Privacy Policy

1. Who is responsible, and whether you must give us data

The controller of the personal data described here (the owner of the database, under the Israeli Privacy Protection Law) is the operator of Buyro. Contact: support@buyro.link.

You are not required by law to give us personal data; giving it depends on your will and consent. Without sign-in details we cannot open an account, and without Telegram or an email address we cannot send you alerts. Creators who want to be paid: the law requires us to identify who we pay and to report payouts to the tax authorities, so without your name, ID or company number, tax status and account details we cannot pay you.

2. What we collect

When you click a Buyro link:

• the time, the link, and where the click was sent;
• your country, as reported by our infrastructure provider (Cloudflare);
• the site the click came from (host name only);
• a rough device class (phone, desktop, bot);
• a salted one-way hash of your IP address and browser signature, used to count unique clicks and to catch click fraud. The IP address itself is not stored by Buyro.

When you have an account:

• your email address, and your name and picture if you sign in with Google;
• if you use the bot, open Buyro inside Telegram, or connect Telegram: your Telegram user id, first and last name, username, profile-photo link and language, as Telegram shares them, and the id and title of channels you connect. For creators who start in the bot, the Telegram name and username become the public profile until you change them;
• your creator profile (handle, display name, bio), your links and the notes on them, your scheduled posts, your invite code and who invited you;
• photos and videos you put on your links, from the dashboard or by sending them to the bot. They are public, like the rest of your page, until you remove them;
• if you connect your own AliExpress account: its app key and tracking id, its app secret in encrypted form, and the orders that account reports, which we read to show you your sales;
• products you save, so we can tell you when the price drops, and creators you follow, so we can show you their new deals;
• which kinds of messages you switched off, and whether the bot can still reach you;
• reports you file about a post;
• for API keys: their name, first characters and when each was last used, never the key itself;
• to pay you: the bank account holder’s name, your ID or company number, your tax status, and the bank account or PayPal or Wise address, all stored encrypted, with a masked label (such as the bank, branch and last digits) we can read. A sealed copy of where each payout went is kept with that payout. With these, the history of your commissions and payouts, whether your identity was verified, and any suspension;
• for Pro: your subscription status and Paddle’s customer and subscription ids, and Pro given as a gift and until when. Payment details go to Paddle and never reach our servers;
• the sign-in service records the IP address and browser of each sign-in, for security.

3. Why we use it

• to run the service: resolve links, show statistics to creators, send the alerts you asked for;
• to attribute purchases and pay commissions, which is the contract we have with creators;
• to prevent fraud and abuse, which we and the affiliate networks have a legitimate interest in. This includes an automated daily check of each creator’s click and sale patterns. It only flags an account for manual review by a person on our behalf; it never suspends anyone by itself;
• to send messages: sale alerts, news of creators who joined through your invite, a weekly summary and first-clicks news to creators, the morning’s deals to creators who post on WhatsApp, price drops on saved products, and an evening message about new deals from creators you follow. Price drops and the evening message are advertisements and say so. They come from the Telegram bot; without Telegram, sale alerts and price drops come by email, each with a link to stop them;
• to understand how the product is used and fix errors. Product events, including each click on a link with its country, device class and the site it came from, are recorded on our servers and sent to PostHog under the account id of the link’s creator;
• to meet the requirements of the law, including tax law, around payouts.

4. Purchases and the merchant

When you tap a buy button you leave Buyro for the merchant, through its affiliate network. The merchant and the network set their own cookies and handle your purchase under their own privacy policies. Networks report purchases back to us as an order number, the product, the amount, the destination country, the commission and the tracking id of the link. We do not receive your name, address or payment details from them.

5. Cookies and what loads in your browser

Buyro sets only the cookies it needs to keep you signed in (on the web, and as a shopper inside Telegram) and a language cookie, and, if you arrived through a creator’s invite link, one that remembers that invite for up to 30 days so they are credited when you sign up. The link creator on the home page keeps a draft in your browser’s local storage. No advertising cookies and no cross-site tracking, and product analytics are recorded on our servers, not by scripts in your browser. Some pages do load code from others: the feed loads Telegram’s Mini App script, checkout loads Paddle’s, every page reports errors to Sentry, and product images and videos come from the stores’ own servers.

6. Who processes data for us

• Supabase: database, sign-in and stored files.
• Vercel: hosting for the website and API.
• Cloudflare: the short-link domain and redirects, a cache of link records, and request logs that see your IP address for a few days.
• Paddle (Paddle.com Market Ltd, UK): the reseller and Merchant of Record for Pro subscriptions. It handles your payment as a controller in its own right, under its own privacy policy.
• Anthropic: writes short product names and the opening line of channel posts. Only the store’s product titles are sent, never personal data.
• PostHog (EU): product analytics, server-side events keyed by account id, without IP addresses.
• Sentry (EU): error reports, without IP addresses or cookies. A report about an account can include its handle or id.
• Telegram: delivers bot messages and channel posts.
• Resend: sends sign-in emails, and alerts and account news by email to people who do not use Telegram.
• Google: only if you choose Google sign-in.
• Affiliate networks (AliExpress Portals, and Amazon Associates for creators who use their own Amazon tag): receive the click and report purchases.

Some of these providers process data outside Israel, in the European Union, the United Kingdom and the United States. Transfers rest on each provider’s data processing terms and its commitment to protect the data and not pass it on, or on the receiving country’s law protecting it adequately.

7. How long we keep it

Account data stays while the account is open. Individual click records are kept for 13 months for statistics, attribution and fraud checks, then deleted, except a click that led to a sale, which is kept with that sale; statistics older than 13 months are not shown. Product analytics events are deleted on PostHog’s retention schedule, and copies in our providers’ logs and backups expire after a limited time. Commission and payout records, including who each payout went to, are kept for as long as tax and accounting law requires, even after an account is closed, and then deleted.

8. Your rights

Under sections 13 and 14 of the Israeli Privacy Protection Law, 1981, you may see the personal data we hold about you and ask us to correct or delete data that is wrong, incomplete, unclear or out of date. Under the GDPR or the law where you live you may have further rights, such as export, erasure and objection. You can download your data and delete your account yourself in Settings, or write to support@buyro.link from the email on your account and we will answer within 30 days. Deleting an account removes your profile, links, content and contact details and cancels a Pro subscription; if you had sales or payouts, the financial records described above are kept. You can also complain to the Privacy Protection Authority in Israel, or to the data protection authority where you live.

9. Children

Buyro is not for people under 18, and we do not knowingly collect personal data from anyone under 18.

10. Changes

When this policy changes we update the date at the top, and for material changes we tell account holders by email or in the bot.