Privacy notice

Effective: 2026-10-09

BUY HARD is operated by Facundo LLC, doing business as BUY HARD. This notice explains how we handle information when you use the BUY HARD website, workspace, and connected AI integrations. For support or a privacy request, contact facundo@facundo.xyz.

Information we handle

We handle account and contact information, sign-in records, your company name and delivery address, inventory and stock counts, supplier information, quotes, purchase and receiving records, and the settings you choose. If you use documents or supplier email, we also handle the files, message contents, attachments, recipients and delivery records needed for those features. Connected sales services can provide product, mapping and sales records used to estimate stock.

We also store conversations and requests made through BUY HARD, the business operation inputs and results, approval and audit records, errors, and connection permissions. A connected AI app may receive your stable account identifier, account display name, company display name, and the company records returned by the tools you authorize. Access tokens, integration credentials and sign-in material are used to maintain the connections you choose. Supplier website checkout can process visible page content and screenshots, maintain supplier sign-in sessions, and keep purchase-attempt records. Do not put raw card details, bank credentials, or unrelated sensitive personal information in chat or uploaded files.

How information is used

We use this information to provide your workspace, identify your account, track stock, research suppliers, prepare and review quotes and orders, process documents, manage supplier communications, reconcile deliveries, and run the connections and automations you enable. We use permission and audit records to enforce access, prevent duplicate operations, investigate errors, and provide support.

AI services may process the relevant request, company context, document text or supplier information to provide a feature. Outputs can be incomplete or wrong. Review the underlying evidence before relying on a quote, stock estimate, delivery date or purchasing recommendation.

Services and other recipients

We use Convex for the application, database, file storage and authentication; OpenAI for AI processing; Firecrawl for web research; AgentMail for supplier email; Railway for supplier website checkout infrastructure; and Cloudflare for email alerts. The information sent depends on the feature used. Supplier checkout can use Stripe Link for hosted payment connection and approval. Suppliers and payment services receive the information necessary for the communications or purchases you authorize, which can include business contact details, delivery address, selected products and order terms. If you enable a sales connection such as Shopify or Square, that provider supplies the sales and product records needed for the connection.

When you connect ChatGPT, Claude or another AI app, that service receives the tool responses requested through your authorized connection. The AI app separately handles the conversations, uploads and account information you provide to it under its own terms and privacy notice. Disconnecting BUY HARD does not remove copies already held by that service or a supplier.

Control and requests

You can review connected agents and their permissions in BUY HARD and revoke a connection. Revocation blocks future use of that connection; it does not delete the underlying company records, completed orders, supplier messages or copies held by another service. Purchasing approval and spending settings remain controlled by the account owner.

For questions or a request to access, correct or delete your information, email facundo@facundo.xyz. Facundo Lucci handles requests for Facundo LLC. We verify account ownership and manually review the request and the affected records before making changes or sharing information. A request concerning a shared company workspace may also require confirmation that you are authorized to act for that company. We consider applicable requirements and any records needed for authorized purchases, disputes or legal obligations. The current product does not offer automatic account deletion or a complete self-service company export.

Retention and protection

We retain information while needed for your account, authorized purchases, disputes or legal requirements. We review deletion requests manually, including the affected company records, purchase-attempt history and backup copies, and identify any records that need to be retained. Disconnecting an integration or archiving a stock item does not delete all associated information. Closing or ceasing to use an account does not trigger automatic deletion. We do not promise an automatic deletion period.

BUY HARD uses authenticated, company-scoped access and connection permissions to restrict access to company records. No service can guarantee that information will always be secure. We may revise this notice as the service changes and will publish the current effective date with the notice.