BuddhaSquads

Privacy Policy

Effective: 19 June 2026

Growspot Ltd. (BuddhaSquads) is committed to protecting personal data. Processing is carried out under the General Data Protection Regulation (GDPR) and the UK GDPR. Below we summarise what data we process, for what purposes and on what legal basis.

1. Data controller

Provider: Growspot Ltd. (trading as BuddhaSquads)

Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Company No.: 16675543

Contact: benjamin.vass@buddhasquads.com

2. Categories of personal data

Contact and account data (name, email, company details), billing data, login and usage data (logs, technical data), and the content you input into the platform.

3. Purposes and legal basis

Performance of the contract and account management under GDPR Art. 6(1)(b); invoicing and legal obligations under Art. 6(1)(c); security and improvement of the service under Art. 6(1)(f) (legitimate interest); any marketing under Art. 6(1)(a) (consent).

4. Processors and recipients

Processors used: the AI providers used for processing (Anthropic PBC and OpenRouter), the hosting and infrastructure provider (EU/EEA region), Cal.com (booking) and Google Workspace (email and communication). Data processing agreements (DPAs) are in place with these processors. Invoicing is handled by bank transfer through a separate billing provider.

5. International data transfers

The controller is in the UK; some customers are in the EU. EU-UK transfers rely on the European Commission adequacy decision. US-bound transfers (Anthropic, OpenRouter) take place under approved safeguards, namely the Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.

6. Data retention

We keep personal data only as long as necessary for the purpose; billing and accounting data for the period required by accounting law (8 years); contract and contact data until the general limitation period after termination (5 years); support and communication data for 2 years; technical logs for 12 months; data processed on the basis of marketing consent until that consent is withdrawn.

7. Data subject rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and to withdraw consent at any time. Exercise these at the contact address.

8. Cookies

The website may use cookies for operation and measurement. Non-essential cookies are only activated with consent.

9. Complaints and remedies

You may lodge a complaint with a supervisory authority: in Hungary the National Authority for Data Protection and Freedom of Information (NAIH), in the UK the Information Commissioner's Office (ICO). Data subjects in Hungary may primarily contact the NAIH. For questions, reach us at the contact address above.

We may update this document from time to time; the current version in force is always available on this page. For questions, reach us at the contact details above.