Privacy Policy

Last updated: May 2026

This policy explains what data averagebuddy.dev collects about website visitors, customers, and users of BuddyChat — and what we do (and don't do) with it. We keep things simple because this is a one-person operation with no interest in tracking you beyond what is necessary to run the business.

1. Who we are

averagebuddy.dev is operated by an individual developer based in Hyderabad, India (contact: [email protected]). It is not a registered company. Payments and invoicing are handled by Lemon Squeezy, who acts as the merchant of record.

“We”, “our”, and “averagebuddy.dev” refer to this individual operation throughout this document.

2. Website data

averagebuddy.dev is hosted on Cloudflare Pages. Cloudflare collects standard server logs (IP address, browser, page visited, timestamp) to deliver the website and protect against abuse. These logs are retained per Cloudflare's own privacy policy and are not accessed by us for tracking purposes.

We use Cloudflare Web Analytics — a privacy-first analytics tool that does not use cookies, does not fingerprint browsers, and does not share data with advertisers. It provides aggregate page view counts only (no individual user tracking).

What we do not collect on the website: no email addresses, no form submissions, no account creation, no personal information of any kind — unless you use the chatbot or contact us directly.

3. Purchase & payment data

All purchases are processed by Lemon Squeezy (a Lemon Squeezy, Inc. service). When you buy a product:

  • Your name, email address, and payment details go directly to Lemon Squeezy.
  • We receive only: your email address, order ID, product purchased, and license key.
  • We store this in a private Cloudflare D1 database used solely to fulfil your order and validate your license.
  • We do not store card numbers, bank details, or full billing addresses.

Lemon Squeezy issues the invoice and handles VAT/GST compliance. Their privacy policy governs payment data: lemonsqueezy.com/privacy.

Order data (email, order ID) is retained for as long as your license is active and for up to 3 years afterward for tax and accounting purposes. You may request deletion — see Your rights below.

4. Support communications

If you email [email protected] for support, your email address and message content are stored in the email inbox. We use this information only to respond to your request.

We do not add you to any mailing list, newsletter, or marketing campaign without your explicit consent. Support emails are not shared with third parties.

5. BuddyChat product data

BuddyChat is a self-hosted product. When you deploy BuddyChat, it runs on infrastructure you control — not on our servers. This has important privacy implications:

  • Your visitors' conversations never pass through our servers. Chat messages go directly from your visitor's browser to your server.
  • The only external network calls BuddyChat makes are to your chosen LLM provider (Anthropic, OpenAI, Groq, etc.) and to Lemon Squeezy for license validation.
  • Conversation history is stored in the visitor's browser session only. When the tab closes, it is gone. BuddyChat does not log conversations to a database.
  • Your knowledge base files and config (stored in the container filesystem) are under your control entirely.

As a BuddyChat operator, you are responsible for your own privacy policy with regard to your visitors' use of the chatbot on your website. Because no visitor data passes through us, you only need to disclose the LLM provider you use (e.g., “AI responses are powered by Anthropic Claude”).

6. Cookies

averagebuddy.dev website: No cookies are set. Cloudflare Web Analytics is cookieless. The site chatbot widget (BuddyChat demo) uses sessionStorage, not cookies — it does not persist after the tab closes.

BuddyChat product (on your site): The widget does not set cookies by default. Conversation history uses the browser's sessionStorage API. If you add integrations (e.g., analytics providers) via the system prompt, those are your responsibility.

7. Third-party services

ServicePurposeData shared
CloudflareWebsite hosting & CDNIP, browser (standard request headers)
Lemon SqueezyPayments & invoicingName, email, billing address, card (to LS only)
Cloudflare D1Buyer tracking & license validation (internal)Email, order ID, product, license key (internal only)
Anthropic / OpenAI / GroqAI responses (website demo chatbot)Your chat messages (to the LLM API only)

We do not sell data to any third party. We do not use advertising networks or behavioral tracking tools.

8. Your rights

Depending on where you are located, you may have rights under GDPR, UK GDPR, CCPA, or other applicable laws, including:

  • Access: request a copy of the data we hold about you
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data
  • Restriction: limit how we use your data
  • Portability: receive your data in a machine-readable format

To exercise any of these rights, email [email protected] with your request. We will respond within 30 days. Note that some data (e.g., purchase records) may need to be retained for tax compliance even if you request deletion.

For data held by Lemon Squeezy (payment data), contact them directly through their privacy portal.

9. Children's privacy

averagebuddy.dev products are developer tools intended for adults. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided personal information, email [email protected] and we will delete it promptly.

10. Changes to this policy

If we make material changes to this policy, we will update the “Last updated” date at the top. For significant changes, existing customers will be notified by email. Continued use of the products after a change constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions, requests, or concerns:

averagebuddy.dev

Email: [email protected]

Location: Hyderabad, India

You also have the right to lodge a complaint with your local data protection authority if you believe your data has been handled unlawfully.