If you are a visitor to this site or a Buzzmax client, Buzzmax is the controller of your personal information and this policy governs it directly.
If you receive a text message from Buzzmax, Buzzmax, operated by JMatsu Holdings LLC, is responsible for your phone number and your consent record. Send privacy requests to team@buzzmax.ai and we will act on them. Section 17 explains how requests about business customer data are handled.
1Who we are
JMatsu Holdings LLC, a Utah limited liability company, doing business as Buzzmax, of 1018 N 985 W, Orem, Utah 84057. Privacy contact: team@buzzmax.ai.
2What we collect
From visitors to buzzmax.ai
- Identifiers you give us: your name, business name and work email address, and the number of locations you run, when you request a demo.
- Technical data: IP address, browser and device type, pages viewed, and referring page.
From clients
- Business and billing contact details, account credentials, and the business profile information needed to perform the services.
- Payment details, which are collected and stored by our payment processor, not by us.
From customers of businesses that use Buzzmax
- Name and mobile telephone number, and where supplied an email address and location, supplied to Buzzmax by the business.
- The star rating selected, and any free-text feedback submitted.
- Message delivery status and opt-out status.
From people who use our public text message opt-in form
- Mobile telephone number, the business you named, and your name if you give it.
- Which text messages you chose, the exact wording shown, the version of that wording, the date and time, your IP address and your browser's user agent. We keep these to show that you consented.
From public review sites
- Reviews of the client's business on Google, Yelp, BBB, Trustpilot and ConsumerAffairs: the reviewer name as shown, the rating and the review text.
3Why we process it
| Category | Purpose |
|---|---|
| Visitor email and enquiry details | To reply to your demo request and to send a booking invitation. |
| Client contact and billing data | To provide the services, invoice, and support the account. |
| End customer name, number, email and location | To send the review request text you asked for or the business requested. |
| Rating and feedback text | To pass the rating and any private feedback to the client. |
| Public review data | To show the client its reviews, to draft replies to its eligible 4 and 5 star Google reviews, and to check new Google reviews for low ratings and flag them to our team, or to the client if it has chosen to receive them. |
| Opt-out status | To stop messaging a recipient who has opted out, and to keep them suppressed. |
| Technical data | To keep the site secure and working. |
We do not use any of it for automated decision making that produces legal or similarly significant effects, and we do not profile visitors for advertising.
4How long we keep it
| Category | Retention |
|---|---|
| Enquiry and demo request data | 24 months from your last contact with us |
| Client account and billing records | 7 years, because tax records require it |
| End customer contact data | 24 months from the date the client supplied it, or 30 days after the client leaves, whichever comes first |
| Ratings and feedback text | 24 months from the date it was submitted, or 30 days after the client leaves, whichever comes first |
| Text message opt-in records from our public form | For as long as your number can be messaged under that consent, and afterwards for as long as we need them to show that you consented, or that you stopped it |
| Opt-out and suppression records | Kept indefinitely, because we must not message someone again |
| Message delivery logs | 12 months |
| Review text sent to a model provider for reply drafting | Not retained by the provider. Our copy follows the ratings and feedback row above. |
If these periods change, this table changes.
5Who we share it with
We disclose personal information to the categories of recipient below, and to no one else except where the law requires it.
- Our subprocessors. The named list, with what each one does, is published on our Security page and kept current.
- The business that uses Buzzmax and whose customer you are, which is the whole point of holding it.
- Professional advisers and authorities, where we are legally required to disclose.
6Text messages: where numbers come from
We do not buy, rent or scrape mobile numbers. A number reaches us in one of two ways: you give it to us through the opt-in form on our Terms & Conditions (SMS Terms) page, where you choose which optional texts you want and we record that you did, or the business you deal with supplies it to us. Texts are sent by Buzzmax, operated by JMatsu Holdings LLC, and each message names the business it concerns.
7Text messages: we do not share your number
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Mobile information and SMS consent are never shared with or sold to third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party except the subprocessors that deliver the message on our behalf, which are listed on our Security page and may not use the data for their own purposes.
8Text messages: opting out, help, frequency and rates
- Reply STOP to any message to opt out, though you do not have to use that word: see section 9. Reply HELP for help, or contact the business that sent it.
- Message frequency depends on which program messaged you. A review request is exactly one message after the business adds you to its customer list; we do not send a reminder. A missed-call reply is at most one message per six hours, sent only after a call you placed goes unanswered. Appointment, invoice and service visit texts vary with your appointments, invoices and visits, and you receive only the types you opted in to. Buzzmax Messaging, where a business has it, only replies to a text you send the business first, and is capped at a few replies per text and a handful of messages per day. Full detail for each program is on our Terms & Conditions (SMS Terms) page.
- Message and data rates may apply.
- Carriers are not liable for delayed or undelivered messages.
9Text messages: how we handle revocation
You may revoke consent in any reasonable manner and in any medium. We do not designate an exclusive method, and we do not require a particular word. We honor revocation immediately in practice and in no event later than ten business days. At most one confirmation message follows, within five minutes, and it contains no marketing content.
10Text messages: when we send
Review requests go out when the business asks for them to go out. There are two hard limits on that, and we enforce both:
- Only between 9:00 a.m. and 8:00 p.m. in the recipient's local time, a narrower window than the federal limit in 47 CFR 64.1200(c)(1).
- Never on a Sunday, a federal holiday or a Utah state holiday (Utah Code 13-25a-103(3)).
A send that would break either limit is blocked, not delivered late and not delivered anyway.
11Email
Where we send email, it carries accurate headers and a subject line that reflects the contents, identifies itself as an advertisement where it is one, gives our valid physical postal address, and carries an opt-out that stays live for at least 30 days, is honored within ten business days, is free, and asks for nothing beyond your email address.
12Cookies and analytics
buzzmax.ai sets no cookies, runs no analytics, and carries no advertising or tracking pixels. Nothing on this site follows you anywhere, and we have no advertising relationships with anyone.
The only third-party requests the site makes are to Google Fonts, for the typeface, and to Calendly, only when you open the booking calendar. Calendly may set its own cookies inside that calendar, under its own privacy policy. If we ever add analytics, this section and the Do Not Sell or Share page both change first.
13Do Not Track and other browser signals
Because we run no tracking, there is nothing here to opt out of. We do not respond differently to a Do Not Track header, for the simple reason that we are not tracking you either way. No third party conducts cross-site tracking on buzzmax.ai.
If that ever changes, we will honor the Global Privacy Control and other opt-out preference signals, as described on our Do Not Sell or Share page.
14We do not sell or share your personal information
Buzzmax does not sell personal information, and does not share it for cross-context behavioral advertising, as those terms are defined in California law. See Do Not Sell or Share My Personal Information.
15Your rights and how to use them
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to obtain a portable copy, to opt out of sale, sharing or targeted advertising, and to appeal a refusal.
To make a request, either email team@buzzmax.ai or use the form at /do-not-sell. You do not need an account, and we will not ask for more information than we need to find your records and confirm it is you.
16How quickly we respond
- We confirm receipt within ten business days.
- We action an opt-out request within fifteen business days.
- We answer other requests within 45 days, extendable once by a further 45 days where the request is complex, with notice to you.
- Appeals are answered within 45 days in Virginia, Colorado and Texas, and within 60 days in Connecticut.
17If you are a customer of one of our clients
Where we hold your information on a business's behalf, that business decides what happens to it, and your request should go to them. If you send it to us instead, we will forward it to them within five business days and tell you we have done so. We will also stop messaging you immediately, whatever else happens.
18Free-text feedback and sensitive information
Where the services include a private feedback box, whatever you type goes straight to the business you dealt with, unchanged. We do not read it, analyse it, or use it for anything else. Please do not put health information, information about being the victim of a crime, or other sensitive personal information into it.
We do not solicit sensitive personal information and we do not process it deliberately. If a customer volunteers it in free text, it is passed through to the business and deleted on the schedule in section 4 like anything else.
19Large language models
Buzzmax does not collect, use, sell or share personal data for the purpose of training a large language model, and does not permit any vendor to train on data we send it.
Where we use a language model to draft a review reply, the review text is sent to Cerebras, with OpenRouter as a fallback when Cerebras is unavailable. Both are United States companies.
We require both providers to process that text without training on it and to delete it after processing, and we configure our account with each of them accordingly. We route only to endpoints that do not train on request data, and free endpoints that train on prompts are disabled on our account.
20State-specific notes
Buzzmax is a small business. Most state privacy statutes apply only above revenue or volume thresholds that we are below, and we say that rather than reciting rights we are not subject to. Where a statute applies to us regardless of size, it is listed here.
- California. This policy is published under Cal. Bus. & Prof. Code 22575, which applies to any commercial website collecting personal information from California residents, with no threshold. We are not currently a "business" as the CCPA defines it, and we do not claim to be.
- Nevada. A Nevada consumer may direct us not to sell covered information using the address on our Do Not Sell or Share page. We respond within 60 days, extendable once by 30 days with notice.
- Connecticut. From 1 July 2026 Connecticut applies to a controller processing sensitive data regardless of volume. We do not solicit or deliberately process sensitive data, as described in section 18, and we pass free-text feedback through to the business without reading it. We do not believe we are in scope. If our handling of free text changes, this line changes.
- Utah, Virginia, Colorado, Texas. Each of these statutes applies only above revenue or volume thresholds that Buzzmax is below. The Utah Consumer Privacy Act, for example, applies to a controller with at least $25,000,000 in annual revenue that also meets a volume test. We are under every one of them and do not claim to be in scope. If we cross one, this section gets rewritten before we do.
21Security
We describe our safeguards on the Security page, so that there is one place to keep current rather than two that can drift apart.
22If there is a breach
If we confirm a breach of system security affecting personal information, we will investigate in good faith, notify affected individuals and any required authority in the most expedient time possible and without unreasonable delay, and notify affected clients without undue delay and in no event later than 72 hours after confirmation.
23International transfers
Every subprocessor we use is based in the United States and stores data in the United States, except two that fetch public reviews of our clients' businesses: DataForSEO, based in Estonia, and Apify, based in the Czech Republic. We send those two no personal information. What they handle is the public reviews they fetch, including the reviewer name as shown. Apart from that, we do not transfer personal information outside the US.
24Children
The services are for businesses. They are not directed to children, and we do not knowingly collect personal information from anyone under 13.
25Changes to this policy
If we make a material change, we will post the revised policy here with a new effective date and notify account holders by email to their billing contact at least 30 days before it takes effect. Changes that are not material take effect on posting.
26Contact
Privacy questions and requests: team@buzzmax.ai, or JMatsu Holdings LLC, 1018 N 985 W, Orem, Utah 84057.