Privacy Policy
What this site collects, why it collects it, who processes it on our behalf, and how to exercise your rights over it.
Last updated 14 September 2026
1 · Who we are
Bud Ecosystem, Inc. operates budecosystem.com. Our headquarters is in Bengaluru, India; our research and engineering operations are in Trivandrum, India; and we maintain a US office in New York. For everything described on this page, we are the data controller.
For any privacy question, or to exercise any of the rights in section 8, write to contact@bud.studio with "Privacy" in the subject line.
2 · What we collect
Information you give us
Two things on this site send us information, and both are things you choose to fill in.
- Enquiry and demo forms — the contact form and the landing-page guide forms collect your first and last name, work email address, company, role, and whatever you write in the message, use case, environment or hardware fields. A hidden field records which page the form was submitted from, so we know what you were reading.
- Newsletter signup — your email address, and nothing else.
Information collected automatically
If — and only if — you accept analytics cookies, Google Tag Manager loads and the tags configured in it collect standard web analytics: pages viewed, approximate location derived from IP address, referring site, device and browser type. Until you accept, Google Consent Mode holds every one of these signals in a denied state, and no analytics or advertising identifiers are set. See the Cookie Policy for the detail.
Our host, Vercel, writes standard server request logs, which include IP addresses. These are operational records rather than analytics.
Information stored on your device
Two values are kept in your browser's local storage and are never transmitted to us:
| Key | Purpose | Cleared |
|---|---|---|
bud-consent | Remembers your cookie choice so you are not asked on every page. | When you clear site data, or choose Cookie settings again. |
bud-topology | Remembers the deployment topology you selected (on-prem, hybrid, cloud, sovereign, air-gapped) so pages show the variant you picked. | When you clear site data. |
3 · Why we use it, and on what legal basis
- To answer you. When you submit an enquiry we use your details to respond and to follow up about the thing you asked for. Legal basis: steps taken at your request prior to entering a contract, or our legitimate interest in responding to business enquiries.
- To send the newsletter. Legal basis: your consent, withdrawable at any time via the unsubscribe link in every email.
- To understand how the site is used. Legal basis: your consent, given through the cookie banner and withdrawable at any time.
- To keep the site working and secure. Legal basis: our legitimate interest in operating and protecting the service.
4 · Who processes it for us
We do not sell personal data. These providers process it on our behalf so the site can function:
| Provider | What it handles | What reaches it |
|---|---|---|
| Vercel | Hosting and delivery of every page | Request logs, including IP address |
| Web3Forms | Delivers enquiry and demo form submissions to us by email | Everything you typed into the form |
| Resend | Newsletter list and delivery | Your email address |
| Google (Tag Manager, and the tags configured in it) | Analytics and campaign measurement | Analytics events — only after you accept |
| YouTube | Embedded video. We use the youtube-nocookie.com domain, so nothing is set until you press play | Playback requests, once you play a video |
| unpkg | Content delivery network serving the icon library | A file request from your browser |
5 · International transfers
We operate from India and the United States, and the providers listed above are based principally in the United States. If you contact us from the European Economic Area, the United Kingdom, or another region with transfer restrictions, your information will be transferred to and processed in those countries.
Where that happens, the transfer is made under the European Commission's Standard Contractual Clauses — with the UK Addendum where UK data is involved — together with the additional technical and organisational measures described in our trust portal. You can request a copy of the relevant safeguards using the contact address in section 1.
6 · How long we keep it
| What | Kept for |
|---|---|
| Enquiry and demo form submissions | 24 months after our last contact with you, unless the enquiry becomes a customer relationship — in which case it is retained under that contract. |
| Newsletter subscription | Until you unsubscribe. We keep a record of the unsubscribe itself so we do not contact you again by mistake. |
| Analytics data | 14 months, the maximum retention period we have configured in Google Analytics. |
| Server request logs | 30 days, then discarded. |
Where we are required to keep something longer to meet a legal, tax or accounting obligation, we keep it for that period and no longer.
7 · Security
Bud Ecosystem maintains SOC 2 Type II attestation and ISO 27001 certification. The controls, subprocessor list and current reports are available through our trust portal.
8 · Your rights
Depending on where you live, you may have the right to ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time without affecting what was done before you withdrew it.
If you are in the European Economic Area or the United Kingdom, these rights come from the GDPR and UK GDPR. If you are in India, they come from the Digital Personal Data Protection Act 2023. If you are in California or another US state with a privacy statute, you may additionally have the right to know what is collected and to opt out of its sale or sharing — we do not sell or share personal data as those laws define it.
To exercise any of these, write to contact@bud.studio. We will respond within the period the applicable law allows, which is one month under the GDPR. We will not charge you or treat you differently for asking.
If you are unhappy with our response you can complain to your local supervisory authority — in the EEA, the data protection authority for your country; in the UK, the Information Commissioner's Office; in India, the Data Protection Board.
9 · Cookies
What is stored on your device, and how to change your choice at any time, is set out in full in the Cookie Policy.
10 · Children
This is a business-to-business site. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.
11 · Changes to this policy
If we change this policy we will update the date at the top of the page. Where a change materially affects how we use personal data, we will say so on the site before it takes effect.
12 · Contact
Privacy questions go to contact@bud.studio. For anything about the platform itself, talk to a solutions architect.