Freebuff procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If European or United Kingdom data-protection law applies, you may have rights to access, rectify, erase, restrict, or port your personal information and to object to processing. You may object at any time to processing for direct marketing, including related profiling. You may also lodge a complaint with your local data protection authority.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Where applicable law requires a legal basis, we process personal information as necessary to perform our contract with you, comply with legal obligations, and pursue legitimate interests such as securing and improving Service, preventing abuse, and supporting our business. We rely on consent where required, including for certain advertising, cookies, connected services, or training uses associated with models or features identified for AI training. You may withdraw consent without affecting processing that occurred before withdrawal. We are based in the United States, and we and our providers may process information in the United States and other countries. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or contractual protections.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on where you live and whether the applicable law covers Company, you may have rights to know or access personal information, correct inaccuracies, delete information, obtain a portable copy, opt out of sale, sharing, or targeted advertising, limit certain uses of sensitive personal information, use an authorized agent, and appeal a denied request. We will not discriminate against you for exercising a privacy right. Submit a request or appeal by emailing support@codebuff.com.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You may ask to access, correct, delete, or receive a copy of your personal information, or object to or restrict certain processing, by emailing support@codebuff.com. You may also opt out of marketing emails through the unsubscribe link and exercise any additional privacy rights available under applicable law. We may verify your identity before completing a request and may retain information when an exception under applicable law applies.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing, maintaining, developing, improving, evaluating, securing, and supporting Service; advertising; enforcing our Terms; complying with law; and resolving disputes. Depending on the data and context, information may be deleted, deidentified, aggregated, or retained longer when reasonably needed for legitimate business, security, legal, dispute-resolution, or clearly disclosed AI-training purposes. Data submitted through a model or feature labeled for AI training may be retained for the permitted development and improvement uses above and may not be removable after it is deidentified or incorporated into a model. Saved projects and conversation history generally remain associated with your account until we complete an applicable deletion request, subject to the exceptions above. Neither we nor our Codebase Evaluation partners retain raw source code or agent traces solely for Codebase Evaluation after we complete an account-deletion request or a verified privacy request to delete that data. Disconnecting GitHub, removing Freebuff’s repository access, or selecting “Delete project” in Freebuff Cloud do not by themselves delete data already collected. Deleted information may remain in backups, and deidentified or aggregated data, derived interests, derived Codebase Evaluation results that do not contain raw source code or agent traces , permitted training data, and content others retain through a sharing or publishing feature may remain after deletion. Where required, we instruct other service providers to delete information as well.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We process Prompt and Project Data to provide the features you request. Depending on the product, model, and account you use, that data may be processed by Company systems and by AI model providers. Providers may change over time. When you connect and use your own third-party account, that provider's terms and privacy practices may also apply.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If we offer a paid product or service, you agree to provide accurate information and pay the fees disclosed at the time of purchase. We may use third-party payment processors, subject to our Privacy Policy, and may refuse or cancel a transaction if fraud or unauthorized or illegal activity is suspected. You may not circumvent payment or eligibility requirements by fraudulently exploiting discounts, promotions, referrals, regional pricing, or eligibility programs. You remain responsible for any resulting amounts owed.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We may disclose information to: Model providers that process prompts and related context to provide requested AI features. Hosting, storage, sandbox, database, security, support, analytics, and observability providers. Authentication and connected-service providers when you use or connect those services. Advertising and measurement service providers acting on our behalf, including providers that process prompts and messages for the purposes described above. Service providers and evaluation partners acting on our behalf for the limited Codebase Evaluation described above. Payment processors if you purchase a paid product or service. Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security. A buyer, successor, or other relevant party in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections. We may also create and disclose aggregated or de-identified information that does not reasonably identify you. We do not sell personal information for money. Certain disclosures to advertising or measurement partners may be considered a “sale,” “sharing,” or targeted advertising under some privacy laws even when no money changes hands. Rights and choices required by applicable law apply to those disclosures.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Web portions of Service use cookies, local storage, and similar technologies for authentication, preferences, security, analytics, advertising, and attribution. Our products also send bounded usage, performance, and diagnostic events to analytics and observability providers. Advertising and conversion events may include hashed account, campaign, click, pixel, and conversion identifiers; IP address; user agent; source URL; and an event indicating that a prompt was accepted. The prompt's contents are not included in these routine conversion events. Attribution information may be retained in first-party browser storage. You can control cookies through your browser and any consent controls we make available. Some portions of Service may not work correctly if you block necessary storage. Because there is no common standard for “Do Not Track,” our websites do not currently respond to that signal.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ We may offer paid subscription plans that add session capacity on top of the free service. Plans renew monthly or annually according to the billing option and price shown at purchase. Annual plans are paid upfront. A discounted first month, where offered, applies once per account to monthly billing only. Payments are processed by our third-party payment processor. Each plan carries usage limits, which include daily, rolling five-day, and monthly session limits, per-model limits, and a monthly compute (dollar-cost) ceiling. Current limits are stated on the plan management page in your account settings at the time of purchase. When a limit is reached, plan sessions pause until the relevant window resets; free sessions are unaffected. Certain models may be unavailable during peak-demand hours. All plan limits, prices, and included models are subject to change. Changes to recurring prices take effect at your next renewal; we may adjust usage limits and model availability at any time to reflect provider capacity and cost. Material changes will be reflected on the plan management page. You may cancel at any time from your account settings. Cancellation of a monthly plan takes effect immediately. Cancelling an annual plan stops its next renewal, and access continues through the end of the paid annual term. No prorated refund is provided for the remainder of the current billing period. Usage allowances continue to refresh on their stated daily and monthly schedules regardless of billing interval. Supported downgrades take effect at the next renewal. Initiating a payment dispute or chargeback for inference that has already been consumed may result in immediate termination of the subscription and suspension of the account.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Our free usage limits and model eligibility are intended to apply to each person, not to each account. Free access may be supported by advertising and is provided for individual, human-directed use through the normal interfaces and intended functionality of our products. Unless we give you written permission, you may not: Create, control, or operate more than one Freebuff account. One Freebuff account may be used across our products. Access free AI model inference except through normal use of an official Company product that offers it. You may not call the underlying servers or endpoints directly or through scripts, custom clients, wrappers, integrations, or third-party software. Use a bot, script, macro, headless browser, autonomous agent, or similar automation to operate our products or submit requests. A human must initiate each session and remain actively present while it runs. Automation performed by our products after a human starts a session is allowed. Hide, spoof, or misrepresent your actual country or location, including by using a proxy, VPN, relay, or similar service to make your traffic appear to come from another country, in order to obtain models, features, limits, pricing, or eligibility that are not available in your actual location.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.