Privacy Policy

Last updated: January 9, 2026

Overview

Buoy Design, Inc. ("Buoy," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CLI tool, website, and related services.

The short version: The Buoy CLI runs locally and doesn't send your code anywhere. Our cloud features (Team plan) only sync metadata and scan results—never your source code.

Information We Collect

CLI Tool (Free)

The Buoy CLI runs entirely on your local machine. By default, it does not transmit any data externally. Your source code never leaves your computer.

  • No source code is collected or transmitted
  • No telemetry is sent without explicit opt-in
  • Scan results are stored locally in your project

Cloud Features (Team Plan)

If you opt into cloud features, we collect:

  • Account information: Email, name, organization name
  • Scan metadata: File counts, issue counts, coverage percentages (not source code)
  • GitHub integration: Repository names, PR numbers (for PR comments feature)
  • Usage data: Feature usage, command frequency

Website

When you visit buoy.design, we collect:

  • Standard web analytics (page views, referrer, browser type)
  • Information you provide via forms (name, email, message)
  • Cookies for essential site functionality

How We Use Your Information

  • Provide and maintain our services
  • Send you scan results and alerts (Team plan)
  • Respond to your inquiries and support requests
  • Improve our products and develop new features
  • Send product updates and announcements (with opt-out)
  • Comply with legal obligations

Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers: Hosting, email, analytics (bound by confidentiality)
  • Legal requirements: When required by law or to protect rights
  • Business transfers: In connection with a merger or acquisition

Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting support@buoy.design.

Your Rights

Depending on your location, you may have rights to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data
  • Export your data in a portable format
  • Opt out of marketing communications

Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: