Privacy Policy
Effective: 19 June 2026
Growspot Ltd. (BuddhaSquads) is committed to protecting personal data. Processing is carried out under the General Data Protection Regulation (GDPR) and the UK GDPR. Below we summarise what data we process, for what purposes and on what legal basis.
1. Data controller
Provider: Growspot Ltd. (trading as BuddhaSquads)
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Company No.: 16675543
Contact: benjamin.vass@buddhasquads.com
2. Categories of personal data
Contact and account data (name, email, company details), billing data, login and usage data (logs, technical data), and the content you input into the platform.
3. Purposes and legal basis
Performance of the contract and account management under GDPR Art. 6(1)(b); invoicing and legal obligations under Art. 6(1)(c); security and improvement of the service under Art. 6(1)(f) (legitimate interest); any marketing under Art. 6(1)(a) (consent).
4. Processors and recipients
Processors used: the AI providers used for processing (Anthropic PBC and OpenRouter), the hosting and infrastructure provider (EU/EEA region), Cal.com (booking) and Google Workspace (email and communication). Data processing agreements (DPAs) are in place with these processors. Invoicing is handled by bank transfer through a separate billing provider.
5. International data transfers
The controller is in the UK; some customers are in the EU. EU-UK transfers rely on the European Commission adequacy decision. US-bound transfers (Anthropic, OpenRouter) take place under approved safeguards, namely the Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.
6. Data retention
We keep personal data only as long as necessary for the purpose; billing and accounting data for the period required by accounting law (8 years); contract and contact data until the general limitation period after termination (5 years); support and communication data for 2 years; technical logs for 12 months; data processed on the basis of marketing consent until that consent is withdrawn.
7. Data subject rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and to withdraw consent at any time. Exercise these at the contact address.
8. Cookies
The website may use cookies for operation and measurement. Non-essential cookies are only activated with consent.
9. Complaints and remedies
You may lodge a complaint with a supervisory authority: in Hungary the National Authority for Data Protection and Freedom of Information (NAIH), in the UK the Information Commissioner's Office (ICO). Data subjects in Hungary may primarily contact the NAIH. For questions, reach us at the contact address above.
We may update this document from time to time; the current version in force is always available on this page. For questions, reach us at the contact details above.