Privacy Policy

1. Data Controller

The data controller is Busony, the company operating the platform accessible at busony.com.

When our professional clients (SMBs, e-commerce, liberal professions) use the platform, we also process data belonging to their own clients on their behalf. In this configuration, the professional client is the data controller and Busony acts as a processor, in accordance with Article 28 of the GDPR.

2. Data Collected

As part of our services, we collect the following data:

3. Purpose of Processing

Your data is used to:

• Provide, operate and improve our services (AI WordPress, SEO & GEO, AI agents)
• Manage your account and subscriptions
• Send service-related notifications and communications
• Ensure the security and proper functioning of the platform
• Comply with our legal obligations (including GDPR)

4. Legal Basis

The processing of your data is based on:

• Contract performance: for users subscribed to the service
• Consent: for marketing communications
• Legitimate interest: for security and service improvement

5. Cookies and Trackers

Our site uses only essential cookies for the application to function:

• sb-*-auth-token: Supabase session cookie for authentication
• cookie-consent: remembering your choice regarding this banner

No advertising, tracking or analytics cookies are used on this site.

6. Data Retention

In accordance with the GDPR, your data is only kept for as long as necessary for the purpose of processing.

• Account data: kept for the duration of the subscription + 3 years
• Conversation history and transcriptions: kept for a maximum of 30 days
• Technical logs: kept for 1 year

At the end of this period, data is automatically deleted or anonymized.

7. Data Hosting

Collected data is hosted in the European Union (EU).

• Supabase – Database (AWS France servers)
• DigitalOcean – Web infrastructure hosting
• Stripe – Payments (PCI-DSS certified)
• Anthropic / OpenAI / Google AI – AI processing (GDPR compliant)

All providers involved commit to respecting GDPR principles.

8. Data Sharing

Your data may be shared with:

• Supabase – database hosting
• Stripe – payment processing
• Anthropic / OpenAI / Google AI – AI conversation processing

We never sell your data to third parties.

9. Your Rights (GDPR)

Under the GDPR, you have the following rights:

To exercise your rights, contact us at contact@busony.com. For data processed through an AI assistant set up by one of our clients, your requests should be addressed to that professional first.

• Access: obtain a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: restrict the processing of your data
• Portability: receive your data in a structured format
• Objection: object to processing

10. Security

We implement the following measures:

• HTTPS/TLS encryption for all communications
• AES-256 encryption for sensitive data
• Secure authentication via JWT with granular permissions
• Per-client data isolation (multi-tenant)
• Regular encrypted backups
• Security policies and procedures compliant with GDPR

11. GDPR Compliance

This policy and all data processing carried out by Busony comply with Regulation (EU) 2016/679 known as the "GDPR" on the protection of personal data.