Privacy Policy

Buying Simplified LLC · Last Updated: June 24, 2026

This Privacy Policy explains how Buying Simplified LLC (“Buying Simplified,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our websites and the GenieWorks / Genie Suite services (Sourcing Genie, SOW Genie, Invoice Genie) (collectively, the “Services”). It applies to visitors to our websites and to customers and authorized users of the Services.

1. Information We Collect

We collect information in the following ways:

  • Account and contact information. When you register, purchase, or contact us: name, business email address, phone number, company name, job title, and billing information.
  • Customer Data you submit. Documents, contracts, purchase orders, invoices, prompts, and other content you upload or submit to the Services, which may contain business contact details of your employees, suppliers, and counterparties.
  • Usage and log data. IP address, browser type, pages visited, session duration, and similar technical data collected automatically when you use the Services.
  • Communications. Emails, support tickets, and messages you send us.

We do not intentionally collect special-category personal data (health, financial account numbers, government ID, etc.) through the Services. Please do not submit such data unless expressly agreed in your Order Form.

2. How We Use Your Information

  • To provide, operate, and improve the Services.
  • To generate AI-powered outputs from your inputs using our AI sub-processor (Anthropic, PBC).
  • To communicate with you about your account, support requests, and updates.
  • To process payments and fulfill contractual obligations.
  • To comply with legal obligations and enforce our agreements.
  • To conduct analytics to understand how the Services are used (using cookieless Cloudflare Web Analytics only — no tracking cookies are set).

3. Legal Basis for Processing (EEA / UK)

Where GDPR or the UK GDPR applies, we process personal data on the following legal bases:

  • Contract — processing necessary to perform our agreement with you.
  • Legitimate interests — security, fraud prevention, and improving our Services, where not overridden by your interests.
  • Legal obligation — compliance with applicable law.
  • Consent — where you have given consent (e.g., marketing communications), which you may withdraw at any time.

4. AI Processing and No Model Training

The Services use AI models provided by Anthropic, PBC (“Claude”). Your inputs and outputs are processed solely to generate responses for you. We do not use your Customer Data, Inputs, or Outputs to train large language models, and Anthropic does not train its models on data submitted through the Services under its commercial terms. Inputs and Outputs are subject to limited retention and may be configured for zero data retention where available.

5. Sub-Processors and Third Parties

We share data with the following categories of sub-processors to deliver the Services:

  • Anthropic, PBC — AI model inference (Claude), United States.
  • Amazon Web Services — Cloud hosting and infrastructure, United States / region per configuration.
  • Cloudflare — CDN, DDoS protection, and cookieless Web Analytics, United States.
  • Providers for payments, transactional email, and vector-database storage (names and locations confirmed on request and updated in our Data Processing Agreement).

We impose data-protection obligations on all sub-processors no less protective than those in our Data Processing Agreement. We do not sell your personal data.

6. Cookies and Tracking

Our websites use only essential cookies (authentication sessions, consent preference) and cookieless Cloudflare Web Analytics. No third-party tracking cookies, advertising pixels, or Google Analytics are used. You can manage your analytics preference at any time using the “Cookie Settings” link in the footer.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Services, plus any period required by law or our contractual obligations. On termination you may export your Customer Data for 30 days, after which we delete or return it as set out in our Data Processing Agreement.

8. Security

We implement administrative, technical, and organizational measures to protect personal data, including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, multi-factor authentication for administrative access, logical tenant isolation, audit logging, and incident-response procedures. Our AI and infrastructure sub-processors maintain industry security certifications (SOC 2 Type II and ISO 27001 — such certifications are held by those sub-processors).

9. International Data Transfers

We are based in the United States. Where we transfer personal data from the EEA, the UK, or Switzerland to the United States or another country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (Module Two, controller-to-processor), the UK International Data Transfer Addendum, and the Swiss amendments, as applicable, together with supplementary technical measures. In case of conflict, the Standard Contractual Clauses prevail.

Where Article 27 of the EU or UK GDPR requires it, we will appoint a representative in the EU and/or UK and identify them here.

10. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at admin@buyingsimplified.com. We will respond within the timeframe required by applicable law.

EEA and UK (GDPR / UK GDPR)

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with your local supervisory authority. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

California (CCPA / CPRA)

California residents have the right to know what personal information we collect and how it is used, the right to delete personal information (subject to certain exceptions), the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information (we do not sell or share personal information), and the right not to be discriminated against for exercising these rights. To submit a verifiable consumer request, contact us at admin@buyingsimplified.com. California residents may also designate an authorized agent to make requests on their behalf.

India (DPDP Act)

Indian data principals have the right to access information about their personal data we process, the right to correction and erasure, the right to grievance redressal, and the right to nominate another individual to exercise rights on their behalf. Contact our grievance officer at admin@buyingsimplified.com.

Singapore (PDPA)

Singapore individuals have the right to access their personal data held by us and to correct any inaccuracies. Requests can be directed to admin@buyingsimplified.com. We will respond within 30 days or as permitted by the PDPA.

Canada (PIPEDA)

Canadian individuals have the right to access their personal information and to challenge its accuracy. You may also withdraw consent to certain uses, subject to legal or contractual restrictions. Requests should be directed to our Privacy Officer at admin@buyingsimplified.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

11. Children’s Privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to customers. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

13. Contact

For privacy questions or to exercise your rights, contact us at:
Buying Simplified LLC
851 Duportail Rd, 2nd Floor
Chesterbrook, PA 19087, USA
admin@buyingsimplified.com

We use cookieless analytics to understand how visitors use this site. Nothing is loaded or shared with any third party until you choose. Privacy Policy.