Privacy Policy

Last updated: 15 May 2026

Who we are

Busby is a product of Parkor Ltd, a company registered in England and Wales. When this policy refers to “Busby”, “we”, “us” or “our”, it means Parkor Ltd.

For privacy-related questions or requests, contact us at privacy@busby.digital.

What data we collect

Account data — your name, email address, and profile information provided when you sign up via Google OAuth (handled by Clerk).

Business data — your website URL, brand assets (colours, fonts, images), business name, target audience, and campaign objectives that you provide during onboarding.

Campaign data — ad copy, images, videos, budgets, performance metrics, and spend records for campaigns you create and run through Busby.

CRM data — lead contact information, pipeline stages, activity logs, and email engagement data for leads that flow through your Busby account.

Payment data — wallet top-up amounts and transaction history. Card details are handled entirely by Stripe and never stored by Busby.

Usage data — pages visited, features used, and interactions within the Busby dashboard, collected to improve the product.

How we use your data

Providing the service — to run your ad campaigns on Google and Meta, generate AI creative assets, deliver email journeys, and maintain your CRM pipeline.

AI model improvement — with your consent, anonymised and aggregated campaign performance data may be used to improve Busby's AI models. You can withdraw this consent at any time from Settings → Privacy. Enterprise plan accounts have data isolation by default and are never used for training.

Billing — to process wallet top-ups and maintain accurate transaction records via Stripe.

Communications — to send transactional emails (campaign alerts, billing receipts) and, where you have opted in, product updates. You can unsubscribe at any time.

Legal compliance — to comply with applicable law, including UK GDPR and financial regulations.

Legal basis for processing

We process your data on the following legal bases under UK GDPR:

  • Contract — processing necessary to deliver the Busby service you have signed up for.
  • Legitimate interests — improving our product, preventing fraud, and maintaining security.
  • Consent — AI training use of campaign data, and marketing communications. You may withdraw consent at any time.
  • Legal obligation — where we are required to retain data by law.

Third-party services

Busby uses the following sub-processors to deliver the service:

  • Clerk — authentication and user management
  • Stripe — payment processing and wallet top-ups
  • Neon (PostgreSQL) — primary database hosting
  • Cloudflare R2 — file and asset storage
  • Google Gemini / Imagen — AI text and image generation
  • Amazon Web Services (SES) — transactional email delivery
  • Google Ads API — campaign creation and management on Google
  • Meta Marketing API — campaign creation and management on Meta
  • Vercel — application hosting and edge delivery

Each sub-processor is bound by data processing agreements consistent with UK GDPR.

Data retention

We retain your data for as long as your account is active. If you cancel, we delete your personal data within 90 days, except where we are legally required to retain records (e.g. financial transaction records, which are kept for 7 years under UK law).

You can request earlier deletion by emailing privacy@busby.digital.

Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your data (“right to be forgotten”)
  • Portability — receive your data in a machine-readable format
  • Restriction — ask us to limit how we process your data
  • Object — object to processing based on legitimate interests
  • Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, email privacy@busby.digital. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use cookies and similar technologies to operate the service. For full details, see our Cookie Policy.

Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or an in-app notice at least 14 days before they take effect. The date at the top of this page always shows when it was last updated.