Privacy Policy

Who we are

mbuzz is operated by Forebrite Pty Ltd (ABN 64 671 038 958), an Australian company. When we say "mbuzz," "we," "us," or "our," we mean Forebrite Pty Ltd.

The two types of data we handle

We handle two distinct types of data:

Your account data — Information you provide when you sign up and use mbuzz (your email, name, company name, billing info).
Your customers' data — The events, sessions, and visitor data you collect through mbuzz. This is your data. We just store and process it for you.

What we collect from you (account holders)

When you create an mbuzz account, we collect:

Email address — Required for login and communication
Name — So we know what to call you
Company name — Required to identify your account
Payment information — Processed securely by Stripe (we never see your full card number)

We also automatically collect:

Usage data — How you use mbuzz, so we can improve it
Technical data — Browser type, IP address for security purposes

What you collect through mbuzz (your customers' data)

You use mbuzz to track events on your website or app. The data you collect depends on how you implement mbuzz, but typically includes:

Page views and events
Session information
Visitor identifiers
UTM parameters and referrer data
Any custom properties you choose to track

Important: You are the data controller for your customers' data. We are the data processor. You're responsible for having appropriate privacy policies and consent mechanisms for your own users.

How we use data

Your account data:

To provide and maintain your mbuzz account
To process payments
To send important service updates (no marketing spam)
To respond to support requests
To improve mbuzz

Your customers' data:

To provide the attribution analytics you signed up for
That's it. We don't use it for anything else.

Where we store data

All data is stored on servers in the United States, hosted by DigitalOcean. We use industry-standard security practices to protect your data.

Who we share data with

We use a small number of trusted service providers:

Stripe — Payment processing
Postmark — Transactional emails
DigitalOcean — Hosting infrastructure

We never sell your data. We never share your tracking data with advertisers. We never share your data across accounts or use it for other customers' benefit. When you enable data-driven attribution, your data is analyzed solely to improve your own attribution insights — never mixed with other customers' data.

Third parties on mbuzz.co (our marketing site only)

On our own marketing site (mbuzz.co), we use the following services for analytics and advertising measurement. These are loaded only after you give consent via the cookie banner (for visitors in the EEA, UK, Switzerland, and California) and do not apply to the data we process for you as a customer.

Google Analytics 4 — Engagement analytics (page views, bounce rate, content performance). See Google's privacy policy
Google Ads — Conversion tracking and remarketing for ad campaign optimisation. Manage your Google Ads settings
Meta Pixel — Conversion tracking for Meta (Facebook/Instagram) ad campaigns. Manage your Meta ad preferences

How long we keep data

Your customers' data (events, sessions, visitors):

Kept as long as your account is active
Deleted immediately when you delete your account
You can also request deletion of specific data anytime

Your account data:

Kept for 90 days after account deletion (in case you change your mind)
Permanently deleted after 90 days
Billing records kept for 7 years (legal requirement)

Your rights

You have the right to:

Access — Request a copy of your data
Correct — Update inaccurate information
Delete — Delete your account and data
Export — Download your data in a portable format
Object — Opt out of certain processing

To exercise any of these rights, contact us.

For EU residents (GDPR)

If you're in the European Union, you have additional rights under GDPR. We process your data based on:

Contract — To provide the service you signed up for
Legitimate interest — To improve our service and prevent fraud
Legal obligation — To comply with laws (like keeping billing records)

Our lawful basis for analytics and advertising cookies on mbuzz.co is consent (Art. 6(1)(a)). You can withdraw consent at any time via the cookie banner or the Cookie Policy page.

You can lodge a complaint with your local data protection authority if you believe we've violated your rights.

For California residents (CCPA)

If you're in California, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information.

We do not sell personal information. We never have, and we never will. We share limited identifiers with Google and Meta for measurement and advertising on mbuzz.co. Under California law, sharing for cross-context behavioural advertising may be treated as a sale — you may opt out via the cookie banner or the Cookie Policy page.

Cookies

On the mbuzz dashboard (your logged-in app), we use only essential first-party cookies for session management and security. On mbuzz.co (our marketing site), we use Google Analytics, Google Ads, and Meta cookies for analytics and ad measurement — these load only after you give consent via the cookie banner. See our Cookie Policy for a full list of cookies and how to manage your preferences.

Analytics on this website

We use mbuzz for multi-touch attribution on our own website — server-side, first-party, the same product we sell. For engagement analytics (bounce rate, page paths, content performance) we use Google Analytics 4, because mbuzz is built for attribution, not behavioural analytics. For ad campaign optimisation we use Google Ads and Meta Pixel. All three are gated by your consent and load only if you accept on the cookie banner.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll notify you by email or through the mbuzz dashboard.

Contact us

Questions about this privacy policy? Get in touch.

Forebrite Pty Ltd
ABN 64 671 038 958
Australia