Privacy Policy
Interface Studio, Inc., doing business as Interface Club (“we,” “us,” or “our”), is responsible for the personal information we process through Buoy, other apps and services that link to this policy, and related marketing and events (the “Services”). This policy explains how we collect, use, store, and share that information and your rights. If you disagree with our practices, do not use the Services. Questions: privacy@interface.club.
Summary of key points
We use personal information to operate and improve Buoy, communicate with you, protect users, and meet legal obligations. We do not collect or store your passwords. Connected apps use authorization tokens, which we store to maintain the connections you approve. The sections below explain what we collect, who processes it, how long we keep it, and your choices.
1. What information do we collect?
Personal information you disclose to us
We collect information you provide when you register, use our Services, request information, participate in activities, or contact us. This includes your email address, contact and profile information, and content you submit. Keep your information accurate and tell us when it changes.
Passwords and connected apps. We do not collect or store your passwords. When you authorize a connected app, we store access and refresh tokens so Buoy can access that app within the permissions you grant. These tokens are authorization credentials; they do not give us your password.
Sensitive information. We do not process sensitive personal information, such as racial or ethnic origin, religious beliefs, or sexual orientation.
Sign-in providers. If you sign in through a third-party provider, we receive the profile information it shares with your permission. See third-party sign-ins.
Device permissions. With your permission, we may access location (continuously or while using the app), reminders, microphone, camera, calendar, contacts, and other device features, or send account and feature notifications. Change these permissions or turn off notifications in your device settings. Disabling access may limit related features.
Information automatically collected
We automatically collect technical information to operate and secure the Services, troubleshoot problems, and understand usage:
- Logs and usage: activity timestamps, pages and files viewed, searches, features used, performance, system events, errors, crash reports, and settings.
- Device and network: IP or proxy address, device and app identifiers, model and manufacturer, hardware and system configuration, operating system, browser and versions, language, referring URLs, country, internet provider, mobile carrier, and phone network.
- Location: approximate location from your IP address and, with permission, precise location from GPS or other device technologies. You can refuse or disable location access, although some features may become unavailable.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
2. How do we process your information?
We use your information to create, authenticate, and manage accounts; deliver requested services; respond to support requests; send administrative, product, and policy updates; request feedback; analyze usage and improve the Services; prevent fraud and maintain security; comply with law; and protect people from harm. Other purposes require your prior explicit consent.
3. What legal bases do we rely on to process your information?
EU and UK. We rely on consent, which you may withdraw; performance of a contract or steps you request before entering one; legitimate interests in understanding and improving our Services, where these do not override your rights; legal obligations, including regulatory cooperation and legal claims; and vital interests, such as protecting someone's safety.
Canada. We rely on express or legally permitted implied consent, which you may withdraw. Where the law permits, we may process information without consent for:
- Urgent individual interests when consent cannot be obtained; identifying injured, ill, or deceased people and contacting next of kin; or suspected financial abuse.
- Investigations, fraud prevention, or investigating breaches of agreements or law where seeking consent would compromise evidence.
- Qualifying business transactions; witness statements needed for insurance claims; or compliance with subpoenas, warrants, court orders, and disclosure rules.
- Information produced through employment, business, or professional work and used consistently with that purpose; solely journalistic, artistic, or literary purposes; or publicly available information specified by regulation.
- Disclosure of de-identified information for approved research or statistics, with ethics oversight and confidentiality commitments.
4. When and with whom do we share your personal information?
We may share information with service providers under written contracts, including the AI providers below, to deliver the Services. We may also share or transfer information during negotiations for, or completion of, a merger, asset sale, financing, or acquisition of all or part of our business, and as permitted by the legal bases above.
5. Do we offer artificial intelligence-based products?
Buoy uses AI for scheduled tasks, applications, and search. Providers include Anthropic, OpenAI, Google Cloud AI, and Perplexity. We share inputs, outputs, and relevant personal information with these providers to deliver those features, under this policy, our agreements with them, and the legal bases above. Your use must also comply with the providers' terms and policies.
6. How do we handle your social logins?
If you register or sign in through a third-party provider, we may receive your name, email, profile picture, and other profile information you authorize, depending on the provider and your settings. We use it only for purposes described here or explained when you sign in. We do not receive or store your password. The provider controls its own data practices; review its privacy policy and settings.
7. How long do we keep your information?
We retain personal information only as long as needed for the purposes in this policy, generally while you have an account, unless law requires or permits longer retention, such as for tax or accounting records. Account-deletion exceptions are described below. When information is no longer needed, we delete or anonymize it. If immediate deletion is impractical, including in backups, we securely isolate it from further processing until deletion is possible.
8. How do we keep your information safe?
We use reasonable technical and organizational safeguards to protect personal information. No transmission or storage system is completely secure, and we cannot guarantee against unauthorized access, theft, or alteration. Transmission is at your own risk; use the Services in a secure environment.
9. Do we collect information from minors?
The Services are for adults aged 18 or older, or the higher age required in your jurisdiction. We do not knowingly collect or solicit children's information, market to children, or sell their information. If we discover an underage account, we will deactivate it and take reasonable steps to promptly delete its data. Report concerns to privacy@interface.club.
10. What are your privacy rights?
Depending on your location, including the EEA, UK, Switzerland, and Canada, you may have rights to access and obtain a copy of your information, correct or delete it, restrict or object to processing, obtain a portable copy, and challenge decisions made solely by automated means. For automated decisions with legal or similarly significant effects, we will explain the main factors and provide a way to request human review. We handle requests under applicable law.
Consent. Contact us to withdraw express or implied consent at any time. Withdrawal does not affect earlier lawful processing or processing based on another lawful ground.
You may complain to your EEA data protection authority, the UK Information Commissioner's Office, or the Swiss Federal Data Protection and Information Commissioner.
Account Information
To review, change, or close your account, or ask about your rights, email privacy@interface.club. On closure, we deactivate or delete your account and information from active databases. We may retain information as needed to prevent fraud, troubleshoot, assist investigations, enforce our terms, or meet legal requirements.
11. Controls for Do-Not-Track features
We do not currently respond to browser or device Do-Not-Track (DNT) signals because there is no uniform implementation standard. This statement also provides our California DNT disclosure. If a standard we must follow is adopted, we will update this policy. This does not limit your opt-out rights under applicable law.
12. Do United States residents have specific privacy rights?
State law may give residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia additional privacy rights, subject to legal limits and exceptions.
Categories of Personal Information We Collect
The table summarizes collection in the past 12 months. Examples illustrate each category, not every item we collect; see Information we collect for details.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, alias, address, phone, email, account name, IP address, and other identifiers | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | NO |
| C. Protected classification characteristics under state or federal law | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | NO |
| G. Geolocation data | Device location | YES |
| H. Audio, electronic, sensory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contacts, job title, work history, and qualifications | NO |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Profiles of preferences or characteristics | YES |
| L. Sensitive personal Information | NO |
We may also collect information through support, surveys, contests, service delivery, and enquiries, whether in person, online, by phone, or by mail. We retain categories A, G, and K while you have an account, subject to the retention rules and exceptions above.
Sources of Personal Information
Information comes from you, your device and use of the Services, and providers or apps you authorize, as described in Information we collect.
How We Use and Share Personal Information
See How we use information and Sharing for purposes and recipients. These include internal research and technological development, and service providers working under written contracts. We do not sell personal information or share it for cross-context behavioral advertising, and have not done so in the past 12 months. Service-provider disclosures described above are separate from those practices.
Your Rights
Subject to applicable state law, you may:
- Know whether we process your data; access it; correct inaccuracies; request deletion; and obtain a copy of data you provided.
- Exercise rights without discrimination and withdraw consent where applicable.
- Opt out of sale, targeted advertising (including sharing under California law), or profiling for decisions with legal or similarly significant effects.
- Obtain categories of data processed (including in Minnesota), categories of recipients (including in California, Delaware, and Maryland), specific recipients (including in Minnesota and Oregon), or third parties to whom data was sold (including in Connecticut).
- Review, understand, question, and, where available, correct profiling (including in Connecticut and Minnesota).
- Limit sensitive-data use and disclosure (including in California), or opt out of collection of sensitive data and data from voice or facial recognition (including in Florida).
How to Exercise Your Rights
Email privacy@interface.club or use our postal address. Where allowed, an authorized agent may act for you with proof of authority; we may decline requests without that proof.
Request Verification
We verify your identity and any agent's authority before acting. Information submitted with a request is used only for verification; if existing records are insufficient, we may request additional information for verification, security, or fraud prevention. Agents must provide your signed written permission, and we may also verify your identity directly.
Appeals
Where state law permits, appeal a declined request at privacy@interface.club. We will explain our decision and any action in writing. If an appeal is denied, you may complain to your state attorney general.
13. Do other regions have specific privacy rights?
You may have additional rights where you live.
Australia and New Zealand
We process information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This policy describes the information, sources, purposes, and recipients. Without necessary information, we may be unable to provide products or services, answer requests, manage your account, verify your identity, or protect your account.
Contact us to request access or correction. You may complain about privacy breaches to the Office of the Australian Information Commissioner or the New Zealand Privacy Commissioner.
Republic of South Africa
Contact us to request access or correction. If our response to a privacy complaint is unsatisfactory, contact South Africa's Information Regulator: enquiries@inforegulator.org.za for enquiries, or PAIAComplaints@inforegulator.org.za and POPIAComplaints@inforegulator.org.za for complaints using the applicable form.
14. Do we make updates to this notice?
We may revise this policy, including to reflect legal requirements, and update the date above. For material changes, we may post a prominent notice or notify you directly. Please review it periodically.
15. How can you contact us about this notice?
Email privacy@interface.club or write to Interface Studio, Inc., 576 Sacramento St, Floor 7, San Francisco, CA 94111, United States.
16. How can you review, update, or delete the data we collect from you?
To request access, processing details, correction, deletion, or withdrawal of consent, email privacy@interface.club. Requests are subject to applicable rights and legal exceptions described above.
This policy was adapted from Termly's Privacy Policy Generator.