Legal / Privacy notice, United States
Privacy notice, United States
Last updated 2026-07-14
This notice supplements the Privacy Policy for users in the United States, including rights under state privacy laws such as the California Consumer Privacy Act as amended by the CPRA, and comparable laws in other states (Virginia, Colorado, Connecticut, Utah and others).
Categories of personal information
In the last 12 months we have collected the categories described in the Privacy Policy: identifiers (email address, display name, IP address in server logs), credentials (a salted password hash), user content (the records, images and texts you add, some may be personal information, such as a CV), and internet activity limited to standard server logs. We collect it directly from you, to provide the service.
What we don't do
We do not sell personal information, and we do not share it for cross-context behavioural advertising, there is no advertising. We use no third-party analytics or tracking. Because there is no sale or sharing, there is nothing to opt out of; browser opt-out signals such as Global Privacy Control ask for something that is already the case. We also do not use or disclose sensitive personal information beyond what is necessary to provide the service, and we do not knowingly collect personal information from anyone under 16.
Your rights
Depending on your state, you may have the right to know/access the personal information we hold about you, to correct it, to delete it, and to receive it in a portable format. The app covers most of these directly, edit anything, export your complete account as a portable archive, delete your account. For anything else, write to hello@1buro.app. We will verify requests using the email address on your account, respond within 45 days, and never discriminate against you for exercising your rights. You may use an authorised agent; we will confirm the request with you directly.
Service providers
The processors listed in the Privacy Policy (hosting, AI when you invoke it, TLS for custom domains, and any backup or mailing destination the account owner configures) act as service providers under written terms; disclosures to them are not sales.