Privacy policy

Last updated: October 25, 2026

Buffered is operated by Rei exitus MB. Contact hello@buffered.app for privacy questions.

Information we handle

We store identity information supplied by your sign-in method, such as a profile name, verified email address, provider account ID and session record. Google and Facebook sign-in tokens are discarded after identity setup. Email sign-in uses a one-time link delivered by Resend; its database token is hashed, expires after 15 minutes and is deleted when used. If you choose a separate notification email, Buffered stores the verified contact, category choices, pending verification state, service notices and delivery, bounce or complaint status. Page publishing permissions are requested separately. When you connect a service, we store encrypted Facebook or Hootsuite access credentials; provider account and Page identifiers; selected post identifiers, text, Page names and scheduled times; comment URLs; publishing status; and an activity log. RSS features also store configured feed URLs, article content and image URLs, generated image assets, and publication metadata. Link in Bio stores the public address, page title and bio, normalized logo and thumbnail images, ordered destinations, private drafts and published revisions. Billing stores Stripe customer and subscription IDs, billing mode, plan, Page quantity, and buyer details you provide. Stripe handles payment details and invoices.

Link analytics

When you enable tracked links or publish a Link in Bio page, Buffered stores each immutable destination and its publication source. Redirect and public bio page requests are counted in daily aggregates using fixed crawler or prefetch, broad referrer and coarse device categories. A tracked link may be copied and opened outside its original page, so link requests are not treated as proven bio-page clicks. Buffered application analytics do not store raw IP addresses, full user-agent strings, full referrer URLs, cookies, visitor identifiers or individual request-event rows. Infrastructure providers may maintain their own security and access logs under their policies.

How we use it

We use identity information to create and secure your workspace. We use connected Page information to check posts, add the selected article URL as a Page comment when explicitly enabled, and show the result to the workspace. The optional Hootsuite flow can check scheduled posts. For an enabled RSS feed, Buffered may retrieve new articles and images, create a branded image, publish that image and caption to an authorized Facebook Page, and add the article link as a comment. Link in Bio image URLs are retrieved by Buffered when an authorized workspace member prepares an image; public visitors receive the normalized stored image rather than a request to the original image host. Provider credentials are used only for their connected workflows.

Storage and sharing

Application data is stored with infrastructure providers including Neon and Vercel. Resend processes email addresses and delivery events for requested sign-in links and any separately approved notification emails. Billing data and buyer details are shared with Stripe for hosted Checkout and invoices. When publishing is enabled, we send prepared image, caption or comment content and Page authorization to Meta as required for the selected action. Google and Meta process sign-in requests made through their services. We do not sell personal data. Tracked-link and Link in Bio aggregate rows older than the 365-day reporting window are excluded from reports and removed in bounded maintenance batches; deletion may follow after a cleanup backlog clears. Link destinations and published revisions are retained separately so previously shared links remain consistent. Unreferenced draft images are removed in bounded cleanup batches after seven days. Other operational data is retained while the service is in use and deleted on request or when the service is retired. Removing a Page stops new automation but keeps its comment history and publication claims until separately deleted.

Your choices

Ask us to inspect, correct or delete your information by email. You can change notification categories in Profile, unpublish your bio page, disable an individual tracked link, pause RSS or Page automation, or disconnect the app from your Hootsuite, Facebook or Google settings. Unpublishing removes the public bio page but does not disable previously copied tracked links. See data deletion instructions.