Your privacy is important to us. It is TyBuff LLC (“TyBuff,” “we,” “us,” or “our”) policy to respect your privacy and comply with applicable law and regulations, including but not limited to the California Consumer Privacy Act (CCPA), the Florida Information Protection Act (FIPA), and the General Data Protection Regulation (GDPR), regarding any personal information we may collect about you, including across our website https://www.tybuff.ai and other sites we own and operate (collectively, the “Services”).
“Personal information” is any information about you that can be used to identify you. This includes details about you as a person (e.g., name, address), your devices, payment details, and your usage patterns on a website or online service.
Our Services may contain links to third-party sites and services not operated by us. Please be aware that those sites have their own privacy policies. After following a link to third-party content, you should review their privacy policy to learn how they collect and use personal information. This Privacy Policy does not apply to any activities you engage in once you leave our Services.
We collect two types of information: “voluntarily provided” and “automatically collected.”
Our servers may automatically log data provided by your web browser or device. This can include your IP address, browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and the specifics of your interactions with our Services.
If errors occur during your use of the Services, we may collect related data—such as technical details about your device and the actions leading up to the error.
Although this information may not identify you by itself, it could potentially be combined with other data to personally identify individuals.
We may ask for personal information in certain cases (e.g., when you create an account, contact us directly, or upload portfolio data). This may include, but is not limited to:
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.
“User-generated content” refers to any materials (text, images, or other media) that you voluntarily provide for publication through our Services or social media channels. Such content is linked to the account or email used to submit it. Note that any content you submit for public posting may be accessible to third parties and is no longer covered under this Privacy Policy once published.
We collect and use your personal information only when we have a legitimate reason for doing so. In these instances, we limit our collection to information needed to provide our Services or to fulfill other lawful purposes, such as complying with legal obligations or protecting our rights.
We process personal information under one or more of the following legal bases:
We may collect personal information when you:
We may use this information to:
We take commercially reasonable measures to safeguard your personal information from loss, theft, unauthorized access, disclosure, copying, misuse, or modification. However, no method of electronic storage or transmission is 100% secure. You are responsible for protecting your password and the devices you use to access our Services.
We may process data using third-party service providers located in the United States or other jurisdictions.
We retain your personal information for as long as necessary to provide our Services, meet legal obligations (e.g., record-keeping), resolve disputes, and enforce our agreements. When personal information is no longer needed, we will delete or anonymize it.
We may share personal information with:
We ensure that any third parties receiving user data from us comply with applicable privacy laws and only use personal information for services provided on our behalf.
Subject to applicable laws, you have the right to:
In the event of a data breach, we will comply with our obligations under applicable privacy laws, including notifying affected users and relevant authorities as required by FIPA, CCPA, GDPR, or other relevant regulations.
If our business is sold or merged in whole or in part, your personal information may be transferred as part of the transaction. Any new owner will be required to manage your personal information in accordance with this Privacy Policy.
We use cookies and similar technologies to operate the website and to understand how visitors interact with it. Cookies are small text files placed on your device when you visit a site.
We use Google Analytics 4, a web analytics service provided by Google Ireland Ltd. (“Google”), to collect aggregated statistical information about visits to our website. Google Analytics uses cookies to analyze how users interact with the Services.
We have enabled IP anonymization, so your IP address is truncated before transmission and is never stored in full. We have also enabled Google Consent Mode v2, which means Google Analytics will not store cookies or transmit identifying data until you have given explicit consent.
Data collected by Google Analytics includes: pages viewed, time spent on the site, approximate geographic location (country/region level), device type, browser type, referring website, and anonymized interaction events. We use this data only in aggregate form to improve the Services. Google retains this data for up to 14 months.
For more information about Google's privacy practices, see Google's Privacy Policy. You can also opt out of Google Analytics tracking globally by installing the Google Analytics Opt-out Browser Add-on.
When you first visit the site, a cookie banner asks you to accept or reject non-essential cookies. You can change your choice at any time by clicking “Cookie Preferences” in the footer of any page. You can also delete cookies through your browser settings; doing so may affect site functionality.
For users in the EU/EEA, analytics cookies are set only on the basis of your explicit consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive). You may withdraw consent at any time using the Cookie Preferences link in the footer; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
If you access our Services from outside the United States, your personal information may be transferred to and processed in the U.S. We ensure compliance with relevant legal requirements for such international transfers, including the GDPR for EU users, by using appropriate safeguards when necessary.
We may update this Privacy Policy as our business or legal requirements evolve. If we make significant changes, we will notify you by posting the updated policy on our Services and, if required, request your consent. We encourage you to review this policy periodically for the latest information on our privacy practices.
If you have any questions or concerns about this Privacy Policy or your personal information, please contact us at:
Or use our Contact Us page.