Privacy Policy

Data Controller

Buzzlo d.o.o. za usluge (“OneDown”, “we”, “us”, “our”) is the data controller responsible for processing your personal data when you use the OneDown platform, websites, and mobile applications.

Detail	Value
Legal entity	Buzzlo d.o.o. za usluge
Registered office	Zagrebačka cesta 126, 10000 Zagreb, Croatia
Company ID (OIB)	62127636877
Court registry (MBS)	081532265
Registry court	Commercial Court in Zagreb (Trgovački sud u Zagrebu)
Privacy contact	hello@buzzlo.ai

About the Platform

OneDown is an invite-only, cloud-based inventory intelligence platform engineered for bars, restaurants, hotels, and hospitality groups. The service comprises:

• Native mobile applications (iOS and Android) for high-speed stock counting and cellar inventory
• Web management console (app.onedown.ai) for catalog governance, reporting, user management, and variance analysis
• Real-time Bluetooth Low Energy (BLE) smart scale integration for open bottle and draft keg measurement
• On-device camera barcode scanning for instant packaging identification
• Automated export connectors to Point of Sale (POS) and back-office ERP platforms (such as Remaris)

Roles & Responsibilities

Under the EU General Data Protection Regulation (GDPR), data processing responsibilities are partitioned as follows:

• Buzzlo d.o.o. as Data Controller: We act as controller for your personal account credentials, security access logs, billing information, support correspondence, and diagnostic performance metrics.
• Your Organization (the Tenant) as Data Controller: Your employer or venue operator is the data controller for all operational business data entered into OneDown, including inventory counts, session assignments, warehouse stock lists, product catalogs, and recipe definitions.
• Buzzlo d.o.o. as Data Processor: We act as a data processor on behalf of your organization when storing and synchronizing customer inventory data. If your organization requires a Data Processing Agreement (DPA) incorporating Standard Contractual Clauses, contact us at hello@buzzlo.ai.

Data We Collect

We limit personal data collection strictly to what is required to deliver, secure, and operate the platform:

Category	Specific Data Points	Purpose & Legal Basis
Account & Identity	Email address, full name, hashed password (scrypt), assigned organization role (Owner, Manager, Member)	User authentication, access control, audit attribution (GDPR Art. 6(1)(b))
Inventory & Counting	Item counts, session timestamps, warehouse zones, weight conversions, recorded variances, inventory export history	Core service fulfillment and statutory stocktaking records (GDPR Art. 6(1)(b) & Art. 6(1)(c))
Device & Diagnostics	Operating system version, app build number, device model, anonymized crash traces, IP address, request headers	Service stability, API rate limiting, compatibility, security logging (GDPR Art. 6(1)(f))
Support & Inquiries	Messages, screenshots, and account identifiers submitted through in-app chat or email	Providing customer support and troubleshooting issues (GDPR Art. 6(1)(b))
Website Enquiries	Name, phone number, venue or company name, venue type and number of venues, and, if you provide them, your email address, message, and how you heard about us, submitted through the demo request form on onedown.ai; the source of the link you used to reach the form (for example ref=remaris); your IP address, used only to check the submission with Cloudflare Turnstile and to limit abuse; and, only if you accepted analytics, campaign parameters such as utm_source	Answering your enquiry and taking steps at your request before a contract (GDPR Art. 6(1)(b)); following up on business enquiries and keeping the form secure (GDPR Art. 6(1)(f))
Website Analytics	Pseudonymous visitor and session identifiers, pages viewed, referrer and campaign parameters, clicks and other interactions with buttons, links, and form elements (not what you type into them), browser and device type, approximate location. Collected only if you accept analytics	Understanding which pages help visitors and improving the website (consent, GDPR Art. 6(1)(a))

Device Permissions

The OneDown mobile application requests specific device permissions strictly when needed for core counting workflows:

• Camera: Used exclusively for optical barcode and QR code recognition via on-device machine learning (Apple VisionKit on iOS, Google ML Kit on Android). Camera image buffers are processed entirely in local volatile memory and are never saved, recorded, or transmitted to our servers.
• Bluetooth (BLE) & Nearby Devices: Used to establish direct wireless communication with compatible digital weighing scales (such as AiLink and MASSEC). Bluetooth data is used exclusively to stream real-time weight measurements into the active counting session.
• Location Clarification: OneDown does not access GPS, does not track geographic location, and does not log device movement. On certain mobile operating systems, Bluetooth Low Energy discovery is architecturally grouped under location permissions; we never capture, record, or store geographic coordinates.

Offline Storage & Synchronization

OneDown is built offline-first so hospitality staff can perform uninterrupted counts in concrete cellars, subterranean walk-in coolers, and areas with degraded network connectivity:

• Active counting templates, product barcodes, and pending counts are cached locally on your device in an isolated, sandboxed SQLite database (Drift).
• Authentication tokens and API secrets are stored securely within your device’s hardware-backed credential storage (iOS Keychain and Android EncryptedSharedPreferences).
• When network connectivity is re-established, pending session changes synchronize securely with our cloud servers. Signing out of the mobile app or deleting the application purges local cached data immediately.

Legal Bases for Processing

We process personal data under one or more recognized legal bases pursuant to GDPR Article 6:

• Performance of a Contract (Art. 6(1)(b)): Processing necessary to create your account, authenticate your sessions, maintain inventory workflows, and fulfill our service agreement with your organization. This includes steps taken at your request before a contract is concluded, such as replying to a demo request.
• Compliance with Legal Obligations (Art. 6(1)(c)): Retaining inventory session audits, export logs, and transaction histories to comply with commercial, accounting, and tax record-keeping regulations (e.g., the Croatian Accounting Act and EU fiscal directives).
• Legitimate Interests (Art. 6(1)(f)): Ensuring platform security, mitigating malicious traffic (including spam submitted through our contact form), diagnosing fatal application crashes, and maintaining infrastructure integrity.
• Consent (Art. 6(1)(a)): For optional features such as device push notifications, which can be toggled on or off at any time in device or in-app settings, and for analytics cookies and similar technologies on our marketing website (together with Article 5(3) of the ePrivacy Directive and the Croatian Electronic Communications Act). You can withdraw consent at any time; withdrawal does not affect processing carried out before it.

Subprocessors

We engage vetted third-party infrastructure providers to operate the OneDown platform under strict data protection terms:

Subprocessor	Provided Service	Entity Location & Transfer Mechanism
Hetzner Online GmbH	Primary cloud infrastructure, application API runtime, PostgreSQL database, job queues	Germany (European Union)
Cloudflare, Inc.	Content Delivery Network (CDN), DDoS mitigation, Web Application Firewall (WAF), public site hosting, object storage, and Turnstile bot protection on the website contact form	European Union / Global Edge (Standard Contractual Clauses)
Crisp IM SARL	In-app customer support chat widget (web and mobile)	France (European Union)
OneSignal, Inc.	Mobile push notification delivery (session reminders, export alerts)	United States (EU-U.S. Data Privacy Framework & SCCs)
Amazon Web Services EMEA SARL	Transactional email delivery (SES) for invites, verifications, export digests, and website enquiry notifications	Frankfurt, Germany (European Union)
Google Ireland Limited	Website analytics (Google Analytics 4), only after you accept analytics	Ireland (European Union); transfers to Google LLC in the United States (EU-U.S. Data Privacy Framework & SCCs)
PostHog, Inc.	Website product analytics (PostHog EU Cloud), only after you accept analytics	EU Cloud, Frankfurt (Germany); provider based in the United States (Standard Contractual Clauses)
Slack Technologies Limited	Internal notification to our team when a website enquiry arrives	Ireland (European Union); transfers to the United States (Standard Contractual Clauses)

Self-Hosted Error Diagnostics

Application error reporting and crash diagnostics are processed through a self-hosted, Sentry-compatible monitoring service (Bugsink) deployed directly on our dedicated Hetzner cloud infrastructure in Germany. Telemetry traces and error contexts are kept entirely on our private EU servers and are not shared with third-party commercial crash vendors.

We never sell, rent, monetize, or broker personal data to advertisers, data brokers, or third parties.

Cookies & Tracking

We keep storage on our sites to the minimum needed to run them, and we only use analytics if you agree. The first time you visit onedown.ai, a banner asks for your choice. Google Analytics and PostHog are not loaded until you accept, and “Reject all” is as easy to use as “Accept all”. You can change or withdraw your choice at any time through Cookie settings in the footer of every page. We ask again after 12 months, or sooner if our cookie practices change materially.

Marketing Website (onedown.ai)

What analytics collect. Pseudonymous identifiers, the pages you view, where you came from, clicks and other interactions with buttons, links, and form elements (not what you type into them), your browser and device type, and an approximate location. Google Analytics 4 does not store IP addresses, and our PostHog project is configured not to store them either. We do not use session recording or heatmaps, and we do not use analytics data for advertising. We do not use analytics to identify you: no name, email address, or phone number is attached to analytics events, not even when you submit the contact form.

Contact form. The contact form, which is also how you request a demo, uses Cloudflare Turnstile to tell people from bots. Turnstile loads from Cloudflare when you open the contact page and receives your IP address and browser signals to make that check; we rely on our legitimate interest in keeping the form secure (Art. 6(1)(f)). Turnstile is not used for advertising.

Withdrawing consent. Open Cookie settings in the footer, switch Analytics off (or choose “Reject all”) and save. We stop collecting new analytics data right away and delete the analytics cookies and storage entries our site set. Rejecting or ignoring the banner never limits access to any part of the website.

Web Application (app.onedown.ai)

Employs strictly necessary HTTP session cookies and local storage tokens required for secure authentication, cross-site request forgery (CSRF) defense, and active tenant routing. These technical cookies do not track users across third-party websites.

Data Retention & Deletion

We retain personal data only for as long as necessary to fulfill the purposes set out in this policy:

• Active Accounts: Stored for the duration of your organization’s active subscription.
• Sync Event Journal: Synchronization delta events are stored server-side for approximately 90 days to maintain multi-device consistency, after which they are automatically expunged.
• Account Deletion: When an account is deleted, personal credentials and identification records are permanently removed from production databases within 30 days.
• Archived Audit Records: To preserve financial, accounting, and stocktaking integrity for the tenant organization, completed inventory counts and export receipts may be retained in anonymized form, stripped of personal contact details.
• Website Enquiries: Kept for as long as needed to answer your request and follow up on it. You can ask us to delete an enquiry at any time (see Your Rights). The IP-based counter that limits abuse of the contact form expires automatically after at most 10 minutes.
• Website Analytics: Identifiers expire with their cookies (up to 2 years). Event data in Google Analytics is deleted automatically after 2 months. Event data in PostHog is kept for up to 7 years, which is the retention period of our PostHog plan and cannot be shortened; it has no person profiles and no IP addresses attached. To exercise your rights over this data, email hello@buzzlo.ai.

Security

We employ defense-in-depth architectural safeguards to protect your data against unauthorized access, loss, or alteration:

• Encryption in Transit: All traffic between clients, mobile apps, scales, and APIs is encrypted using modern TLS 1.3 cryptographic protocols with Strict Transport Security (HSTS).
• Encryption at Rest: Databases, automated backups, and storage volumes are encrypted at rest using AES-256.
• Authentication: Passwords are protected using high-cost scrypt hashing algorithms. Authentication sessions use time-limited cryptographic tokens.
• Isolation: Multi-tenant database queries enforce strict organizational boundary isolation at the database layer.

Your Rights

Under Articles 7(3) and 15–22 of the GDPR, European Union residents possess enforceable data privacy rights:

• Right of Access (Art. 15): Request confirmation and a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): Request permanent deletion of your personal account and associated data (“right to be forgotten”).
• Right to Restriction of Processing (Art. 18): Request that we restrict processing of your personal data under specific statutory conditions.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): Object to data processing predicated upon our legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): Where we rely on your consent, for example for website analytics, withdraw it at any time through Cookie settings in the website footer or by emailing us. Withdrawal does not affect processing carried out before it.

To exercise any of these rights, email us directly at hello@buzzlo.ai. We will respond to your request within 30 days without undue delay.

You also have the right to lodge a complaint with your competent national supervisory authority. In Croatia, the competent authority is the Agencija za zaštitu osobnih podataka (AZOP):

• Website: azop.hr
• Address: Selska cesta 136, 10000 Zagreb, Croatia
• Email: azop@azop.hr

Changes & Contact

OneDown is a business-to-business (B2B) platform. The service is not directed at children under the age of 16, and we do not knowingly solicit or collect data from minors.

We may update this Privacy Policy periodically to reflect legal modifications, feature enhancements, or operational changes. Material revisions will be highlighted via in-app alerts, email notifications, or notice on our website prior to taking effect.

If you have questions, feedback, or concerns regarding our privacy practices, contact us at:

Buzzlo d.o.o. za usluge
Attn: Data Protection
Zagrebačka cesta 126, 10000 Zagreb, Croatia
Email: hello@buzzlo.ai