Buy It

Privacy Policy – Buy-it.ai

Effective Date: May 26, 2025
Last Updated: July 2026

At Buy-it.ai ("we", "our", "us"), operated by Buy-it Corp., your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or interact with https://buy-it.ai, whether as a consumer visitor or as a creator, agency, retailer, brand, or publisher using our platform tools (the "Service").

1. Information We Collect

We collect the following categories of personal information:

a) Identifiers

  • Email address (if voluntarily submitted via contact forms or sign-ups)

  • IP address

  • Device identifiers and advertising IDs (via analytics)

b) Internet or Electronic Network Activity

  • Pages viewed, clicks, referring URLs, time spent on pages

  • Browser type, device type, operating system

  • Session duration and navigation paths

c) Commercial Information

  • Products you view or click through affiliate links

  • Purchase activity initiated through our affiliate links (reported by affiliate partners)

d) Inferences Drawn from Personal Information

  • Behavioral patterns and interests inferred from browsing activity

  • Product preferences inferred by our AI product identification system

e) Geolocation Data

  • Approximate location derived from IP address (city/region level)

f) User-Submitted Information

  • Email address, name, or feedback voluntarily provided via contact forms, sign-ups, or account creation

g) Business or Partner Information

  • Business or partner information — company/organization name, business contact details, and account information submitted by creators, agencies, retailers, or brand partners using our platform tools (e.g., storefront creation, partner dashboards)

h) Partner Content Submissions

  • Video and product-catalog content submitted by partners for AI processing

2. How We Collect Your Data

AI-Powered Product Identification

Buy-it.ai uses artificial intelligence to analyze video content and identify products appearing in scenes. This processing occurs on our servers and involves:

  • Analyzing video frames to detect and identify consumer products

  • Matching detected products to retailer listings using image recognition

  • Generating affiliate links to matched products

Important: Our AI processes video content — not your personal data — for product identification. However, your interactions with AI-identified products (clicks, views) are collected as usage data described in Section 1.

Google Analytics

We use Google Analytics to understand how users interact with our website. Google may collect:

  • IP address

  • Browsing behavior

  • Session duration

Learn more: https://policies.google.com/privacy
Opt out: https://tools.google.com/dlpage/gaoptout

Firebase by Google

We use Firebase for app functionality (e.g., hosting, authentication, crash reporting) and analytics. Data collected may include:

  • Device and app information

  • Crash logs and performance diagnostics

  • Authentication tokens (if you create an account)

Learn more: https://firebase.google.com/support/privacy

3. How We Use Your Data

We use the personal information we collect for the following purposes:

Data CategoryPurposeIdentifiersAccount management, communication, fraud preventionNetwork ActivityOperate and maintain the platform, monitor performance, fix bugsCommercial InformationImprove product recommendations, track affiliate conversionsInferencesImprove AI accuracy, enhance user experience and featuresGeolocationServe region-appropriate content, analyticsUser-Submitted InfoRespond to inquiries, service updates

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

4. Cookies & Tracking Technologies

We use cookies and similar technologies (pixels, local storage) to enhance your browsing experience, measure traffic, and serve relevant content.

Types of Cookies We Use

Cookie TypePurposeDurationEssentialSite functionality, authenticationSessionAnalyticsGoogle Analytics, Firebase AnalyticsUp to 26 monthsAffiliate TrackingAttribution of purchases via affiliate linksVaries by partner

Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) browser signal. When we detect a GPC signal from your browser, we treat it as a valid opt-out request for the sale or sharing of your personal information, including suppressing behavioral tracking via analytics tools.

You can also control or disable cookies through your browser settings.

Do Not Track

We also honor "Do Not Track" browser signals where technically feasible.

5. Third-Party Sharing

We disclose personal information to the following categories of recipients:

Service Providers (acting on our behalf)

  • Google Analytics — website analytics and performance monitoring

  • Firebase (Google) — hosting, authentication, crash reporting, analytics

Third Parties (acting for their own purposes)

  • Affiliate platforms — CollectiveVoice, Amazon Associates, and other retail partners receive click and conversion data when you interact with affiliate links

  • Retailers — Amazon, Target, Nordstrom, and other partners linked via affiliate programs

We share only the minimum data necessary for each purpose. We enter into data processing agreements with service providers that restrict their use of your data.

We do not sell your personal data. We do not share your personal information for cross-context behavioral advertising beyond what is described above in connection with affiliate link attribution.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

Data CategoryRetention PeriodAccount dataDuration of account + 30 days after deletionAnalytics data (Google Analytics)26 monthsContact form submissions2 yearsAffiliate conversion data3 years (as required by affiliate agreements)Crash logs and diagnostics90 daysServer logs30 days

After the retention period, data is deleted or anonymized.

7. Your Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to Know — Request the categories and specific pieces of personal information we have collected about you

  • Right to Delete — Request deletion of your personal information

  • Right to Correct — Request correction of inaccurate personal information

  • Right to Opt-Out — Opt out of the sale or sharing of your personal information (including via the Global Privacy Control signal)

  • Right to Limit Use of Sensitive Personal Information — Limit our use of sensitive personal information to what is necessary for the Service

  • Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights

How to Submit a Request:

We will respond to verifiable requests within 45 days. We may extend this period by an additional 45 days if necessary, with notice to you.

In the preceding 12 months, we have not sold personal information as defined under the CCPA.

Other U.S. State Residents

Residents of Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Virginia, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out. To exercise these rights, contact us at privacy@buy-it.ai.

Canadian Residents (PIPEDA)

If you are a Canadian resident, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

  • Access — Request access to the personal information we hold about you

  • Correction — Request correction of inaccurate or incomplete information

  • Withdraw Consent — Withdraw your consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)

  • Complain — File a complaint with our Privacy Officer or escalate to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca)

Cross-Border Data Transfer: Your personal information is transferred to and stored on servers in the United States. By using the Service, you consent to this transfer. Your data may be subject to U.S. laws, including potential access by U.S. government entities under applicable legal process. We maintain contractual safeguards (data processing agreements) with our service providers to protect your information.

Privacy Officer:
Buy-it Corp. — Privacy Officer
Email: privacy@buy-it.ai
110 E. Houston Street, 3rd Floor #135
San Antonio, TX 78205

Your Rights in the EEA and UK (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR give you additional rights and require us to identify the legal basis on which we process your personal data.

Legal Bases for Processing

We process your personal information under one or more of the following legal bases (GDPR Art. 6):

  • Consent — where you have given clear consent for us to process your personal data for a specific purpose (e.g., certain cookies and marketing communications)

  • Contract — where processing is necessary to perform a contract with you, such as providing our storefront, partner dashboard, or platform tools

  • Legitimate Interests — where processing is necessary for our legitimate interests (e.g., operating and securing the Service, improving our AI product-identification systems, fraud prevention), provided those interests are not overridden by your rights and freedoms

  • Legal Obligation — where processing is necessary to comply with a legal or regulatory obligation to which we are subject

Your Data Subject Rights

Subject to applicable law, you have the right to (GDPR Art. 15–22):

  • Access — obtain confirmation of and access to the personal data we hold about you

  • Rectification — request correction of inaccurate or incomplete personal data

  • Erasure — request deletion of your personal data in certain circumstances ("right to be forgotten")

  • Restriction of Processing — request that we limit how we use your personal data in certain circumstances

  • Data Portability — receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible

  • Objection — object to our processing of your personal data, including processing based on legitimate interests and processing for direct marketing purposes

  • Withdraw Consent — withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact us at privacy@buy-it.ai. We may need to verify your identity before responding to your request.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data infringes applicable data protection law. In the EEA, this is the data protection authority of your habitual residence, place of work, or the place of the alleged infringement. In the United Kingdom, this is the Information Commissioner's Office (ICO), https://ico.org.uk.

International Data Transfers

As described in this policy, your personal data is processed and stored on servers in the United States. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards recognized under applicable law, including the European Commission's Standard Contractual Clauses (SCCs) and, for transfers from the United Kingdom, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, together with supplementary technical and organizational measures where appropriate.

EU/UK Representative: [to be appointed — contact privacy@buy-it.ai]

8. Data Security

We take reasonable technical and organizational measures to protect your data, including:

  • Encrypted data storage and transmission (TLS/SSL)

  • Secure access controls and authentication

  • Regular security reviews and monitoring

  • Limiting employee access to personal information on a need-to-know basis

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Buy-it.ai is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

Persistent Identifiers: We use cookies and analytics tools that place persistent identifiers on all visitors' devices. These identifiers are used solely for the purposes described in Section 4 (website analytics and affiliate attribution) and are not used for behavioral advertising targeted at children.

Third-Party Sharing: If we were to inadvertently collect personal information from a child under 13, the categories of third parties who might receive such data are the same as described in Section 5 (analytics providers and affiliate platforms).

Inadvertent Collection: If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at privacy@buy-it.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Where required by law, we will provide at least 30 days' notice before material changes take effect.

We encourage you to review this policy periodically.

11. Contact Us

Buy-it Corp.
110 E. Houston Street, 3rd Floor #135
San Antonio, TX 78205

Email: privacy@buy-it.ai

Geographic Scope: Buy-it.ai is available to users in the United States, Canada, the European Economic Area (EEA), and the United Kingdom.