Draft, pending legal review
Privacy
Last updated 10 October 2026
This page explains, in plain words, what BusyBeaver stores, where it is stored, who else handles it and how long it is kept. "BusyBeaver" here means the app at app.busybeaver.io. A "customer" is the company that signs up and invites its people.
What is stored, and where
| Where | What |
|---|---|
| Postgres hosted by Supabase (AWS, US West), a database of its own, separate from sign-in | Notes (messages people type, documents, records and BusyBeaver's own answers), rooms and their members, people's names and email addresses, roles, invites, approvals, sign-in sessions (stored only as a fingerprint) and the audit log. |
| Supabase (sign-in) | Your email address and a user id. Sign-in only proves that you own the email address; it never reads notes. |
| Your browser | BusyBeaver's session cookie, which keeps you signed in. It cannot be read by page scripts and expires after 7 days. |
| Application logs (Google Cloud) | Ids, counts, timings and error codes. Never note text, prompts or model replies. |
What the model provider receives
To write an answer in a room, the model provider receives the question and only the notes everyone present may see. To write a private follow-up for one person, it receives, in a separate request, only notes that person may see. Notes that fail these checks are never sent. The customer chooses the model provider.
Subprocessors
| Company | What they do for BusyBeaver |
|---|---|
| Google Cloud | Runs the app (Cloud Run), secrets and logs. |
| Supabase | Hosts the database that holds the data listed above (on AWS in the US), and email sign-in: holds your email address and a user id. |
| Resend | Delivers sign-in emails (your email address and a one-time code and link). |
| The customer's model provider | Writes answers from the notes described above: Anthropic, OpenAI or Google, or none when the customer runs open models through Ollama themselves. |
This website
busybeaver.io is a static site hosted on Cloudflare Pages. It sets no cookies and runs no analytics or tracking scripts. Cloudflare handles the requests your browser sends, as any web host does. The "Become a design partner" form is hosted by Tally, which receives what you type into it.
How long data is kept
- Everything a customer stores is kept while the customer's account exists, and deleted when the customer asks.
- Sign-in sessions expire after 7 days.
- Deleted data can remain in database backups until those backups expire.
Your choices
If your company uses BusyBeaver, your company's admin decides who may see what, and can change your roles or remove you. To see, correct or delete your data, ask your admin or write to us.
Contact
Questions about privacy: hello@busybeaver.io.