Privacy Policy & Terms - Buro Ventures

Overview

This Privacy Policy and Terms of Service applies to Buro Ventures (operated by Buro Ops AS, EIN: 832405612) and our website at buroventures.com, along with all associated services and applications.

By using our platform, you agree to these terms and our data practices outlined below.

Information We Collect

Account & Profile Information

When you create an account, we collect and store:

Email address and password (encrypted)
Username and display name
Personal information: first name, last name, bio, profile role
Company details: name, description, industry, and headcount
Profile preferences and settings

API Keys & Third-Party Authentication

To enable our AI-powered features and integrations, you may provide API keys which we handle as follows:

OpenAI API Keys: For AI chat and content generation features
Anthropic API Keys: For Claude AI integration
Other AI Service Keys: For various automation and AI tools
Encryption: All API keys are encrypted using AES-256-GCM encryption with unique initialization vectors
Storage: Keys are stored in our PostgreSQL database with authentication tags to prevent tampering
Access: Only you can access and use your stored API keys

LinkedIn Profile Data & Social Media Integration

Our platform includes LinkedIn profile analysis and data collection features:

Profile Scraping: We use LinkedIn scraping APIs to collect public profile information including name, headline, about section, work experience, and profile picture
Professional Data: Company information, job titles, skills, and industry details
Engagement Data: Public posts, comments, and professional activity when available
Data Merging: We combine scraped data with our internal database to create comprehensive professional profiles
Caching: LinkedIn data is cached for up to 7 days to improve performance and reduce API calls
Lead Generation: Public LinkedIn data may be used for business development and lead generation purposes

AI Chat & Conversation History

Our AI chat system collects and stores detailed conversation data:

Messages: All user messages and AI responses in conversations
Conversation Metadata: Titles, timestamps, session IDs, and conversation status
AI Model Usage: Which AI models were used, response times, and performance metrics
Token Usage: Detailed tracking of AI token consumption and associated costs
Function Calls: Records of AI function usage including resource searches and code generation
Context Data: Conversation history maintained for personalized responses

Platform Usage & Analytics

We collect comprehensive usage data to improve our services:

Pages visited, features used, and time spent on platform
Search queries and resource interactions
Button clicks, form submissions, and navigation patterns
Device information, browser type, and technical specifications
Error logs and performance metrics
Feature adoption and user engagement metrics

Business Intelligence & Lead Data

As a B2B growth platform, we collect and process business-related information:

Lead Information: Contact details, company information, and engagement history
Prospect Data: Professional profiles, job titles, and company details
Automation Data: Email sequences, campaign performance, and nurturing workflows
Scoring Systems: Lead scoring based on engagement and behavior patterns
Integration Data: Information from connected tools like GetSales, Encharge, and LeadShark

How We Use Your Information

Core Platform Services

AI-Powered Chat: Process your conversations to provide intelligent responses, resource recommendations, and business guidance
Resource Management: Search, categorize, and recommend relevant business resources based on your needs and profile
Account Management: Maintain your profile, preferences, and authentication across our platform
API Integration: Use your stored API keys to connect with third-party AI services for enhanced functionality

LinkedIn & Professional Data Processing

Profile Analysis: Analyze LinkedIn profiles to understand professional backgrounds and provide relevant recommendations
Lead Generation: Process public LinkedIn data for business development and prospecting activities
Data Enrichment: Combine LinkedIn data with our internal databases to create comprehensive professional profiles
Strategy Development: Use professional information to generate personalized B2B growth strategies

AI & Machine Learning Applications

Conversation Intelligence: Analyze chat history to improve AI responses and understand user needs
Content Personalization: Customize resource recommendations based on your industry, role, and interests
Predictive Analytics: Use usage patterns to predict which resources and tools will be most valuable to you
Performance Optimization: Track token usage and costs to optimize AI model selection and usage

Business Intelligence & Analytics

Usage Analytics: Monitor platform performance, feature adoption, and user engagement
Lead Scoring: Develop scoring systems based on engagement patterns and professional data
Strategy Insights: Generate insights about B2B growth trends and effective strategies
Platform Improvement: Use aggregated data to enhance features and user experience

Communication & Support

Send important updates about platform features, security, and service changes
Provide customer support and technical assistance
Share relevant business resources and growth opportunities
Respond to inquiries and feedback about our services

Data Security & Storage

Encryption & Security Measures

API Key Encryption: All API keys are encrypted using AES-256-GCM encryption with unique initialization vectors and authentication tags to prevent tampering.

Password Security: User passwords are hashed and encrypted using industry-standard algorithms.

Data Transmission: All data is transmitted over HTTPS with SSL/TLS encryption.

Database Security: Our PostgreSQL database uses encrypted connections and access controls.

Data Storage Infrastructure

Primary Database: PostgreSQL database hosted on secure cloud infrastructure
User Authentication: PocketBase integration for secure user management and token-based authentication
Conversation Storage: Chat history stored with UUID identifiers and timestamp tracking
LinkedIn Data Cache: Professional profiles cached for up to 7 days with automatic refresh cycles
Token Usage Tracking: Detailed logs of AI API usage, costs, and performance metrics

Data Retention Policies

Account Data: Retained while your account is active and for 30 days after deletion
Conversation History: Stored indefinitely unless you request deletion or delete your account
LinkedIn Profile Data: Cached for 7 days, then refreshed or purged based on usage
API Usage Logs: Retained for 12 months for billing and optimization purposes
Analytics Data: Aggregated usage data may be retained indefinitely for platform improvement

Access Controls

User Isolation: Each user can only access their own data and conversations
API Key Access: Only you can decrypt and use your stored API keys
Admin Access: Limited administrative access with audit logging
Third-Party Access: No third-party access to your personal data without explicit consent

We implement comprehensive technical and organizational measures including regular security audits, access monitoring, and incident response procedures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Third-Party Services & Integrations

AI Service Providers

OpenAI (ChatGPT/GPT-4): Used for AI chat functionality, content generation, and intelligent resource recommendations
Anthropic (Claude): Alternative AI provider for enhanced conversation capabilities
RapidAPI LinkedIn Scraper: Third-party service for collecting public LinkedIn profile data

Business Automation & Lead Generation Tools

GetSales: LinkedIn automation for connection requests and messaging
Encharge: Email automation platform for lead nurturing and retargeting ad synchronization
LeadShark: Lead extraction from LinkedIn comments and automated direct messaging
N8N: Workflow automation platform for connecting various business tools
Meta (Facebook) Ads: Retargeting advertisements synchronized with email sequences

Infrastructure & Development Services

PocketBase: User authentication and management system
PostgreSQL Cloud Hosting: Database hosting and management services
NocoDb: Database interface and management tools
Express.js & Node.js: Backend server infrastructure

Analytics & Monitoring

Performance Monitoring: Server performance and uptime monitoring
Error Tracking: Application error logging and monitoring
Usage Analytics: Platform usage tracking and analytics

Data Sharing with Third Parties

AI Services: Your chat messages and context are sent to AI providers (OpenAI, Anthropic) to generate responses. These services have their own privacy policies.

LinkedIn Data: We use third-party scraping services to collect publicly available LinkedIn information.

Business Tools: When you use our B2B growth infrastructure, your data may be shared with integrated tools (GetSales, Encharge, LeadShark) as part of the automation workflow.

No Selling: We do not sell your personal data to third parties for marketing purposes.

Each third-party service has its own privacy policy and terms of service. We encourage you to review their policies to understand how your data is handled by these services.

Your Rights & Data Control

Account Management Rights

Access Your Data: View and download all personal data, conversation history, and profile information through your account dashboard
Update Information: Modify your profile details, company information, and preferences at any time
Delete Your Account: Permanently delete your account and all associated data including conversations, profile data, and stored API keys
Export Conversations: Download your chat history and AI interactions in a portable format

Privacy Controls

LinkedIn Data Control: Request removal of your LinkedIn profile data from our cache
API Key Management: Add, update, or delete your stored API keys at any time
Conversation Management: Archive or delete individual conversations and chat history
Data Sharing Preferences: Control how your data is used for platform improvements

Communication Preferences

Email Preferences: Opt-out of non-essential communications while keeping important security and service updates
Notification Settings: Control platform notifications and alerts
Marketing Communications: Unsubscribe from promotional emails and marketing materials

Legal Rights (GDPR & CCPA)

Right to Rectification: Correct inaccurate or incomplete personal information
Right to Erasure: Request deletion of your personal data under certain conditions
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Restrict Processing: Limit how we process your personal data
Right to Object: Object to processing of your personal data for certain purposes
Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, contact us at team@buroventures.com. We will respond to your request within 30 days and may require identity verification for security purposes.

Cookies & Tracking

We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze platform usage.

You can control cookie settings through your browser preferences or by contacting us directly.

AI & Machine Learning Detailed Disclosure

AI-Powered Features

Our platform extensively uses artificial intelligence across multiple features:

Conversational AI Chat

GPT-4 Integration: Your messages are processed by OpenAI's GPT-4 to provide intelligent business guidance and resource recommendations
Context Retention: AI maintains conversation history to provide coherent, contextual responses
Function Calling: AI can search our resource database, generate code examples, and perform specific tasks based on your requests
Token Tracking: We monitor AI usage costs and token consumption for optimization and billing purposes

LinkedIn Profile Intelligence

Profile Analysis: AI analyzes LinkedIn profiles to extract professional insights, industry trends, and growth opportunities
Lead Scoring: Machine learning algorithms score leads based on professional data, engagement patterns, and business potential
Data Enrichment: AI combines multiple data sources to create comprehensive professional profiles
Predictive Modeling: AI predicts which prospects are most likely to engage based on historical data patterns

Content & Strategy Generation

Personalized Recommendations: AI customizes resource suggestions based on your industry, role, company size, and previous interactions
Strategy Development: AI generates B2B growth strategies tailored to your specific business context and goals
Content Creation: AI assists in creating LinkedIn posts, email sequences, and marketing materials
Performance Optimization: AI analyzes campaign performance and suggests improvements

Machine Learning & Data Processing

Behavioral Analysis: ML algorithms analyze user behavior patterns to improve platform features and user experience
Automated Classification: AI categorizes resources, leads, and content automatically based on learned patterns
Anomaly Detection: AI monitors for unusual usage patterns or potential security issues
Continuous Learning: Our AI systems improve over time by learning from user interactions and feedback

AI Data Usage & Consent

Training Data: Your conversations and interactions may be used to improve our AI systems, but personal identifiers are removed.

Third-Party AI: When using external AI services (OpenAI, Anthropic), your data is subject to their privacy policies and data usage terms.

Opt-Out: You can request that your data not be used for AI training purposes by contacting our support team.

Terms of Service

Acceptable Use Policy

You agree to use our platform responsibly and in compliance with applicable laws. Prohibited activities include:

Intellectual Property: Violating copyrights, trademarks, or other intellectual property rights
Content Violations: Sharing inappropriate, harmful, defamatory, or offensive content
Security: Attempting to circumvent security measures, hack systems, or gain unauthorized access
Spam & Abuse: Sending unsolicited communications or engaging in abusive behavior
Data Misuse: Using LinkedIn data or other information for illegal purposes or violating platform terms
API Abuse: Misusing stored API keys or exceeding reasonable usage limits
Illegal Activities: Using the platform for any illegal or fraudulent activities

Service Availability & Limitations

Uptime: While we strive for high availability, we do not guarantee uninterrupted access to our services
API Dependencies: Some features depend on third-party APIs (OpenAI, LinkedIn, etc.) which may have their own limitations
Data Accuracy: We cannot guarantee the accuracy of scraped LinkedIn data or AI-generated content
Rate Limits: Usage may be subject to rate limiting to ensure fair access for all users

Account Management & Termination

Account Suspension: We reserve the right to suspend accounts that violate these terms
Data Preservation: Upon termination, your data will be retained for 30 days before permanent deletion
API Key Security: You are responsible for the security and proper use of your stored API keys
Billing: Any outstanding charges must be settled before account closure

Liability & Disclaimers

AI-Generated Content: AI responses are generated automatically and may contain inaccuracies
Third-Party Data: We are not responsible for the accuracy or availability of third-party data sources
Business Outcomes: We do not guarantee specific business results from using our platform
Data Loss: While we implement backup systems, users are responsible for maintaining their own data copies

Changes to This Policy

We may update this Privacy Policy and Terms from time to time. We will notify users of material changes via email or platform notifications.