1. Who We Are
BUDD 7 helps small businesses save time by building AI assistants and workflows, alongside web design, content creation, and drone photography. We are committed to protecting your privacy and handling your personal data with care and transparency.
When this policy refers to "we", "us", or "our", it means BUDD 7. For the personal data described in this policy, BUDD 7 is the data controller. You can contact us at hello@budd7.com.
Where we build or host a tool on behalf of a client under their own branding, that client is the data controller and their privacy policy applies, not this one.
BUDD 7 is registered with the Information Commissioner's Office as a data controller, registration reference ZC218854.
2. Information We Collect
We only collect information that is necessary to provide our services or respond to your enquiries. This may include:
- Your name and email address when you contact us via our website
- Information you voluntarily share about your project or business requirements
- Basic usage data collected automatically when you visit our website (such as your browser type and the pages you visit)
- Conversations you have with our AI chat assistant, Natasha, including any information you choose to share during that interaction
- Your phone number, WhatsApp profile name and messages if you chat with Natasha on WhatsApp
- CV text you paste into our CV Builder tool, which may include your name, contact details, employment history and qualifications
We do not ask for special category data (such as health, ethnicity or religious belief). If you choose to include such information in a chat message or in CV text you paste into our tools, it will be processed as part of that content. Please only share what you are comfortable sharing.
3. How We Use Your Information & Our Legal Basis
Under UK GDPR we must have a lawful basis for processing your personal data. Ours are:
- Legitimate interests: responding to your enquiries, operating and securing our website, and providing our free tools. We have considered your rights and believe this processing is what you would reasonably expect.
- Contract: delivering the services you have engaged us to provide.
- Consent: analytics cookies, and any marketing emails you have asked to receive. You can withdraw consent at any time.
- Legal obligation: where we are required to keep records, for example for tax purposes.
We will never sell or rent your personal information, and we will not share it with third parties for marketing purposes.
4. Cookies & Analytics
Our website uses Google Analytics to understand how visitors find and use our content. Google Analytics sets cookies on your device and collects information such as the pages you visit, how long you spend on them, your approximate location and your device type.
Analytics cookies are not essential to the running of the site, and we only set them where you have consented. Google Analytics is not loaded at all until you accept the cookie notice, so nothing is requested from Google and no analytics cookie is set before that. If you refuse, or simply never answer, it stays off.
You can change your mind at any time using the button below, and you can block cookies through your browser settings as well. Refusing will not prevent you from using our website or our free tools.
Google acts as a processor for this data. You can read Google's own privacy information at policies.google.com/privacy.
5. Our AI Chat Assistant (Natasha)
Our website includes an AI-powered chat assistant called Natasha. When you use the chat, your message is sent to Anthropic's Claude API so that a reply can be generated, and the conversation is also recorded on our own systems. Section 8 explains what Anthropic does with that data.
Chat records are used to:
- Improve the accuracy and helpfulness of Natasha's responses over time
- Review conversations where follow-up from our team may be needed
- Maintain records of any enquiries or requests made through the chat
We retain chat records for up to 12 months, after which they are securely deleted. We will not use the content of your chat conversations for any unrelated purpose, and we will not share it with third parties for marketing.
Please avoid entering passwords, financial details or another person's personal information into the chat. If you would like us to delete a specific chat record, contact us at hello@budd7.com.
6. Natasha on WhatsApp
You can also chat with Natasha on WhatsApp. When you message us there, we receive your phone number, your WhatsApp profile name and the messages you send. Your messages are passed to Anthropic's Claude API so that Natasha can reply, in the same way as the website chat. Section 8 explains what Anthropic does with that data.
Messages travel through Twilio, which connects our system to WhatsApp, and through WhatsApp itself, which is operated by Meta. Both act as our processors. Meta may also use limited message information as a controller to keep WhatsApp safe and secure, as described in WhatsApp's own privacy policy.
We keep the conversation itself for 30 days after your last message, so that Natasha can follow what you have said. If you make an enquiry or book a callback, a record of it is kept with our other enquiries for up to 12 months.
Natasha's first message tells you she is an AI assistant. At any time you can:
- Type HUMAN to speak to Richard
- Reply STOP to stop receiving messages, and START to begin again
- Reply DELETE to erase the conversation and the details we hold from it
We do not send marketing messages on WhatsApp. We only reply to messages you send us.
7. Our CV Builder Tool
Our website offers a free CV Builder. When you paste your CV text into the tool and ask it to be read, that text is sent to Anthropic's Claude API so the sections can be identified and laid out. Section 8 explains what Anthropic does with that data.
We do not store your CV. The text passes through our server to Anthropic and the result is returned to your browser. We keep no copy, we do not require an account, and once you close the page the content is gone. Everything you type into the editor, and any PDF or Word file you download, stays on your own device.
Our server keeps short-lived technical records, your IP address and a request count, purely to stop the tool being abused. These are deleted within two hours and are never linked to the content of your CV.
If you would prefer your CV text not to be sent anywhere at all, you can skip the automatic reading step and type your details into the editor directly. The tool works fully offline in that mode.
8. How We Use AI (Anthropic)
Both Natasha and our CV Builder are powered by Claude, an AI service provided by Anthropic PBC. The same arrangements apply to both.
When you use either tool, the text you provide is transmitted over an encrypted connection to Anthropic's API, processed to generate a response, and returned to us. Anthropic acts as our processor for this data.
Under Anthropic's commercial terms for API customers:
- Your content is not used to train AI models
- Inputs and outputs are retained only briefly on Anthropic's systems before deletion, subject to their published commercial data retention policy
- Content flagged by automated safety systems may be retained longer for abuse prevention
These are Anthropic's terms rather than ours, and they may change. You can read their current position at anthropic.com/legal/privacy.
Please treat AI-generated responses as helpful suggestions rather than professional advice, and check anything important.
9. Who We Share Data With
We use a small number of trusted providers to run our website and services. Each acts as our processor and is permitted to use your data only as instructed by us:
- Anthropic PBC: AI processing for Natasha and the CV Builder (United States)
- Fasthosts Internet Ltd: website and email hosting (United Kingdom)
- Google LLC: website analytics, and the calendar we use to book callbacks (United States)
- Twilio Inc.: connects our WhatsApp assistant to WhatsApp (United States)
- Meta Platforms (WhatsApp): carries WhatsApp messages (United States and Ireland)
Our website may also link to third-party sites. Once you leave our website this policy no longer applies, and we are not responsible for the privacy practices of those sites.
10. International Transfers
Some of our providers are based outside the United Kingdom, principally in the United States. Where your personal data is transferred outside the UK, we rely on the safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or an adequacy decision, to ensure your data receives an equivalent standard of protection.
If you would like more detail about the safeguards in place for a particular provider, contact us at hello@budd7.com.
11. Data Storage, Security & Retention
We take the security of your personal data seriously. Information is stored securely, transmitted over encrypted connections, and access is restricted to authorised personnel only.
We keep personal data only for as long as we need it:
- Enquiries and correspondence: up to 24 months after our last contact
- Natasha chat records: up to 12 months
- Natasha WhatsApp conversations: 30 days after your last message (enquiry and callback records: up to 12 months)
- CV Builder content: not stored at all
- Abuse-prevention records: deleted within two hours
- Client records required for tax purposes: as required by law
Once data is no longer needed, we securely delete or anonymise it.
12. Your Rights
You have the right to:
- Request access to the personal information we hold about you
- Ask us to correct any inaccurate or incomplete information
- Request that we delete your personal data (subject to any legal obligations)
- Object to, or ask us to restrict, our processing of your data
- Request a copy of your data in a portable format
- Withdraw consent at any time where processing is based on your consent
On WhatsApp you can also erase your conversation straight away by replying DELETE.
To exercise any of these rights, contact us at hello@budd7.com. We will respond within one month.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please don't hesitate to get in touch.
Email: hello@budd7.com
We typically respond within 24 hours, often much sooner.
