Last Updated: July 15, 2026
Home · Terms of service · Support
This Privacy Notice describes how Block, Inc. (“we”, “us”, “our”) collects, uses and discloses information about you when you use our website (www.buzz.xyz), applications, services, tools and features, or otherwise interact with us (collectively, the “Services”).
Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use and disclosure of your information as described in this Privacy Notice. If you do not understand or agree to this Privacy Notice, please do not use or access the Services. Additionally, users who access the Services by joining a Block-hosted Nostr relay (a “Workspace”) through the Buzz platform also agree to this Privacy Notice. If you do not agree, please do not continue or otherwise access the Workspace.
For the purpose of applicable data protection laws, we are the data controller. Our representative in the European Economic Area (“EEA”) is [name of representative], and can be contacted at [address, email address]. Our representative in the United Kingdom (“UK”) is [name of representative], and can be contacted at [address, email address].] We have also appointed a Data Protection Officer whom you can contact at [address, email address].
We may amend this Privacy Notice from time to time by posting a revised version and updating the “Effective Date” above. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us or by posting notice of such changes on the Services) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.
When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services and to maintain our business relationship, as a matter of our legitimate interests to run successful Services, including by enhancing the safety and security of our Services, providing customer support, as well as complying with applicable legal obligations, enforcing any applicable terms of service and protecting our rights and the rights of our employees, users or other individuals.
Information You Provide to Us
Some features of the Services may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:
Contact information, such as your name and email address, if you choose to create an account with us. You may be permitted to join a Block-hosted Workspace through the Services without creating an account or providing a name or email address, but if you would like Block to host a Buzz relay on your behalf, you will need to create an account to become the administrator of that hosted Workspace. To access the services, we may request additional information to verify your age (such as identification documentation). We use this information to create and maintain your account and provide the Services, as required to perform our contract with you, to comply with applicable laws, and because it is in our legitimate interest to communicate with you (including to tell you about products or services that may be of interest to you). Where required by applicable law, we will obtain your consent to send marketing communications to you.
Account information, such as your username, password, security questions that you select and the answers you provide, account nickname, profile information and your public Buzz cryptographic key. We use this information to provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to create, maintain and secure your account with us. You are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
User-content, such as messages, reactions, media files and attachments, voice huddle audio, code and repository data, and other content you or AI agents operating at your direction submit through Buzz channels, threads, direct messages and voice huddles. We use this information to provide the Services and for content moderation, safety, security and abuse-prevention purposes, and because it is in our legitimate interest to operate, secure, moderate and improve the Services and to protect the safety of our users and others. We or others may store, display, reproduce, publish or otherwise use such content, and may or may not attribute it to you. Others may also have access to such content and may have the ability to share it with third parties. If you choose to submit content to any public or shared area of the Services, your content will be accessible by others, including other users, AI agents and us.
Any other information you choose to provide us or otherwise include in communications with us, for example, when sending a message through the Services or contacting our support team at help@buzz.xyz because it is in our legitimate interest to be responsive to you and to perform our contract with you.
For certain categories above, provision of the information is required to enable us to fulfil our contract with you. If you do not provide us with the relevant information, we may not be able to provide you with access to the Services.
Information Collected Automatically
We and third parties also automatically collect certain information about your interactions with the Services, including through cookies, pixels or other tracking technologies (“Analytics Technologies”). Where required by applicable law, we obtain your consent to collect and process this information. This information is collected and used to personalize the Services for you, to target, deliver and measure interest-based advertising to tailor your experience with the Services, to run analytics, and better understand user interactions with the Services. Such information includes:
Device information, such as device type, operating system, unique device identifier and internet protocol (IP) address.
Approximate location information, such as approximate location based on your IP address.
Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, clickstream data (e.g., page requests, page views, how much time is spent on a page, content viewed or interacted with, text entered, etc.).
Search and indexing information, such as your search queries, search history and interactions with search results. We use machine learning models to improve search functionality and help you find relevant content, channels and users. These models are designed to identify relevant results based on patterns and context without learning, memorizing or reproducing the underlying content of your messages or files.
For further information on the use of AnalyticsTechnologies and your choices, see the section below, Cookies and Similar Technologies.
Information Collected from Other Sources
We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:
Information we receive when you sign in through a third-party authentication (OAuth) provider, such as your username and email address and other account information you have made available, which we use in our legitimate interest to maintain your account and login information.
Information we receive from other users and AI agents you connect, such as content, messages or account details that other users, including Workplace administrators, may share on the Services, along with the prompts, content and outputs generated or transmitted by a third-party AI agent that you enable or connect to the Services, which we use to provide the Services and in our legitimate interest to operate, secure and improve the Services.
Information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, Third-Party Websites and Links.
Deidentified Information
We may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“deidentified information”) (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.
As described above, we and third parties use Analytics Technologies to collect certain information about your interactions with the Services. Most browsers accept Analytics Technologies automatically, but you may be able to control the way in which your devices permit the use of certain Analytics Technologies. If you so choose, you may block or delete certain Analytics Technologies from your browser; however, blocking or deleting cookies may cause some of the Services, including login features and general functionality, to work incorrectly.
Your browser settings may allow you to transmit a signal or other mechanism for exercising your choice regarding the collection or processing of your information when you visit various websites.
You may also opt-out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the National Advertising Initiative, the Digital Advertising Alliance, or the European Interactive Digital Advertising Alliance, by clicking the links provided.
We may disclose your information for legitimate purposes subject to this Privacy Notice, including:
Our affiliates or others within our corporate group, as a matter of our legitimate interests to efficiently provide the Services and to perform our contract with you.
Vendors or other service providers who help us provide the Services, in order to perform our contract with you and in our legitimate interests, including for system administration, cloud storage, security, customer relationship management, marketing communications, analytics, generative AI and content creation, payment networks, payment processing and the deployment of Analytics Technologies.
Third-party AI model providers and agent developers (such as OpenAI and Anthropic) that power AI agents you enable or connect, which receive your Input and related channel content in order to generate Output, as a matter of our legitimate interests to provide you with access to, and to develop and improve, the Services and to perform our contract with you.
With another user or AI agent, when you interact with other users or agents on the Services or otherwise choose to share or make information visible to others, including in channels, threads, direct messages and voice huddles, to perform our contract with you and in our legitimate interests to provide you with access to the Services.
Depending on your use of the Services, certain Workspace administrators and other users may be able to access the information you make accessible to other Workspace users.
Professional advisors, such as auditors, law firms or accounting firms, as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations.
Third parties in connection with or anticipation of an asset sale, merger, acquisition, or other business transaction, including in the context of a bankruptcy proceeding or other restructuring matter.
For legal and security reasons and to protect our services and business, in our legitimate interests or as required by law, including to cooperate with law enforcement, judicial orders and regulatory inquiries, to detect and prevent against fraudulent or illegal activity, to exercise or defend legal claims and to ensure the safety and security of our business, employees and users, and to enforce our terms or other agreements.
We do not disclose your personal information to third parties for the third parties’ own direct marketing purposes, unless you have affirmatively agreed to such disclosure. We also do not “sell” or “share” (as those terms are defined under applicable law) personal information, nor have we done so in the preceding 12 months. Further, we do not have actual knowledge that we “sell” or “share” personal information of individuals under 16 years of age.
We may provide links to third-party websites or platforms and display or make available content, data, applications or materials from third parties. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms, or the accuracy, completeness or reliability of third-party materials. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use.
Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators. This Privacy Notice does not apply to the decentralized Nostr protocol, or any third-party applications, integrations or services that you may interact with via the protocol. The protocol and any related third party services that interoperate with the protocol may operate under their own terms of service and/or privacy policies. We recommend you carefully review those third-party terms before enabling or accessing them.
Our Services and their content are intended only for users who are 18 years of age or older, and are not directed at children or other minors. We do not knowingly collect or solicit any personal information from anyone under 18 or allow such persons to register for our Services. If you are under the age of 18, please do not use our Services, do not browse our websites and do not send us any of your personal information. If we learn that we have unknowingly collected personal information about a child (in particular, any child under 13 years of age), we will make commercially reasonable efforts to delete that information, in accordance with applicable law. If you are a parent or guardian and believe that we may have collected personal information from your child, please notify us immediately by sending an email to help@buzz.xyz.
We have implemented commercially reasonable security measures designed to protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Nevertheless, the internet is not a 100% secure environment, and we cannot guarantee absolute security of the transmission or storage of your information. Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.
We will keep your personal information only for the period necessary to fulfill the purposes for which we collect and process your personal information, as described in this Privacy Notice and in accordance with applicable law. This means that the retention periods will vary according to the data category and the purpose we have to process your personal information. The retention periods for data are determined on a case-by-case basis that depends on several factors, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity or protect ourselves, including our rights, property or products. In particular, we retain certain of your information as follows:
your account data for as long as you keep your account open or as needed to provide you with our Services;
messages, media files and attachments, and other user content are retained for up to 180 days by default, or for a shorter period if you delete them;
if you contact our support team (for example, at help@buzz.xyz), we retain data related to your request for as long as needed to respond to and resolve it; and
we may retain certain information for longer where required for legal, security, safety, backup or dispute-resolution purposes, including where preservation obligations apply to reported content.
Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law or technical feasibility.
Access / Know: The right to request access to the personal information we hold about you and to obtain details about what personal information we have collected about you, including the categories of personal information, the categories of sources from which the information was collected, the business or commercial purposes for collecting personal information about you, the categories of third parties to whom we disclose your personal information, and the specific pieces of personal information we have collected about you. You may also request to obtain a list of specific third parties, other than natural persons, to which we have disclosed your personal information.
Deletion / Erasure: The right to request that we delete personal information we hold about you.
Correction: The right to request that we correct inaccurate personal information we hold about you.
Portability: The right to receive a copy of the personal information we hold about you in a portable and, to the extent technically feasible, readily usable format, and to request that we transfer it to a third party.
Restriction of Processing: The right to require us to stop, suspend or restrict our processing of personal information we hold about you.
Objection: The right to object to our processing of your personal information.
Opt-Out of Marketing: The right to opt out of marketing at any time by using the unsubscribe / opt-out instructions provided in our communications to you. If you opt out, we may still send you transactional or administrative messages, such as emails about your account.
Withdrawal of Consent: Where we rely on consent to process your personal information, the right to withdraw this consent at any time.
To make a request described in this section, please email us at help@buzz.xyz. We will not retaliate or discriminate against you for exercising any of these rights. Further information may be needed to verify your identity before exercising these rights, such as your email address or government issued ID. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. If we deny your request, you may have the right to appeal our decision by contacting us through the methods described in the section below, How to Contact Us.
When you submit a request or launch an appeal, we will limit our collection of your information to only what is necessary to securely fulfil your request or process your appeal. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal. If you are located in the UK, you also have the right to make a complaint to us if you think we have infringed UK data protection laws. You may also have the right to complain to your local data protection authority about how we process your personal information.
As described in Section 4 of this Privacy Notice, we disclose your personal information both internally with our affiliates and group companies, as well externally with our processors and other third parties. Some of these recipients are located in countries outside of your jurisdiction, including outside of the EEA, the UK and Switzerland. Your personal information may be transferred to the United States and eventually globally, including to such countries, whose laws may not provide an equivalent level of protection for your personal information as is the level of protection guaranteed in the EEA, the UK, Switzerland, or other jurisdictions. These transfers are necessary and essential for us to provide our Services to you. Prior to your personal information being shared with third parties, we will take contractual or other steps reasonably necessary to ensure that your personal information is treated securely by such third parties.
To transfer personal information subject to the EU and UK General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP), we rely on adequacy decisions issued by the European Commission, the UK competent authority and the Swiss Federal Data Protection and Information Commissioner (FDPIC) respectively. Where we transfer your personal information to jurisdictions that do not benefit from adequacy decisions, such as the United States, we rely on the EU Standard Contractual Clauses that have been adopted by the European Commission (specifically, module one (controller to controller transfer) and module two (controller to processor transfer), as relevant) and the UK International Data Transfer Addendum and Swiss Addendum. For more information, including how to obtain a copy of these documents please contact us through our contact points provided in Section 11. You can also access the Standard Contractual Clauses approved by the European Commission here.
This section applies to you if you are a resident of California and we process personal information about you that is subject to the California Consumer Privacy Act (“CCPA”). For purposes of this section, references to “personal information” shall include “sensitive personal information” as defined under the CCPA.
Processing of Personal Information
In the preceding 12 months, we collected and disclosed to service providers (as described in the Disclosure of your Information section above) the following categories of personal information and sensitive personal information (denoted by *):
The categories of sources from which we collect your personal information and the specific purposes for which we collect and disclose your personal information, are described in the sections above, Collection of Your Information, Use of Your Information and Disclosure of Your Information, respectively.
We only use and disclose sensitive personal information for purposes specified in the CCPA or otherwise in line with your consent, and we do not use or disclose sensitive personal information for purposes of inferring characteristics about you. The criteria we use to determine how long to retain your personal information is described in the section above, Retention of Your Information.
Should you have any questions about our privacy practices or this Privacy Notice, please email us at help@buzz.xyz or contact us at Block, Inc., 1955 Broadway, Suite 600, Oakland, CA 94612.