Privacy Policy

Last Updated: September 1, 2026 · Version 1.0

1. Introduction

At Sentiment Lens, operated by BuddyPig ("we", "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our service at sentimentlens.buddypig.com (the "Service"). By using the Service, you agree to this Policy; we will notify material changes in advance by email or an in-service notice.

2. Information We Collect

We follow a minimal data collection approach. Depending on how you use the Service, we may process:

• Account information — email address and sign-in credentials, managed by our authentication provider (auth.ReplyPin); passwords are never visible to us in plain text.
• Letter text you submit: the content of the letter you paste into the Service to generate a HeartRead Report. This text is processed in real time to produce your report and is not persistently stored by the Service.
• Payment information — transaction amounts and payment status; we never see or store full card numbers (see Section 4).
• Communications — emails and feedback you send to support.
• Technical data — IP address, device and browser type, usage and error logs, collected automatically.

We use only strictly-necessary cookies/storage (sign-in session). We do not use analytics or advertising cookies, do not use third-party analytics tools, and do not collect precise location information.

3. How We Use Information

We use processed information to:

• Provide and maintain the Service — including transmitting your letter text to a third-party AI model provider in real time to generate your report
• Process billing and payments
• Provide customer support
• Send service notices (billing, security, policy updates)
• Maintain security and prevent fraud
• Comply with legal obligations

Legal bases: performance of a contract, legitimate interests, and legal obligations. We do not currently send marketing communications; if we ever do, they will be opt-in with a one-click unsubscribe.

4. How Data Is Shared

We do not sell your personal information. We share limited data only with the service providers that help us operate the Service, bound by confidentiality obligations:

• ReplyPin (auth.ReplyPin / order.ReplyPin) — account authentication and credit-wallet management.
• Waffo Pancake — our PCI-DSS-compliant payment processor. Payment card data is processed exclusively by Waffo Pancake and is never stored on our servers.
• Third-party AI model providers — the letter text you submit is transmitted in real time to a large language model provider solely to generate your report. We do not retain this text after processing.
• Tencent Cloud EdgeOne — hosting and content delivery.

We may also disclose data where required by law, in a merger or acquisition (with continuity of protection), or otherwise only with your explicit consent.

5. Data Retention

We retain data only as long as needed: letter text you submit is discarded immediately after report generation; account data is kept while your account is active and deleted within 90 days of account deletion; transaction records are kept as required by law (typically 5 years); support correspondence for 2 years; security logs for 12 months.

6. Security Measures

We protect data with TLS/HTTPS encryption in transit, encrypted or hashed credentials (via our authentication provider), and least-privilege access control. Submitted letter text is processed in memory and discarded after your report is generated. If a security incident affects your rights, we will notify you and the relevant regulators as required by law, within 72 hours of discovery where applicable.

7. Your Rights

Subject to applicable law, you may request to: access or receive a copy of your data; correct inaccurate information; delete eligible data; restrict or object to processing; export your data in a machine-readable format; and withdraw consent at any time. Email support@buddypig.com — we respond within 30 calendar days. Some information may be retained for security, fraud-prevention, tax, or legal-compliance purposes. You may also lodge a complaint with your local data-protection authority.

8. International Data Transfers

Our servers and partners may be located outside your country, including Singapore, China, and the United States. Cross-border transfers are safeguarded through data-processing agreements incorporating the EU Standard Contractual Clauses (SCCs) or equivalent protections.

9. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect information from anyone below this age; contact us and we will delete it promptly.

10. Changes & Contact

For material changes to this Policy, we will notify you at least 15 days in advance via an in-service notice or your registered email, and update the "Last Updated" date above. Privacy questions and rights requests: support@buddypig.com (BuddyPig; service hours Monday–Friday, 09:00–18:00 UTC+8).

BuddyPig · sentimentlens.buddypig.com