Privacy Policy – Buy-it.ai
Effective Date: May 26, 2025
Last Updated: May 26, 2025
At Buy-it.ai ("we", "our", "us"), operated by Buy-it Corp., your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or interact with https://buy-it.ai (the "Service").
1. Information We Collect
We collect the following categories of personal information:
a) Identifiers
Email address (if voluntarily submitted via contact forms or sign-ups)
IP address
Device identifiers and advertising IDs (via analytics)
b) Internet or Electronic Network Activity
Pages viewed, clicks, referring URLs, time spent on pages
Browser type, device type, operating system
Session duration and navigation paths
c) Commercial Information
Products you view or click through affiliate links
Purchase activity initiated through our affiliate links (reported by affiliate partners)
d) Inferences Drawn from Personal Information
Behavioral patterns and interests inferred from browsing activity
Product preferences inferred by our AI product identification system
e) Geolocation Data
Approximate location derived from IP address (city/region level)
f) User-Submitted Information
Email address, name, or feedback voluntarily provided via contact forms, sign-ups, or account creation
2. How We Collect Your Data
AI-Powered Product Identification
Buy-it.ai uses artificial intelligence to analyze video content and identify products appearing in scenes. This processing occurs on our servers and involves:
Analyzing video frames to detect and identify consumer products
Matching detected products to retailer listings using image recognition
Generating affiliate links to matched products
Important: Our AI processes video content — not your personal data — for product identification. However, your interactions with AI-identified products (clicks, views) are collected as usage data described in Section 1.
Google Analytics
We use Google Analytics to understand how users interact with our website. Google may collect:
IP address
Browsing behavior
Session duration
Learn more: https://policies.google.com/privacy
Opt out: https://tools.google.com/dlpage/gaoptout
Firebase by Google
We use Firebase for app functionality (e.g., hosting, authentication, crash reporting) and analytics. Data collected may include:
Device and app information
Crash logs and performance diagnostics
Authentication tokens (if you create an account)
Learn more: https://firebase.google.com/support/privacy
3. How We Use Your Data
We use the personal information we collect for the following purposes:
Data CategoryPurposeIdentifiersAccount management, communication, fraud preventionNetwork ActivityOperate and maintain the platform, monitor performance, fix bugsCommercial InformationImprove product recommendations, track affiliate conversionsInferencesImprove AI accuracy, enhance user experience and featuresGeolocationServe region-appropriate content, analyticsUser-Submitted InfoRespond to inquiries, service updates
We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.
4. Cookies & Tracking Technologies
We use cookies and similar technologies (pixels, local storage) to enhance your browsing experience, measure traffic, and serve relevant content.
Types of Cookies We Use
Cookie TypePurposeDurationEssentialSite functionality, authenticationSessionAnalyticsGoogle Analytics, Firebase AnalyticsUp to 26 monthsAffiliate TrackingAttribution of purchases via affiliate linksVaries by partner
Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) browser signal. When we detect a GPC signal from your browser, we treat it as a valid opt-out request for the sale or sharing of your personal information, including suppressing behavioral tracking via analytics tools.
You can also control or disable cookies through your browser settings.
Do Not Track
We also honor "Do Not Track" browser signals where technically feasible.
5. Third-Party Sharing
We disclose personal information to the following categories of recipients:
Service Providers (acting on our behalf)
Google Analytics — website analytics and performance monitoring
Firebase (Google) — hosting, authentication, crash reporting, analytics
Third Parties (acting for their own purposes)
Affiliate platforms — CollectiveVoice, Amazon Associates, and other retail partners receive click and conversion data when you interact with affiliate links
Retailers — Amazon, Target, Nordstrom, and other partners linked via affiliate programs
We share only the minimum data necessary for each purpose. We enter into data processing agreements with service providers that restrict their use of your data.
We do not sell your personal data. We do not share your personal information for cross-context behavioral advertising beyond what is described above in connection with affiliate link attribution.
6. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy:
Data CategoryRetention PeriodAccount dataDuration of account + 30 days after deletionAnalytics data (Google Analytics)26 monthsContact form submissions2 yearsAffiliate conversion data3 years (as required by affiliate agreements)Crash logs and diagnostics90 daysServer logs30 days
After the retention period, data is deleted or anonymized.
7. Your Privacy Rights
California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
Right to Know — Request the categories and specific pieces of personal information we have collected about you
Right to Delete — Request deletion of your personal information
Right to Correct — Request correction of inaccurate personal information
Right to Opt-Out — Opt out of the sale or sharing of your personal information (including via the Global Privacy Control signal)
Right to Limit Use of Sensitive Personal Information — Limit our use of sensitive personal information to what is necessary for the Service
Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights
How to Submit a Request:
Email: privacy@buy-it.ai
Web form: [Contact page on buy-it.ai]
We will respond to verifiable requests within 45 days. We may extend this period by an additional 45 days if necessary, with notice to you.
In the preceding 12 months, we have not sold personal information as defined under the CCPA.
Other U.S. State Residents
Residents of Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Virginia, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out. To exercise these rights, contact us at privacy@buy-it.ai.
Canadian Residents (PIPEDA)
If you are a Canadian resident, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:
Access — Request access to the personal information we hold about you
Correction — Request correction of inaccurate or incomplete information
Withdraw Consent — Withdraw your consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
Complain — File a complaint with our Privacy Officer or escalate to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca)
Cross-Border Data Transfer: Your personal information is transferred to and stored on servers in the United States. By using the Service, you consent to this transfer. Your data may be subject to U.S. laws, including potential access by U.S. government entities under applicable legal process. We maintain contractual safeguards (data processing agreements) with our service providers to protect your information.
Privacy Officer:
Buy-it Corp. — Privacy Officer
Email: privacy@buy-it.ai
110 E. Houston Street, 3rd Floor #135
San Antonio, TX 78205
8. Data Security
We take reasonable technical and organizational measures to protect your data, including:
Encrypted data storage and transmission (TLS/SSL)
Secure access controls and authentication
Regular security reviews and monitoring
Limiting employee access to personal information on a need-to-know basis
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
Buy-it.ai is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
Persistent Identifiers: We use cookies and analytics tools that place persistent identifiers on all visitors' devices. These identifiers are used solely for the purposes described in Section 4 (website analytics and affiliate attribution) and are not used for behavioral advertising targeted at children.
Third-Party Sharing: If we were to inadvertently collect personal information from a child under 13, the categories of third parties who might receive such data are the same as described in Section 5 (analytics providers and affiliate platforms).
Inadvertent Collection: If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at privacy@buy-it.ai.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Where required by law, we will provide at least 30 days' notice before material changes take effect.
We encourage you to review this policy periodically.
11. Contact Us
Buy-it Corp.
110 E. Houston Street, 3rd Floor #135
San Antonio, TX 78205
Email: privacy@buy-it.ai
Geographic Scope: Buy-it.ai is intended for users in the United States and Canada only. We do not intentionally target or offer services to users in the European Union or United Kingdom, and our services are not governed by GDPR.