1. Introduction
BuzzCreen ("we", "our", or "us") operates the BuzzCreen Screen Recorder Chrome Extension and the BuzzCreen website (buzzcreen.com). This Privacy Policy explains how we collect, use, and protect your personal information.
2. Information We Collect
2.1 Chrome Extension
- Screen Recordings: We record your screen, webcam, and audio when you use the extension (only when you explicitly start a recording).
- Click Data: We track mouse clicks during recording to generate automatic zoom effects.
- User Preferences: We store your recording preferences (webcam on/off, audio on/off, etc.) locally in your browser.
2.2 Web Application
- Account Information: Name, email address, and profile picture from Google OAuth.
- Video Content: Videos you upload, edit, and share through our platform.
- Usage Data: Information about how you use our service (projects created, videos rendered, etc.).
- Payment Information: Processed securely by Stripe. We never store credit card details.
3. How We Use Your Information
- To provide and improve our screen recording and video editing services
- To process your recordings and render your videos
- To manage your account and subscription
- To send you important service updates (not marketing emails without consent)
- To analyze usage patterns and improve our product
4. Data Storage and Security
- Videos: Stored securely on Cloudflare R2 (encrypted at rest)
- Database: User data stored on MongoDB Atlas with encryption
- Processing: Videos temporarily processed on AWS Lambda (auto-deleted after transfer)
- Retention: Videos are stored permanently unless you delete them from your dashboard
5. Sharing Your Information
We do NOT sell your personal information to third parties. We only share data with:
- Service Providers: AWS (video processing), Cloudflare (CDN/storage), MongoDB (database), Stripe (payments)
- Legal Requirements: If required by law or to protect our rights
- With Your Consent: When you explicitly share videos using our sharing feature
6. Chrome Extension Permissions
Our extension requires these permissions:
- desktopCapture: To record your screen
- tabs: To communicate with BuzzCreen editor tabs
- storage: To save your preferences locally
- downloads: To save recordings to your computer
- scripting: To inject click tracking and overlay UI
- all_urls: To enable the quick-start floating button on any website
We only access websites when you're actively using the extension. We do not track your browsing history or access pages in the background.
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Deletion: Request deletion of your account and all associated data
- Export: Download your videos at any time
- Opt-out: Unsubscribe from marketing emails
To exercise these rights, contact us at: support@buzzcreen.com
8. Cookies and Tracking
We use essential cookies for:
- Authentication (NextAuth session cookies)
- User preferences
We do not use third-party analytics or tracking cookies at this time.
9. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect data from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website.
11. GDPR Compliance (EU Users)
11.1 Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: Account management, video processing, subscription management
- Legitimate Interest: Service improvement, fraud prevention, security
- Consent: Marketing emails (opt-in only), optional features
- Legal Obligation: Tax compliance, payment processing records
11.2 Data Retention Periods
| Data Type | Retention Period |
|---|
| Account Information | Until account deletion + 30 days |
| Videos (User Storage) | Until manually deleted by user |
| S3 Temporary Files | Auto-deleted after 7 days |
| Payment Records | 7 years (legal requirement) |
| Session Logs | 30 days |
| Backups | 30 days rolling |
11.3 International Data Transfers
Your data may be transferred to and processed in countries outside the EU:
- AWS Lambda: EU regions available (we use eu-west-1 when possible)
- MongoDB Atlas: EU region deployment (compliant with GDPR)
- Cloudflare R2: EU data centers available
- Stripe: GDPR compliant, Standard Contractual Clauses in place
All transfers are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
11.4 Your GDPR Rights
As an EU data subject, you have the following rights:
- Right to Access: Request a copy of all personal data we hold
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restriction: Limit how we process your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: For consent-based processing
- Right to Lodge a Complaint: Contact your local supervisory authority
11.5 How to Exercise Your Rights
To exercise any of your GDPR rights:
- Email us at support@buzzcreen.com with subject "GDPR Request"
- Provide proof of identity (to prevent unauthorized access)
- Specify which right you wish to exercise
- We will respond within 30 days (as required by GDPR)
11.6 Supervisory Authority
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority:
12. Data Protection Officer
For data protection inquiries, you can contact our Data Protection Officer:
13. Automated Decision-Making and Profiling
We do NOT use automated decision-making or profiling that produces legal effects or similarly significantly affects you. All decisions regarding your account, subscription, or content are made by human review when necessary.
14. Data Breach Notification
In the unlikely event of a data breach that affects your personal data:
- We will notify the relevant supervisory authority within 72 hours (as required by GDPR)
- We will notify you directly if the breach poses a high risk to your rights and freedoms
- We will provide information about the nature of the breach and remedial measures taken
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website.
16. Contact Us
If you have any questions about this Privacy Policy, please contact us:
📋 Quick Summary
- We collect: Only data necessary to provide our service
- We store: On secure, GDPR-compliant servers (EU regions when possible)
- We share: Only with essential service providers (never sold)
- Your rights: Full GDPR rights - access, delete, export, etc.
- Contact us: support@buzzcreen.com for any privacy questions