Privacy Policy

Who we are

mbuzz is operated by Forebrite Pty Ltd (ABN 64 671 038 958), an Australian company. When we say "mbuzz," "we," "us," or "our," we mean Forebrite Pty Ltd.

The two types of data we handle

We handle two distinct types of data:

1. Your account data — Information you provide when you sign up and use mbuzz (your email, name, company name, billing info).
2. Your customers' data — The events, sessions, and visitor data you collect through mbuzz. This is your data. We just store and process it for you.

What we collect from you (account holders)

When you create an mbuzz account, we collect:

• Email address — Required for login and communication
• Name — So we know what to call you
• Company name — Required to identify your account
• Payment information — Processed securely by Stripe (we never see your full card number)

We also automatically collect:

• Usage data — How you use mbuzz, so we can improve it
• Technical data — Browser type, IP address for security purposes

What you collect through mbuzz (your customers' data)

You use mbuzz to track events on your website or app. The data you collect depends on how you implement mbuzz, but typically includes:

• Page views and events
• Session information
• Visitor identifiers
• UTM parameters and referrer data
• Any custom properties you choose to track

Important: You are the data controller for your customers' data. We are the data processor. You're responsible for having appropriate privacy policies and consent mechanisms for your own users.

How we use data

Your account data:

• To provide and maintain your mbuzz account
• To process payments
• To send important service updates (no marketing spam)
• To respond to support requests
• To improve mbuzz

Your customers' data:

• To provide the attribution analytics you signed up for
• That's it. We don't use it for anything else.

Where we store data

All data is stored on servers in the United States, hosted by DigitalOcean. We use industry-standard security practices to protect your data.

Who we share data with

We use a small number of trusted service providers:

• Stripe — Payment processing
• Postmark — Transactional emails
• DigitalOcean — Hosting infrastructure

We never sell your data. We never share it with advertisers. We never share your data across accounts or use it for other customers' benefit. When you enable data-driven attribution, your data is analyzed solely to improve your own attribution insights — never mixed with other customers' data.

How long we keep data

Your customers' data (events, sessions, visitors):

• Kept as long as your account is active
• Deleted immediately when you delete your account
• You can also request deletion of specific data anytime

Your account data:

• Kept for 90 days after account deletion (in case you change your mind)
• Permanently deleted after 90 days
• Billing records kept for 7 years (legal requirement)

Your rights

You have the right to:

• Access — Request a copy of your data
• Correct — Update inaccurate information
• Delete — Delete your account and data
• Export — Download your data in a portable format
• Object — Opt out of certain processing

To exercise any of these rights, contact us.

For EU residents (GDPR)

If you're in the European Union, you have additional rights under GDPR. We process your data based on:

• Contract — To provide the service you signed up for
• Legitimate interest — To improve our service and prevent fraud
• Legal obligation — To comply with laws (like keeping billing records)

You can lodge a complaint with your local data protection authority if you believe we've violated your rights.

For California residents (CCPA)

If you're in California, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information.

We do not sell personal information. We never have, and we never will.

Cookies

We use minimal cookies to keep you logged in and remember your preferences. We don't use tracking cookies or third-party advertising cookies. See our Cookie Policy for details.

Analytics on this website

We use mbuzz to track analytics on our own website. We practice what we preach — privacy-respecting, server-side tracking with no third-party cookies.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll notify you by email or through the mbuzz dashboard.

Contact us

Questions about this privacy policy? Get in touch.

Forebrite Pty Ltd
ABN 64 671 038 958
Australia