Buki / Legal
Privacy Policy
Effective date: September 17, 2026 · Applies to mybuki.ai and demo.mybuki.ai
1. What this policy covers
This policy covers the marketing site, the public demo, the walkthrough-booking flow, and subscribing online. How we handle the data inside the product itself is governed by our Terms of Service. Where applicable law requires a written data processing agreement before we process personal data on your behalf, you and we have to enter into one first, and you should not enable the affected connection or submit that data until it is in effect between us. Start that with us at privacy@mybuki.ai. Section 5 describes how Buki uses AI and which providers process data; it applies to the product as well as this site.
2. What we collect on this site
The contact details you submit (name, work email, company), privacy-respecting site analytics via Vercel Analytics (aggregate, cookieless), and product analytics via PostHog: which pages you visit and which buttons you use, plus a replay of your session on this site in which anything you type is masked and the contact form and the onboarding survey are left out entirely. PostHog keeps its identifier in your browser's local storage, not a cookie, honors Do Not Track, and is hosted in the United States. No advertising trackers. When you subscribe, our payment processor collects your billing address and payment details on its own hosted checkout page, and card numbers never reach our systems. From the processor we receive the Checkout Session and event identifiers, the customer and subscription identifiers, the amount and payment status, the name and email address you gave it, and the result it returned for the terms acceptance box. We store that with the version of the terms you were shown, a cryptographic hash and a copy of that text, and the time we received the processor's confirmation, so we can evidence what you agreed to.
3. The public demo
The demo runs in a fully isolated environment and contains no customer records. Nothing you view there involves real customer data.
4. How we use what you share
To respond to walkthrough and contact requests, to set up and run a subscription you buy, and nothing else. No sale of personal data; no third-party marketing.
5. AI processing and connected business systems
Buki produces its answers using a large language model provided by Anthropic. For customers of the product, this is not limited to the words you type: to answer a question about your own numbers and then check that answer against them, Buki sends the records it retrieved from your connected systems, which can include amounts and the names of customers, vendors and accounts, to the model as part of the request. Anthropic does not use data submitted through its API to train its models, and Buki does not use your data to train any model.
The providers that can process or store customer data on our behalf are Anthropic (language model), Neon (database), Fly.io (application hosting), Upstash (credential storage), WorkOS (authentication), Vercel (this site, analytics and file storage) and PostHog (site analytics and session replay, this site only). Stored credentials for the business systems you connect are encrypted at rest, and you can disconnect any connected system from inside the product at any time, which revokes our access at that provider and deletes the stored credential.
6. Retention & your rights
We retain inquiries only as long as needed to respond and follow up. We keep the subscription acceptance record described above while the account is open, and afterwards for the longer of three years after acceptance or one year after the account closes, because it is the evidence of your agreement. Data held inside the product is deleted on the schedule in Section 21 of the Terms. You can request deletion of anything you have shared at any time by emailing us. GDPR and CCPA rights apply where applicable.
7. Contact
Privacy questions: privacy@mybuki.ai.