Privacy Policy
Last updated August 1, 2026.
Effective August 1, 2026. This policy explains what Buhg collects, why, and who we share it with. We try to keep it plain.
Who this covers
Buhg is a bug-reporting tool. Two groups give us data: (1) our customers, who create accounts and run projects, and (2) the end users of our customers' websites, who submit bug reports through the embedded widget.
What we collect
- Account data: your email address and authentication credentials (passwords are hashed by our auth provider, never stored in plain text).
- Bug report content: the title, description, and any custom fields or attachments a reporter submits.
- Automatically captured context: the page URL where a report was made, browser and operating system, and screen/viewport size.
- Technical data: IP address, used for rate limiting and abuse prevention, and standard server logs.
- Usage analytics: aggregated, privacy-preserving analytics about how the marketing site and dashboard are used (IP anonymized).
How we use it
- To provide the service: capture, triage, and display bug reports.
- To run AI triage that assigns priority, summaries, and routing to reports.
- To send transactional email (account, password reset, and notifications you enable).
- To secure the service against spam and abuse.
- To understand and improve the product in aggregate.
Third-party processors
We use a small number of vetted service providers to run Buhg. Each processes data only to provide their service to us:
- Supabase — database, authentication, and file storage.
- Resend — transactional email delivery.
- Anthropic — AI triage of bug reports.
- Google Analytics — aggregate usage analytics (with IP anonymization).
- Our hosting provider — application hosting and delivery.
Cookies
We use essential cookies to keep you signed in. We also use analytics cookies to measure aggregate usage. You can block non-essential cookies in your browser; the service still works.
Data retention
We keep account and bug data for as long as your account is active. When you delete a project or your account, associated data is removed. Backups and logs are retained for a limited period for security and recovery.
Your rights
You can access, export, or delete your data. Account and project deletion is available in the dashboard; for anything else, contact us at privacy@buhg.net. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.
Changes
If we make material changes to this policy we'll update the effective date and, where appropriate, notify account holders.