BuzzyCrew

Privacy Policy

Last updated: 2026-11-13

BuzzyCrew helps you run your social media accounts: an AI team researches topics, drafts posts and short-video scripts, schedules posts after you approve them, and summarizes performance and comments. This policy explains what data we collect, what we use it for, who processes it, and how you can delete it.

BuzzyCrew is operated by 明星雲有限公司 (MING XING YUN LIMITED), a company registered in Taiwan (Unified Business No. 82893226) (“we”, “us”).

What we collect

  • Account data: your name and email address. If you sign in with Google, we also store the account identifier Google provides. We never receive or store your Google password.
  • Content you provide: brand settings (name, audience, tags, tone, etc.), your conversations with the advisor, secretary and team, images and assets you upload, knowledge-base entries, projects and drafts.
  • Social accounts you connect: after you authorize a platform, we store the access token it issues (encrypted), the account identifier and display name. We never receive your passwords for those platforms.
  • Data retrieved from platforms: see “Data we receive from Meta Platforms” below.
  • Usage records: the time and usage of each AI run, to calculate usage this month and troubleshoot.
  • Purchase records: the plan you bought, amount, payment method, payment time and the payment provider’s transaction number, to activate, refund and keep accounts. We never store your card number.
  • Cookies: only cookies that keep you signed in and protect the account-connection flow against forged requests. We do not use advertising or third-party tracking cookies.

Data we receive from Meta Platforms (Threads, Instagram, Facebook)

We receive the following data only after you connect an account yourself and approve the request on Meta’s authorization screen, and we use each item only for the feature it supports:

  • Basic account information: the ID and username of your Threads and Instagram accounts; the ID, name and Page access token of the Facebook Pages you manage; and the ID and username of the Instagram business account linked to a Page. Purpose: letting you choose which account to connect, and publishing on your behalf.
  • Publishing: the text and images you approve are sent to the account you connected. We store the post ID and link the platform returns so you can see the result on the Posts page (發文).
  • Insights: views, likes, replies, reposts and quotes (saves on Instagram) of posts published through BuzzyCrew. Purpose: showing them on the Insights page (成效) and helping the team learn which content works.
  • Account overview: for the Threads account, Instagram account and Facebook Page you connect — the follower count, the last 28 days of views, reach and interactions, and the 25 most recent posts on the account (including ones not published through BuzzyCrew): their text, link, time, and like, comment and share counts. We store the follower count once a day to show how it changes. Purpose: showing the account overview on the Insights page (成效).
  • Comments: public replies under posts published through BuzzyCrew (the commenter’s username, text and time). Purpose: listing them on the Engage page (互動) so the team can draft replies, which you decide whether to send.

We do not use data received from Meta Platforms for advertising, sell it, transfer it to data brokers, or use it to build profiles of anyone, and we do not share it with anyone other than the service providers listed below. The text of comments is sent to our AI model providers so the team can draft replies.

How we use data

  • To provide the service: drafting content based on your brand settings, publishing after your approval, and summarizing insights and comments.
  • To activate, renew and refund plans and to calculate usage this month.
  • To operate the service, debug problems and prevent abuse.

We do not sell your data, and we do not use your content for purposes unrelated to providing the service.

Who processes your data

To provide the service, your data passes through these providers, which process it only on our instructions:

  • Cloudflare: hosting, databases and file storage.
  • AI model providers (Anthropic, with OpenAI and Google as fallbacks): your conversations with the team, brand settings, drafts, and the comments and posts to be replied to are sent to generate responses.
  • fal.ai: when you ask for an image or a voice-over, the relevant prompt (and any reference images you choose) is sent to generate the file.
  • The social platforms you connect (Meta’s Threads, Instagram, Facebook): only content you approve for publishing and replies you send are sent to the platform.
  • Google: only to verify your identity when you choose to sign in with Google.
  • FunPoint (歐買尬金流): when you buy a plan, the order details (order number, amount, item name) are sent to it, and the payment details you enter on its payment page are processed by it; your card number never passes through or is stored by us.
  • ezPay e-invoice platform (簡單行動支付): issues your electronic invoice after payment, using your name, email, account ID and the mobile barcode, tax ID and company name or donation code you choose at checkout; invoices are uploaded to the Ministry of Finance e-invoice platform as required by law.
  • Resend: sends account and plan notices (such as password resets and plan expiry reminders), using your email address.

You always approve what gets published

Posts are never published before you approve them. Replies to comments require you to press Send for each one by default; only if you turn on “reply to thanks and simple questions automatically” are those two kinds sent automatically. “Share Instagram posts to Facebook” is decided post by post by default; only if you turn on automatic sharing will a post you already published to Instagram be published to your Facebook Page 30 minutes later, and you can cancel it during that time.

Retention and security

  • Each account’s data is stored in its own isolated database.
  • Social platform access tokens are stored encrypted with AES-GCM.
  • When you disconnect a social account, we immediately delete its access token. The publishing records, insights and comments retrieved through it are kept until you delete them or ask us to (see the Data Deletion page).
  • Other data (such as insights, your content and conversations) is kept until you delete it or ask us to delete your account. System backups are kept for at most 30 days.

Your rights

  • You can disconnect any account at any time under Settings (設定) → Social accounts (社群帳號); we then delete its access token (see above), and you can ask us to delete the related data too.
  • You can ask to access, correct or delete your data, or delete your whole account. See the Data Deletion page.

Contact us

Operator: 明星雲有限公司 (MING XING YUN LIMITED), a company registered in Taiwan (Unified Business No. 82893226)
Registered address: Basement No. 752, Basement No. 750-1, Wenxin Rd., Sec. 4, Ping’an Vil., Beitun Dist., Taichung City 406, Taiwan (臺中市北屯區平安里文心路四段750號地下室之1與752號地下室)
If you have any questions about this policy or your data, email: service@staraca.com