Privacy Policy

Last updated 28 August 2026

This policy explains what CPAlchemy LLC collects, why, and what you can ask us to do about it. It covers buffup.ai and the sites we host on behalf of businesses.

Information about businesses

We build our service on information about businesses, most of which is public or licensed:

• Business name, trading address, phone number and category, obtained from licensed data providers and public listings.
• Publicly visible information about a business's website and online listings, including screenshots taken of pages that are already public.
• Scores and written observations we produce from that information.

We use this to decide which businesses to build a sample site for, and what to put on it. Our lawful basis is our legitimate interest in offering a relevant service to a business, balanced against the limited and largely public nature of the information.

Business owners can have a sample removed at any time. Every sample page carries a removal link. It needs no account and no reply from us to be registered, and we act on it.

Information about customers

If you subscribe we collect your name, email address, phone number and billing details. Card details are collected and stored by Stripe, our payment processor. We receive only a token and the last four digits.

Information about people who contact a business through a site we host

Every site we host carries a request form. If you use it, we collect the name, phone number, email address, postcode or ZIP, the service you selected, how you would like to be reached, and anything you type in the message. We collect this to pass your enquiry to the business, and for no other purpose. We do not sell it and we do not use it to market anything to you.

If the page is an unclaimed sample, the enquiry reaches us rather than the business, and the page says so before you send it.

We pass the enquiry to the business the site is for, and to Resend, who deliver the email on our behalf. We keep enquiries for 24 months and then delete them. To ask for a copy of yours or to have it deleted, email support@buffup.ai">support@buffup.ai.

Website analytics

Our hosting provider, Cloudflare, records standard request information such as IP address, timestamp and user agent for security and reliability. We do not sell this information.

Who we share with

• Stripe — payment processing.
• Cloudflare — hosting, DNS and content delivery.
• Law enforcement or regulators, where we are legally required to.

We do not sell personal information.

How long we keep it

Business records are kept while they remain relevant to the service. Removal requests are kept as a record that the request was made and honoured. Billing records are kept as long as tax and accounting law requires.

Your rights

Depending on where you live you may have the right to access, correct, delete or export the personal information we hold about you, and to object to how we use it. Write to support@buffup.ai and we will respond. You will not be treated differently for exercising a right.

Children

The service is for businesses. It is not directed at anyone under 18 and we do not knowingly collect information from children.

Contact

CPAlchemy LLC, 57 Charter Oak Avenue #102, Hartford, CT 06106, United States. Email support@buffup.ai.