1. Scope
This Policy explains how W8Buzz (“we”, “us”) handles personal data when you visit the website, request access, create or administer an account, connect an instance, use the API or dashboard, contact support, or pay an invoice. The party identified as Operator in the Terms of Service is responsible for this Policy unless a reseller provides you with a separately branded service and privacy notice.
2. Data we collect
- Account data: name, email, telephone number, company, country, role, password hash, authentication settings, and profile or tax information you provide.
- Instance and communications data: connected-number identifiers, contact or group identifiers, message content and media references, delivery events, webhooks, connection state, API references, and usage statistics needed to operate requested features.
- Billing data: plan, instance prices, invoice details, tax details, payment status, transaction references, and billing correspondence. Payment-card or bank credentials are collected and processed by the payment provider, not stored by W8Buzz.
- Support data: ticket messages, status history, attachments, email correspondence, and troubleshooting information.
- Technical and security data: IP-derived security records, timestamps, browser and request metadata, audit logs, authentication events, errors, and service-health information.
- Website submissions: trial and interest-form information, consent records, and email-verification status.
3. Why we use data
We use data to provide and secure the service; create accounts and instances; transmit requested communications; deliver webhooks; display message and operational history; authenticate users; prevent abuse and duplicate trials; administer limits, invoices, and payments; provide support; send service and security notices; diagnose faults; maintain backups; improve reliability; enforce agreements; and comply with legal, tax, accounting, and payment-provider requirements.
4. Legal grounds and customer responsibility
Depending on location and context, processing is based on performance of a contract, consent, compliance with law, protection of users and systems, or legitimate business interests that are not overridden by individual rights. Customers determine the purpose of recipient communications and must supply all notices, permissions, consent, and lawful grounds required for the contacts and content they submit.
5. How data is shared
We disclose data only as needed to service providers that support hosting, storage, email, monitoring, customer support, security, and payment processing; to authorised account administrators or resellers; to professional advisers; to a successor in a corporate transaction subject to appropriate protection; or where required to comply with law, protect rights, investigate abuse, or respond to lawful authorities. We do not sell personal data or disclose it to unrelated parties for their own direct marketing.
6. International processing
Service providers or users may be located outside your state or country. Where required, we use contracts or other lawful safeguards for cross-border processing. By instructing international message delivery or choosing an overseas provider, customers acknowledge the associated transfer necessary to perform the service.
7. Retention
Ordinary raw message and event records are generally removed after seven days according to configured retention. API-created messages and their delivery events are protected from deletion for at least fourteen days. Trial-number history is retained to enforce one-trial eligibility. Invoices, transactions, consent, audit, security, support, and legal records may be retained for longer periods required for accounting, fraud prevention, dispute resolution, backup rotation, or law. We delete or de-identify data when it is no longer reasonably needed, subject to these obligations.
8. Security
We use access controls, credential hashing, encryption for recoverable secrets, network separation, logging, backups, and operational monitoring appropriate to the service. Customers must protect their passwords, API tokens, webhook secrets, devices, and authorised users. No security measure eliminates all risk; report suspected compromise promptly and rotate affected credentials.
9. Your choices and rights
You may update profile information and security preferences in the dashboard. Depending on applicable law, you may request access, correction, completion, deletion, withdrawal of consent, restriction, objection, portability, or grievance review. Some requests may be limited by another person’s rights, technical necessity, contract, fraud prevention, or legal and accounting retention duties. Account administrators may first be responsible for requests involving data their organisation submitted.
10. Cookies and local storage
We use essential session cookies and browser storage for sign-in, security, interface preferences, and core operation. We do not require advertising cookies to provide the service. If optional analytics are introduced, this Policy and any required consent controls will be updated before use.
11. Children
The service is intended for businesses and adults able to enter binding contracts. It is not directed to children. Do not submit children’s personal data unless legally authorised and strictly necessary for a lawful business purpose.
12. Requests, grievances, and changes
Send privacy requests or grievances to admin@w8mediaworks.com or open a support ticket. State the account email, the nature of the request, and sufficient information to verify authority; never send a password or API secret. We will acknowledge and address valid requests within the period required by applicable law. Material Policy changes will be posted here and notified where appropriate.