How we collect, use, and protect data when you use Busca. Last updated 8 May 2026.
Plain-English summary. We collect what we need to run your audit, deliver the service you order, and let you sign in. We do not sell your data. We do not use it to train AI models. We use trusted third-party tools (described by category below) to host the site, take payments, and run the technical parts of our services. You can email hello@busca.agency any time to see, correct, or delete what we hold on you.
Busca is operated by Dan Parker as a sole trader, based in the United Kingdom. In this Policy, "Busca", "we", and "us" refer to that operation. We are the data controller for the personal information described below. For all data protection enquiries, contact us at hello@busca.agency.
Busca is an agency that delivers AI search visibility services. Some of those services are self-serve digital products (the free and paid AI Search Audits). Others involve us doing implementation work on or for your business (Content optimization, Website optimization, Brand trust building, and Full Stack). The data we hold and how we use it depends on which services you have ordered.
When you ask us to run an audit or deliver a service, we crawl the domain you provide and query third-party AI engines and search data services about your brand. We store the results, scores, and any extracted page content needed to produce your report or deliver your service.
When you order an implementation service, we may produce working materials (drafts of optimised page content, internal scoring spreadsheets, schema markup, technical change lists) as part of the engagement. These are kept for the duration of the engagement plus a short cooling-off period for revisions, then deleted.
Card payments are handled by Stripe directly on the checkout page. We never see or store your full card number. We retain a transaction reference, the amount, the product purchased, and the date.
We do not sell or rent your personal information. We do not share it for behavioural advertising.
We do not train AI on your data. We do not use your audit data, your reports, the working materials we produce for you, or any content scraped from your domain to train AI models. Where the AI service providers we work with offer enterprise zero-retention or no-training configurations, we use them.
What gets sent to AI service providers. When you run an audit or order a service that involves AI, we send queries about your brand and excerpts of your scraped page content to third-party AI service providers in order to generate the report or deliverable. Those providers process that data under their own privacy terms and our contractual no-training requirements.
AI outputs change over time. The mentions, citations, rankings, and answers we show in your report reflect what the AI engines returned at the time of the audit. The same query a week later may return different results. That volatility is inherent to how generative AI works and is not a defect.
We may change AI service providers. The AI market is moving quickly, and we may change which providers we use over time. The categories described in this Policy and the protections we commit to continue to apply.
We work with categories of third-party service providers to run Busca. Each handles only the data needed for the job described. We name specific providers below where the visitor encounters them directly (the payment processor at checkout and the analytics tools that run on the site).
Named sub-processor list available on request. A current list of the specific vendors we use within each category is available to business customers and during procurement reviews under a non-disclosure agreement. Email hello@busca.agency.
We may also share information when required by law, to enforce our terms, or to protect Busca, our users, or the public.
We use a small set of essential cookies for sign-in and session management. We use the following analytics tools to understand how the site is used and improve it:
We do not use cookies for cross-site advertising and we do not build a profile of you across other sites.
Some of the third-party service providers we use are based outside the UK and the European Economic Area, mainly in the United States. When we transfer your personal information outside the UK or EEA, we rely on appropriate safeguards (such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses) to protect it.
Depending on where you live, you have rights over your personal information. These usually include the right to:
UK and EEA users have these rights under the UK GDPR and EU GDPR. California residents have rights under the CCPA / CPRA, including the right to know what we collect, the right to delete, and the right to opt out of any "sale" or "sharing" of personal information (we do not sell or share for advertising).
To exercise any right, email hello@busca.agency. We will respond within 30 days. If you are unhappy with how we handle your data, you can complain to your local supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk).
The free AI Search Audit collects your email and the domain you provide, runs a small set of test queries, and emails you a short report. We follow up once after delivery. After that, you only hear from us if you opt in. You can ask us to delete your free-audit data at any time by emailing hello@busca.agency.
When you order an implementation service, the work may require temporary access to systems you control: Google Search Console, Google Analytics, your CMS, your hosting or DNS dashboard, your schema setup, or similar.
We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, role-restricted database access, and audited third-party providers. No system is 100% secure, but we work hard to keep yours safe and we will notify you of any breach in line with the law.
Busca is a tool for businesses. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has given us personal data, contact us and we will delete it.
We may update this Policy from time to time. The "Last updated" date at the top will reflect the latest version. If we make a material change, we will notify you by email or with a clear notice on the site.
Email hello@busca.agency for any privacy question, request, or complaint.
Questions? Get in touch.