Privacy policy

Last updated: September 15, 2026

buy3 is an inbound call tracking platform used by agencies, agents and insurance teams. This policy explains what information we collect when you use the buy3 website and platform, why we collect it, who can see it, and the choices you have. It is written in plain English on purpose — if anything here is unclear, write to us at support@buy3.io.

buy3 is operated by TODO_LEGAL: legal entity name, TODO_LEGAL: registered address. TODO_LEGAL: legal entity name is the controller of the personal data described in this policy. Privacy questions and data requests go to support@buy3.io.

Information we collect

We collect only what the platform needs to work:

  • Account data — your name, email address and phone number, plus agency details such as company name and, for white-label agencies, the logos and branding you upload.
  • Call data — recordings and transcripts of calls handled through buy3, along with call metadata: caller ID, duration, campaign, disposition and routing history.
  • Business records — submitted sales, lead lists you upload, SMS messages sent and received through your buy3 numbers, wallet transactions, payout details and referral activity.
  • Usage data — sign-in events, active sessions, device and browser information, and an audit log of significant account actions.

Call recordings, transcripts and consent

Calls routed through buy3 may be recorded and transcribed so that agents, agency admins and our QC review process can verify what was said on a call. Recordings and transcripts appear in your call logs and are visible only to people your account's roles allow — for example, an agency owner or admin can review their agents' calls.

Call recording laws differ by jurisdiction, and some require the consent of every party on the call. The account holder placing or receiving calls through buy3 is responsible for providing any legally required notice and obtaining any legally required consent before a call is recorded.

Payments

Payments — subscriptions and wallet deposits alike — are processed on our behalf by Stripe, Inc., acting as our payment processor. Your card details go directly to Stripe; buy3 never stores card numbers on its own servers. We keep a record of each transaction — amount, date, and the last digits and brand of the card as reported by the processor — in your wallet's ledger.

Stripe handles that data as a processor under its own privacy policy. Payouts sent by ACH, wire or PayPal require the corresponding payout details, which we store to deliver your money.

What happens to a payment after it is taken — refunds, cancellations and wallet settlements — is covered by our refund policy.

Cookies and localStorage

We keep browser storage to a minimum:

  • A session cookie that keeps you signed in to the dashboard.
  • A localStorage entry (buy3-theme) that remembers whether you prefer light or dark mode.

We do not use third-party advertising cookies or cross-site trackers on the buy3 website or dashboard.

Emails we send

We send transactional email: receipts, agent invitations, payout and dispute notices, security alerts, and reminders before a free trial ends. We do not send third-party marketing email, and we do not share your address with advertisers.

How we use information

  • To route inbound calls to the right agent and run your campaigns.
  • To process lead lists, including AI-assisted lead verification you request.
  • To bill wallets, run payouts and keep an accurate double-entry ledger.
  • To run QC reviews, resolve disputes and detect fraud or abuse.
  • To secure accounts — two-factor auth, session management and audit logging.
  • To respond when you contact support.

Sharing — and what we never do

We do not sell your personal data, and we do not sell call recordings, transcripts or lead lists. We share data only with service providers that make the platform run — telephony carriers, Stripe for payments, transcription processing and email delivery — and with the people your own account structure grants access to, such as your agency's owner and admins under role-based access. We may disclose information if the law requires it.

Data retention

We keep your data while your account is active. Call recordings and transcripts are retained for as long as they are operationally useful for call logs, QC and dispute resolution. Financial ledger entries and the audit log are retained longer, because accounting and legal obligations require it, even after other data is deleted.

Deletion and your choices

You can request a copy of your data, or ask us to delete your account and the personal data attached to it, by emailing support@buy3.io from the address on your account. We act on verified requests within a reasonable period. Records we are legally required to keep — such as financial ledger entries — are retained in a form that is no longer tied to an active account.

Security

Data moves over encrypted connections. Accounts support two-factor authentication, active sessions can be reviewed and revoked, and a full audit log records significant actions. No system is perfectly secure, but we build so that a single mistake does not become a breach.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top of this page and, for significant changes, notify account holders by email before the change takes effect.

Contact

Questions about privacy at buy3 go to support@buy3.io.

TODO_LEGAL: legal entity name, TODO_LEGAL: registered address