Legal
Privacy Policy
How Buzzy collects, uses, and protects personal information across the site and related services.
This Privacy Policy explains how rckt corp., operating Buzzy ("we," "us," or "our"), collects, uses, discloses, and protects personal information when you use our website, forms, and related rent-reporting services (collectively, the "Services").
Last updated: October 28, 2026.
1. Scope
This Privacy Policy applies to information collected through the Buzzy marketing website, contact and account-deletion request forms, analytics tools used on the site, and any rent-reporting workflow you access through Buzzy. Buzzy is operated by rckt corp., based in Ontario, Canada. This Privacy Policy does not govern third-party websites, apps, or services that operate under their own privacy policies.
2. Information We Collect
Depending on how you interact with Buzzy, we may collect the following categories of information:
- Contact information, such as your name, email address, and the contents of messages you submit to us.
- Account-deletion request details, including your name, email address, and any information you provide to help us verify and process the request.
- Rent-reporting information you provide directly or through connected services, such as transaction details, payment history, supporting documents, and account-identifying information needed to identify matching rent transactions and submit reporting data.
- Technical and usage information, such as device type, browser, pages viewed, referral information, campaign parameters, and interactions with site content.
- Cookie and similar technology data used to support analytics, basic site functionality, and troubleshooting.
3. Information From Third Parties
We may receive information from service providers and integration partners that help us operate the Services.
- Plaid may provide account and transaction data you authorize it to share with us so we can review rent-payment activity.
- The services this website uses are described one by one in section 5: Cloudflare, which delivers the site; Cloudflare Turnstile and Mailgun, which protect and deliver the contact and account-deletion forms; and PostHog, Sentry, Microsoft Clarity and Cloudflare Web Analytics, which run only if you allow them.
- Infrastructure and API providers may process information needed to deliver forms, host content, prevent abuse, and respond to support requests.
4. How We Use Information
We may use personal information to:
- Provide, maintain, and improve the Services.
- Identify matching rent transactions, support reporting setup, and submit eligible data to participating credit bureaus.
- Respond to contact requests, support inquiries, and account-deletion requests.
- Measure site usage, troubleshoot issues, detect abuse, and improve product experience and marketing performance.
- Comply with legal obligations, enforce our Terms of Service, and protect the rights, safety, and security of Buzzy, our users, and others.
5. Website Services, Cookies, and Your Privacy Choices
Four services on this website are optional: product analytics (PostHog), error diagnostics (Sentry), session replay (Microsoft Clarity) and performance measurement (Cloudflare Web Analytics). Each stays off until you allow it. On your first visit a banner asks. Reject all and Accept all decide for every optional service at once, and Manage choices lets you allow each purpose separately. Until you choose, none of them loads.
Optional services run only on the public pages of this site. They never run on the contact or account-deletion request forms, on an address with a query string or fragment, or (for PostHog, Microsoft Clarity and Cloudflare Web Analytics) on a page opened from one of those. We do not send what you type into a form to any of them.
Your choice is kept in your browser's local storage under
rckt.consent, with the date and the revision of this policy.
We ask again after 12 months, or sooner when this policy changes. If you
chose on this site before, your earlier choice is carried over: a "no"
stays a "no", and because error diagnostics is now its own choice, we ask
about it again if you had allowed analytics.
If your browser sends a Global Privacy Control signal and you have not chosen yet, every optional service stays off and no banner is shown. If you allowed a service before turning the signal on, it stops and the banner asks again. You can still allow a service yourself in Privacy choices; that choice is kept.
Cloudflare, which delivers the site, and Cloudflare Turnstile, which checks that the contact and account-deletion forms are sent by a person, are necessary and always on where they are used. Mailgun delivers what you send through those forms to us by email; it runs on our servers and is never loaded in your browser. You can also control cookies through your browser settings; if you block some cookies or similar technologies, portions of the website may not work as intended.
Services this website uses
Controller: rckt corp., based in Ontario, Canada.
Cloudflare
Delivers the site and protects it from abuse and attacks.
- Consent
- Always on, because the site needs it
- What it collects
- The network address, request headers and requested address of every request, which any web request reveals
- Security cookies that Cloudflare sets where its bot protection is turned on
- What it does not collect
- Product analytics, error diagnostics, session replay or performance measurement, which are the separate services listed here
- Where it runs
- Every request to the site
- Where the data is stored
- Cloudflare's global network, starting at the data centre nearest you. Cloudflare stores the information it keeps mainly in the United States and the European Economic Area.
- How long it is kept
- Cloudflare keeps no request logs for us: retention of HTTP request logs is off unless a site turns it on, and ours do not. Cloudflare keeps its own records for as long as its business purposes require, as its privacy policy describes; it gives no fixed period.
- Privacy policy
- Cloudflare privacy policy
- How to opt out
- None: the site cannot be delivered without it.
Cloudflare Turnstile
Checks that a form is sent by a person and not an automated program, so the form cannot be abused.
- Consent
- Always on, because the site needs it
- What it collects
- Your network address, browser user agent and TLS fingerprint, and the site the check runs on
- The result of the check, which our server confirms with Cloudflare together with your network address
- What it does not collect
- What you type into the form: the check runs in a separate Cloudflare frame that cannot read the page
- Anything on pages without a form it protects
- Where it runs
- The contact and account deletion request pages, where it loads when the page opens
- Where the data is stored
- Cloudflare's global network, starting at the data centre nearest you. Cloudflare stores the information it keeps mainly in the United States and the European Economic Area.
- How long it is kept
- Not yet confirmed
- Privacy policy
- Cloudflare Turnstile privacy policy
- How to opt out
- None for a protected form: it cannot be sent without the check, which runs when you open the form's page.
Mailgun
Delivers what you send through a site form, such as a contact message or an account deletion request, to us as an email.
- Consent
- Not loaded in your browser: our servers use it only to handle what you send us
- What it collects
- What you enter in the form, such as your name, email address and message
- Mailgun's delivery records for that email, such as when it was sent and whether it arrived
- What it does not collect
- Anything from your browser: it is never loaded in the page, so it gets no cookies, device details or browsing history
- Your network address: our server sends the message, not your browser
- Anything unless you send a form
- Where it runs
- Our servers, when you send a form that is delivered by email
- Where the data is stored
- United States: Mailgun's US region.
- How long it is kept
- Delivery records, such as the sender, recipients, subject and routing details, for 30 days, of which our Mailgun plan lets us see 1 day. The email itself for up to 7 days.
- Privacy policy
- Mailgun privacy policy
- How to opt out
- None for a form you send: it cannot be delivered without it. Nothing reaches Mailgun unless you send a form.
PostHog
Counts how the site is used, so we can improve it.
- Consent
- Off until you allow product analytics
- What it collects
- A page view each time product analytics starts on a page, carrying only the site's release and environment labels
- A random identifier kept in page memory only, so it does not carry over between visits
- A flag in local storage recording that you allowed product analytics, removed when you turn it off
- The network address of the request, which any web request reveals
- What it does not collect
- Automatic capture of clicks, rage clicks, dead clicks, heatmaps or typing
- Console logs, network timings, performance data or errors captured automatically
- Session recordings
- Surveys, experiments, product tours or chat, and the extra code PostHog would load for them
- Feature flag or remote configuration requests
- Person profiles
- A PostHog identifier stored on the device
- Anything before you allow product analytics
- The page address, page title, referrer, campaign parameters, or browser and device details: the site removes them before an event is sent
- Where it runs
- On this site, the home, how it works, features, pricing, FAQ, about, press, affiliates, boost, credit education, security, why Buzzy, privacy policy and terms of service pages, after you allow product analytics; never the contact or account deletion request pages, an address with a query string or a fragment other than a plain anchor, or a page opened from one of those
- Where the data is stored
- European Union: PostHog's EU Cloud, hosted in Frankfurt, Germany.
- How long it is kept
- 1 year.
- Privacy policy
- PostHog privacy policy
- How to opt out
- Turn off Product analytics in Privacy choices. Its storage and cookies are removed.
Sentry
Reports errors that happen in the page, so we can fix them.
- Consent
- Off until you allow error diagnostics
- What it collects
- The error type, message and stack trace (file names, function names, line and column numbers), after the site removes anything it does not need
- Release and environment labels for the site
- The network address of the request, which any web request reveals
- What it does not collect
- Cookies, request headers or page addresses
- Your network address stored with the error: Sentry is told not to infer it
- A trail of clicks, console output or network requests
- Logs, metrics, profiles or session replays
- Performance traces, unless a product turns them on and lists it here
- Names, email addresses or account details
- Anything before you allow error diagnostics
- Where it runs
- On this site, the home, how it works, features, pricing, FAQ, about, press, affiliates, boost, credit education, security, why Buzzy, privacy policy and terms of service pages, after you allow error diagnostics; never the contact or account deletion request pages, or an address with a query string or a fragment other than a plain anchor
- Where the data is stored
- United States: Sentry's US data region, stored in Iowa.
- How long it is kept
- 30 days.
- Privacy policy
- Sentry privacy policy
- How to opt out
- Turn off Error diagnostics in Privacy choices.
Microsoft Clarity
Records how people use the pages where the site uses session replay, with form fields and editable text masked, so we can see where people get stuck.
- Consent
- Off until you allow session replay
- What it collects
- Mouse movement, clicks, scrolling and page layout on those pages
- Page text that is not masked
- Browser, device and screen details
- Two Clarity cookies (_clck and _clsk) that recognise the browser and the visit
- The network address of the request, which any web request reveals
- What it does not collect
- Anything on other pages, on any address with a query string, or on any address with a fragment other than a plain anchor (such as #install)
- What you type into forms or editable regions, which are masked
- Advertising storage, which is denied
- Anything before you allow session replay
- Where it runs
- On this site, the home, how it works, features, pricing, FAQ, about, press, affiliates, boost, credit education, security, why Buzzy, privacy policy and terms of service pages, after you allow session replay; never the contact or account deletion request pages, an address with a query string or a fragment other than a plain anchor, or a page opened from one of those
- Where the data is stored
- Microsoft Azure. Microsoft does not name the location; it may store and process data in your region, in the United States or in other countries where it operates.
- How long it is kept
- 30 days from the visit, except favourite recordings and a random sample of recordings, which are kept for up to 9 months.
- Privacy policy
- Microsoft Clarity privacy policy
- How to opt out
- Turn off Session replay in Privacy choices. Its cookies are removed, on whichever page you do it, and the page reloads if a recording was running.
Cloudflare Web Analytics
Measures how many pages load and how fast they load.
- Consent
- Off until you allow performance measurement
- What it collects
- The page address, referrer and page load timings
- Browser and device details from the user agent
- The network address of the request, which any web request reveals
- What it does not collect
- Cookies or other storage on the device
- Anything before you allow performance measurement
- Where it runs
- On this site, the home, how it works, features, pricing, FAQ, about, press, affiliates, boost, credit education, security, why Buzzy, privacy policy and terms of service pages, after you allow performance measurement; never the contact or account deletion request pages, an address with a query string or a fragment other than a plain anchor, or a page opened from one of those
- Where the data is stored
- Cloudflare's global network, starting at the data centre nearest you. Cloudflare stores the information it keeps mainly in the United States and the European Economic Area.
- How long it is kept
- Every page load for 7 days, then a sample of about 10% for longer-term reports, which cover the previous six months.
- Privacy policy
- Cloudflare Web Analytics privacy policy
- How to opt out
- Turn off Performance measurement in Privacy choices.
6. Plaid and Financial Data Handling
If you connect a financial account through Plaid, Plaid handles your bank login credentials within its own experience. Buzzy is designed not to store those bank login credentials directly. We may, however, receive and store account and transaction data that is necessary to review rent payments, support verification, investigate issues, and operate the rent-reporting workflow.
7. Change Your Privacy Choices
You can change your choices at any time with Privacy choices at the bottom of every page, or with the button below. Turning a service off stops it, removes what it stored in your browser, and reloads the page when the service cannot be stopped in place.
8. When We Disclose Information
We may disclose personal information in the following circumstances:
- To service providers and contractors that help us host the site, process forms, analyze usage, support customer communications, or operate verification and reporting workflows.
- To Plaid and other integration partners when needed to provide connected-account functionality.
- To participating credit bureaus or reporting partners when you enroll in an eligible rent-reporting workflow and applicable information is approved for submission.
- To comply with law, legal process, regulatory requests, or to protect rights, property, and safety.
- As part of a business transaction such as a merger, financing, acquisition, or asset sale, subject to applicable confidentiality protections.
9. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, investigate abuse, and maintain appropriate business records. Retention periods may vary depending on the type of information and the reason it was collected.
10. Security
We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Your Choices and Requests
Depending on applicable law, you may have the right to request access to, correction of, or deletion of certain personal information. You may also opt out of promotional emails by using the unsubscribe instructions in the message.
To request deletion, use the account-deletion request form on this site or contact us through the support channel linked below. We may need to retain certain information where required or permitted by law, for legitimate recordkeeping, fraud prevention, dispute resolution, or compliance purposes.
12. Children's Privacy
The Services are not directed to children, and we do not knowingly collect personal information from children through this website.
13. International Processing
Our service providers may process or store information in jurisdictions outside your province, state, or country. When that happens, personal information may be subject to the laws of those jurisdictions.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the "Last updated" date. Your continued use of the Services after changes become effective means the updated Privacy Policy will apply going forward.
15. Contact Us
If you have questions about this Privacy Policy or want to make a privacy request, contact us through our support page or visit rckt.tech.