Privacy Policy

Last updated: April 2026

Buena Onda AI (“Buena Onda,” “we,” “us,” or “our”) is a Michigan-based company located in Warren, MI (Macomb County). We operate the Buena Onda platform available at buenaonda.ai (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. By using the Service, you agree to the practices described in this policy. This Privacy Policy is incorporated into and subject to our Terms of Service.

1. Information We Collect

Account information. When you sign up through Clerk (our authentication provider), we collect your email address, name, profile image, and any other details you provide during registration or subsequently add to your account.

Ad account data. With your explicit authorization, we access your ad account data from Meta Ads and Google Ads (including but not limited to ad spend, leads, ROAS, campaign details, keywords, ad groups, conversion data, and audience information) via their respective APIs. We access only the permissions you grant and only to provide the Service.

Workspace notifications. If you connect Slack, we send campaign alerts, performance reports, and notifications to your designated Slack channels. We do not read or store your Slack messages.

WhatsApp data. If you interact with Buena Onda via WhatsApp, we process your incoming messages to generate AI-powered responses about your campaign performance and ad strategy. We store your WhatsApp phone number to route messages to your account. Knowledge base rules and benchmarks you submit via WhatsApp are stored and applied to your campaign optimization.

Google Calendar data. If you connect Google Calendar, we access your calendar data solely to schedule and manage meetings, reminders, and campaign-related events. We do not access calendar events unrelated to the Service beyond what is necessary for scheduling.

Usage data. We collect information about how you interact with the Service, including pages visited, features used, actions taken (e.g., campaigns reviewed, reports generated), browser type, device information, IP address, and referring URLs.

Payment information. Payments are processed by Stripe. We do not store your credit card number, bank account details, or other sensitive financial data. Stripe handles all payment data in accordance with PCI-DSS standards. We receive and store only your subscription plan, billing status, and transaction history from Stripe.

Communications. If you contact us for support, submit feedback, or correspond with us via email or any other channel, we retain those communications and any information you provide in them to respond to you and improve the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, maintain, and improve the Service
• To generate AI-powered campaign analysis, recommendations, alerts, automated optimizations, and reports based on your ad account data
• To process your ad account data through our AI systems (powered by Claude, developed by Anthropic) for campaign optimization and strategic recommendations
• To send transactional emails (reports, alerts, account notifications, billing receipts)
• To process payments, manage subscriptions, and administer free trials
• To respond to support requests and provide customer service
• To detect, prevent, and address fraud, abuse, security issues, and technical problems
• To comply with legal obligations and enforce our Terms of Service
• To communicate with you about updates, new features, or changes to the Service

We do not sell your personal information or your ad account data to third parties. We do not use your data for advertising purposes unrelated to the Service.

3. AI Data Processing

Buena Onda uses artificial intelligence (specifically Claude, developed by Anthropic) to analyze your ad campaign data and generate recommendations, optimizations, reports, and conversational responses. Your ad account data, campaign metrics, and contextual information may be transmitted to Anthropic's API for processing. Anthropic does not use data submitted via their API to train their models.

AI-generated outputs are provided as recommendations and should not be treated as guaranteed results. You retain full control and responsibility over all campaign decisions. For more details, see our Terms of Service.

4. Meta API Data

Buena Onda accesses Meta Ads data solely to provide the Service features you request. We do not use Meta user data to train AI models, share it with advertisers, or use it for any purpose unrelated to the Service. Data accessed through the Meta Marketing API is used only to display your own ad performance, generate your own reports, and power AI recommendations for your own accounts.

You may revoke Buena Onda's access to your Meta account at any time from your Meta Business Settings.

5. Google Ads API Data

Buena Onda accesses Google Ads data solely to provide the Service features you request, including campaign creation, budget management, performance reporting, and automated optimization. We do not use Google Ads data to train AI models, share it with third-party advertisers, or use it for any purpose unrelated to the Service.

Data accessed through the Google Ads API — including campaign metrics, keyword performance, ad group data, conversion tracking, and cost data — is used only to display your own ad performance, generate your own reports, and power AI-driven optimization for your own accounts.

Buena Onda's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You may revoke Buena Onda's access to your Google Ads account at any time from your Google Account permissions page.

6. Slack Integration

If you connect Slack, Buena Onda sends campaign alerts, performance summaries, and notifications to your designated Slack channels. We do not read, store, or process your Slack messages or any data beyond what is necessary to deliver notifications.

You may revoke Buena Onda's access at any time from your Slack workspace settings under “Manage Apps.”

7. WhatsApp Integration

Buena Onda uses the Meta WhatsApp Business API to provide an AI-powered conversational assistant. If you interact with Buena Onda via WhatsApp, we process your incoming messages to generate responses about your campaign performance, agent actions, and ad strategy. Messages are processed in real time by our AI and are not stored long-term beyond what is necessary to deliver the response and maintain conversation context.

You may also submit knowledge base rules and benchmarks via WhatsApp, which are stored in our database and applied to your future campaign optimization. These can be reviewed and removed from your dashboard at any time.

Your WhatsApp phone number is stored in association with your account to route messages correctly. We do not share your phone number or message content with third parties. WhatsApp message delivery is governed by Meta's WhatsApp Business Terms of Service.

8. Google Calendar Integration

If you connect Google Calendar, Buena Onda accesses your calendar data solely to create, update, and manage events related to your ad campaigns and the Service (such as scheduled reports, review meetings, and optimization reminders). We do not access, modify, or delete calendar events unrelated to the Service.

You may revoke Buena Onda's access at any time from your Google Account permissions page.

9. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service providers. We share data with third-party service providers who help us operate the Service (listed in Section 13), solely for the purposes of providing the Service to you.
• Legal requirements. We may disclose your information if required by law, regulation, subpoena, court order, or other governmental request.
• Protection of rights. We may disclose information to protect and defend the rights, property, or safety of Buena Onda, our users, or the public.
• Business transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent. We may share your information for other purposes with your explicit consent.

10. Data Retention

We retain your account and ad data for as long as your account is active or as needed to provide the Service to you. If you cancel your account, we will delete your personal data and ad account data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

Aggregated, anonymized data that cannot reasonably be used to identify you may be retained indefinitely for analytics and product improvement purposes.

11. Data Security

We use industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/SSL) and at rest
• Role-based access controls and least-privilege access principles
• Encrypted storage of all third-party access tokens (Meta, Google, Slack)
• Regular security reviews and monitoring
• Hosted on Vercel with enterprise-grade infrastructure security

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authenticate your identity
• Remember your preferences and settings
• Understand how you use the Service (analytics)
• Attribute referrals for our affiliate program

You can disable cookies in your browser settings, though some features of the Service may not function correctly without them. We do not use cookies for third-party advertising or tracking across other websites.

13. Third-Party Services

We use the following third-party services to operate the platform:

• Clerk — authentication and user management
• Stripe — payment processing and subscription management
• Neon — database hosting (PostgreSQL)
• Vercel — hosting and infrastructure
• Anthropic (Claude) — AI language model processing for campaign analysis and recommendations
• Meta — Meta Ads API and WhatsApp Business API integration
• Google — Google Ads API and Google Calendar API integration
• Slack — workspace notifications

Each provider processes data in accordance with their own privacy policies. We encourage you to review the privacy policies of these third-party services.

14. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. All users may:

• Access your personal information that we hold
• Correct inaccurate or incomplete personal information
• Delete your personal information and account
• Export your data in a portable format
• Revoke third-party integrations (Meta, Google, Slack) at any time

To exercise any of these rights, email us at support@buenaonda.ai. We will respond within 30 days (or sooner if required by applicable law).

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete. You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct. You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing. We do not sell or share your personal information for cross-context behavioral advertising purposes. Because we do not sell or share your data, there is no need to opt out.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.
• Right to Limit Use of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes beyond what is necessary to provide the Service.

Categories of personal information we collect: Identifiers (name, email, IP address, WhatsApp phone number), commercial information (subscription and billing records), internet or electronic network activity (usage data, interactions with the Service), and professional information (ad account data, campaign performance metrics).

How to submit a request: California residents may submit a verifiable consumer request by emailing support@buenaonda.ai. We will verify your identity before processing your request and respond within 45 days. You may also designate an authorized agent to submit a request on your behalf.

Financial incentives: We offer a 14-day free trial to all new users. This trial does not require you to provide more personal information than what is required for a paid subscription. The value of the free trial is based on the cost of providing the Service.

16. Other State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their data, and to opt out of targeted advertising, profiling, and sale of personal data. We do not sell your data or engage in targeted advertising or profiling as defined by these laws. To exercise your rights, email us at support@buenaonda.ai.

17. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected personal information from a child under 16, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us at support@buenaonda.ai.

18. Do Not Track Signals

Some web browsers transmit “Do Not Track” (DNT) signals. Because there is no industry-standard interpretation of DNT signals, we do not currently alter our data collection and use practices based on DNT signals. We do not track users across third-party websites.

19. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

20. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Service at least 14 days before changes take effect. The “Last updated” date at the top of this page indicates the most recent revision. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

21. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Buena Onda AI
Warren, MI 48088
Email: support@buenaonda.ai