Last updated: Jan 02, 2026
This policy explains how the SonarBuzz trend intelligence platform collects, uses, and safeguards customer data across the SaaS service.
Account data—name, email address, workspace metadata, and billing contact details supplied during signup or via support.
Event telemetry—metrics, KPIs, and contextual payloads you stream into SonarBuzz. Customers remain controllers of this data; we act as processors.
Product analytics—usage diagnostics (feature clicks, page timing) collected to improve reliability; these are aggregated and never sold.
Customer event data is retained for the lifetime of the workspace plus 30 days unless a shorter retention window is configured. Backups are encrypted at rest using AES-256 and stored in EU + US regions.
Access to production systems is restricted through SSO + MFA, audited quarterly, and logged centrally. We maintain SOC 2-aligned controls and run continuous vulnerability scanning.
We rely on vetted infrastructure partners (cloud hosting, email delivery, customer support). Each subprocesser signs DPAs that mirror GDPR/CCPA obligations. Cross-border transfers use Standard Contractual Clauses.
Depending on your jurisdiction you can request access, correction, deletion, or export of personal data. Reach us at privacy@sonarbuzz.com. We will respond within 30 days.
Questions about this policy or our security posture can be sent to security@sonarbuzz.com. Urgent incidents should be reported through the in-app support channel.