Last Updated: Feb 21, 2026
This Privacy Policy explains how Utility Fueled LLC (doing business as Buy It Bot) ("we", "us", or "our") collects, uses, discloses, and protects information in connection with our websites, applications, and services (the "Services"). If you do not agree with this policy, please do not use the Services.
To comply with processor policies and maintain platform safety, we use OpenAI's Moderation API to screen product names and descriptions for prohibited content before processing gifts. This helps prevent purchases of violent, sexual, hateful, or illegal items.
Product information sent for moderation is processed by OpenAI under their Privacy Policy. We do not retain moderation results beyond the transaction lifecycle.
Our conversational shopping agent is powered by Google Gemini (via the Vercel AI SDK). When you use the chat feature, your messages, product queries, and related conversational context are sent to Google for processing. Google processes this data under their Gemini API Terms of Service. We do not use your conversations to train AI models. Chat history is retained only for the duration of your session unless otherwise required for order fulfillment or support.
First-party products (e.g., Bea's Bazaar) use Stripe. Stripe processes your payment information under its Privacy Policy. We do not store card details on our servers.
Some third-party merchant purchases use cryptocurrency payment rails (e.g., USDC on Base via the x402 protocol and Coinbase Developer Platform). On-chain transactions are public and may be permanently viewable. We also integrate MoonPay Commerce for certain crypto payments. Please review the applicable payment provider's privacy policies before use: Coinbase, MoonPay.
Where applicable, we process personal data under the following legal bases:
When a user sends a gift to a recipient via a username or handle (e.g., ENS name, Farcaster, Twitter/X), we store the recipient's public handle and associated identity data in our identity graph before the recipient creates an account. This data is used solely to match and deliver the gift to the intended person. Recipients who have not created an account may request deletion of their data by contacting support@buyit.bot.
Recipient shipping information is encrypted at rest and purged approximately 30 days after redemption. We retain other data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Blockchain data may persist indefinitely on public networks.
We use technical and organizational measures to protect personal information (e.g., encryption at rest/in transit, access controls). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We use automated content moderation (via OpenAI's Moderation API) to screen gift purchases for prohibited content. This process may automatically reject a transaction without human review. If you believe a transaction was incorrectly rejected, you may contact support@buyit.bot to request a manual review.
We may process and store information in the United States and other countries. Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) for cross-border data transfers.
Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
California residents may have rights under the CCPA/CPRA, including to know, delete, and opt out of certain disclosures. We do not sell personal information as defined by the CCPA/CPRA.
To exercise rights, please email support@buyit.bot. We may need information (e.g., gift ID, account email) to verify your request.
We use essential cookies to operate the Services and may use analytics or functional cookies to improve performance and features. You can control cookies through your browser settings. Some features may not function properly without certain cookies.
Some browsers transmit "Do Not Track" (DNT) signals. We do not currently respond to DNT signals because no uniform standard for handling them has been adopted. We will update this policy if a standard is established.
In the event of a data breach that affects your personal information, we will notify affected users in accordance with applicable law. Where required, we will provide notice via email or through our Services within the timeframes mandated by applicable data protection regulations.
The Services are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate action.
Our Services may link to third-party sites or services. Their privacy practices are governed by their own policies, and we are not responsible for them.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last Updated" date. Your continued use of the Services after changes become effective constitutes your acceptance of the revised policy.
Questions or requests: support@buyit.bot