Privacy policy

Who this policy covers

This policy explains how Buzz Me In ("we", "us") collects, uses, and shares personal information. It covers this website and the Buzz Me In access-control service.

Two different groups of people appear in this policy. Customers are the people who create an account with us — landlords, property managers, and service companies. Visitors are the people who call a callbox that we answer on a customer's behalf. We describe what we handle for each.

Information you give us

• Account information: Your name, email address, phone number, and password credentials when you register.
• Property configuration: The addresses, unit labels, callbox numbers, access codes, passphrases, and schedules you set up in order to run the service.
• Billing information: Your plan, billing address, and payment history. Card details are entered directly with our payment processor and are never stored on our systems.
• Support correspondence: What you send us when you contact support, including the contents of your messages.

Information we collect automatically on this website

When you browse this marketing site we record how you arrived: the page you landed on, the referring site, and any campaign parameters in your link (UTM tags, a Google or Meta click identifier, or a partner ?ref code). We store this in first-party cookies so that it survives to signup, and if you create an account we attach it to that account to understand which channels bring us customers.

Our servers also produce ordinary technical logs, which include IP address, browser user agent, and timestamps. We use these to operate the service, diagnose faults, and detect abuse.

Information from entry calls

When a visitor calls a callbox that we answer, we process the calling number, the time and duration of the call, the keypad code entered, and whether the attempt succeeded. We keep an entry log for each property so the customer can see who was granted access and when.

Where a property uses spoken passphrases, we process the caller's speech in order to check it against the passphrase on file. Call audio and any transcript derived from it are treated as sensitive: access is restricted, they are used only to operate and troubleshoot the access decision, and automated retention jobs delete them on a schedule.

Customers who enable these features are responsible for configuring them lawfully for their property and jurisdiction, including any call-recording notice or consent their local law requires.

How we use information

• To provide the service: answering entry calls, verifying codes and passphrases, and opening doors.
• To maintain entry logs and reports for the customer who controls the property.
• To create and administer your account, authenticate you, and provide support.
• To take payment, manage subscriptions, and send billing and service notices.
• To secure the service — detecting fraud, abuse, and attempts to defeat access control.
• To understand how people find and use the site, so we can improve it.
• To comply with our legal obligations and to establish or defend legal claims.

Cookies and similar technologies

We set a small number of first-party cookies. You can clear them at any time in your browser, though doing so may sign you out or reset your preferences.

• bmi_attribution / bmi_attribution_last: Record how you first found us and how you most recently arrived, so a signup can be credited to the right channel.
• bmi_consent: Remembers whether you accepted or declined non-essential analytics, so we do not ask again on every page.
• Session and security cookies: Keep you signed in to the application and protect against cross-site request forgery.

Analytics and your consent

We use Google Analytics 4 and PostHog to understand how visitors find and move through this site. These are non-essential, and they load only after you accept them in the consent banner. If you decline, or simply never accept, they are never loaded and no data goes to either provider. You can change your mind by clearing your cookies for this site, which brings the banner back.

Essential, first-party information — your own account details, and the acquisition context attached to your own signup — is used to run the service and is not gated by the banner.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with service providers who process it on our behalf, under contract, for the purposes described above:

• Amazon Web Services: Hosting, storage, and transactional email.
• Twilio: Telephony — carrying the entry calls we answer.
• Stripe: Payment processing and subscription billing.
• Google Analytics and PostHog: Website analytics, only where you have consented.
• We may also disclose information where the law requires it, to enforce our terms, to protect the rights and safety of people or property, or in connection with a merger, acquisition, or sale of assets — in which case we will tell you before your information becomes subject to a different policy.

How long we keep it

We keep account and billing records for as long as your account is active, and afterwards for as long as we need them to meet legal, tax, and accounting obligations. Entry logs are retained according to your plan so that customers can review historical access. Call audio and transcripts are kept only as long as needed to operate and troubleshoot the access decision, and are then deleted automatically. When you close your account we delete or anonymise your personal information, except where we are required to keep it.

Security

We protect information in transit and at rest with industry-standard encryption, restrict internal access to those who need it, and isolate sensitive material such as call audio. No system is perfectly secure, but we work to keep the service resilient and to respond quickly if something goes wrong.

Your rights

You can ask us to give you a copy of your personal information, correct it, delete it, or export it in a portable form. Where we rely on your consent, you can withdraw it at any time. To make a request, email us at privacy@buzzmein.com — we will verify your identity before acting and will respond within the period the law allows.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to or restrict certain processing and to complain to your local data protection authority. If you are a California resident, you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights; as stated above, we do not sell or share your personal information.

If a visitor to a property wants access to or deletion of information held about their entry, that information is controlled by the customer who operates the property. Contact us and we will route the request to them and help them act on it.

International transfers

We operate in the United States, and our service providers may process information there and in other countries. Where we move personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

Children

The service is intended for businesses and adults. We do not knowingly collect personal information from children under 13, and we will delete it if we learn that we have.

Changes to this policy

We may update this policy as the service changes. We will post the revised version here with a new effective date, and for material changes we will give you notice by email or in the application before they take effect.

Contact us

Questions, requests, or complaints about privacy can be sent to privacy@buzzmein.com and we will get back to you.