will answer.

Because Paddle is an independent controller for your purchase, requests about the payment data Paddle holds should go to Paddle, using the contact details in Paddle's Privacy Notice.

Changes to this policy

If we change this policy we will update the "last updated" date above. If we ever start collecting something new, this page will say so before we do.

Contact