Legal · Last updated: September 4, 2026

Privacy Policy

This Privacy Policy explains how Buyr Flow collects, uses, and protects your personal information when you use our platform.

1. Who We Are

Buyr Flow is an AI-powered prospecting platform. Payments and billing information for our service are processed by Dodo Payments, which acts as the Merchant of Record for your orders. Dodo Payments collects and processes payment data in accordance with its own privacy policy, available at dodopayments.com/legal/privacy-policy.

Dodo Payments may handle fraud prevention, refunds, chargebacks, and compliance as part of its role as Merchant of Record.

2. Information We Collect

We collect the following types of information:

  • Account information — your name, email address, and organization details when you register.
  • Usage data — information about how you use the service, including research queries, prospect lists, and activity logs.
  • Payment information — handled by Dodo Payments; we do not store full card details on our servers.
  • Technical data — IP address, browser type, and device information collected automatically.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Buyr Flow service;
  • Process subscriptions and manage your account (with payment processing handled by Dodo Payments);
  • Communicate with you about your account, updates, and support;
  • Monitor for fraud, abuse, and security threats;
  • Comply with legal obligations.

4. Research and Prospect Data

Buyr Flow researches publicly available business information to generate prospect profiles. The prospect data we surface is about businesses, not personal data of individuals. You are responsible for using prospect information in compliance with applicable data protection and anti-spam laws in your jurisdiction.

Data you upload (such as imported lead lists) is processed to provide the service to you and is not shared with other users.

5. Legal Bases for Processing

Where the GDPR or similar laws apply, we process your personal data based on: performance of a contract (providing the service), our legitimate interests (security and improvement), your consent (where given), and compliance with legal obligations.

You may withdraw consent at any time where processing relies on it.

6. Data Sharing

We do not sell your personal data. We share it only with:

  • Dodo Payments — our Merchant of Record, for payment processing, billing, fraud prevention, refunds, chargebacks, and compliance. See Dodo's Privacy Policy;
  • Service providers — who help us operate the platform, under contractual data protection obligations;
  • Authorities — where required by law or to protect our rights.

7. Data Retention

We retain your account and usage data for as long as your account is active. After account closure, we retain data as needed to comply with legal obligations, resolve disputes, and enforce agreements, then delete or anonymize it.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

We will respond within the timeframe required by applicable law.

9. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit and access controls. No system is completely secure, but we work to safeguard your information.

10. International Transfers

Your data may be processed in countries other than your own. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes on this page with a revised 'Last updated' date and, for significant changes, provide additional notice where appropriate.