BidBudz
Privacy Policy
Last updated: [DATE] · DRAFT v1
⚠ DRAFT — pending attorney review. A starting draft for your lawyer to finalize before launch. Not legal advice. Replace every [bracketed] field and confirm with counsel.
1. Information we collect
- Account info: email address and a PIN (stored only as a securely hashed value — we never see your actual PIN).
- Order info: recipient name, booking/inmate number, and facility mailing address you enter to place an order.
- Transaction history: purchases, gifts, sends, and store orders tied to your account.
- Technical info: IP address and timestamps, used to prevent fraud and abuse (e.g., signup rate-limiting).
- Contact info you provide: an optional email for order updates.
2. Payment information
Card payments are processed by Stripe. BidBudz does not receive or store your full card number. Stripe's handling of your payment data is governed by Stripe's own privacy policy.
3. How we use information
- To operate your account and process purchases, gifts, sends, and store orders.
- To place and address orders with retailers/publishers for shipment to a facility.
- To send you order confirmations and updates (if you provide an email).
- To detect and prevent fraud, abuse, and violations of our Terms or facility rules.
- To comply with legal obligations.
4. How we share information
- Fulfillment partners: retailers/publishers we order from receive the shipping details needed to deliver an item.
- Service providers: infrastructure and tools that run BidBudz (e.g., payment processing, email delivery, hosting, database) process data on our behalf.
- Legal: we may disclose information if required by law or to protect rights, safety, or the integrity of the service.
- We do not sell your personal information.
5. Note about the inmate email channel
Emails sent to and from an incarcerated person through a facility's email system are monitored and recorded by the facility, not by BidBudz, and are not private. Do not send sensitive personal information through that channel. Automated replies note this.
6. Data retention
We keep account and transaction records for as long as your account is active and as needed to provide the service, resolve disputes, and meet legal or recordkeeping requirements. [Confirm retention periods with counsel.]
7. Security
We protect accounts with measures including hashed PINs (PBKDF2 with brute-force lockout), rate-limiting, and access controls. No system is perfectly secure, but we work to safeguard your information.
8. Your choices
You may request access to, correction of, or deletion of your personal information by contacting us at [support@bidbudz.com]. Some information may be retained where required by law. [Confirm state-specific privacy rights, e.g., Texas/CCPA, with counsel.]
9. Children
BidBudz is not intended for anyone under 18, and we do not knowingly collect information from children.
10. Changes
We may update this policy; material changes will be posted here with a new "last updated" date.
11. Contact
Privacy questions: [support@bidbudz.com].