Legal

Security

How we protect access to your business data. Last updated [DATE].

Written in plain English on purpose. If anything here is unclear, ask us at [email protected] and we will explain it rather than point you at a clause.

Credentials

Source keys are held server-side and never delivered to a browser. The application asks Buddzee for data; Buddzee asks your source. A compromised browser session cannot leak the key itself.

Access control

• Roles govern what a person can do.
• Data scopes govern which records they see, applied server-side when the figure is computed.
• Shares grant one board to one person without opening the account.
• The analyst is bound by exactly the same rules. Chat is not a way around them.

Queries

Every query, including ones the analyst writes, is checked to be read-only before it runs. Buddzee cannot write to your systems.

Infrastructure

Hosted in Sydney. Traffic is served over TLS through Cloudflare; the application is not exposed directly to the internet. Environments are separated, each with its own database and credentials.

Reporting a problem

Email [email protected]. We will acknowledge within [N] working days and keep you updated. We will not pursue anyone who reports a genuine issue in good faith.