Legal Compliance

01Regulatory framework

BeBuzz operates within the legal frameworks applicable to digital marketing platforms, online payments, and consumer-facing services in the United States. As a California LLC, BeBuzz is subject to:

• California state law, including the California Consumer Privacy Act (CCPA), the California Online Privacy Protection Act (CalOPPA), the California Consumer Protection Act, and the California Department of Financial Protection and Innovation (DFPI) where applicable.
• US federal law, including Federal Trade Commission (FTC) Endorsement Guides, the Bank Secrecy Act (BSA), the Children's Online Privacy Protection Act (COPPA), and applicable Securities and Exchange Commission (SEC) rules where they apply.
• International data protection, where applicable, including the General Data Protection Regulation (GDPR) for users in the European Economic Area, the UK Data Protection Act 2018, and Brazil's Lei Geral de Proteção de Dados (LGPD).
• Industry standards, including the Payment Card Industry Data Security Standard (PCI DSS) for card data processing.

02Advertising standards (FTC)

BeBuzz complies with the Federal Trade Commission's advertising and endorsement standards, including the FTC Endorsement Guides and the FTC Act.

• Disclosure of paid partnerships. All content published through BeBuzz Campaigns must include a clear disclosure that the content is a paid partnership. Acceptable disclosures include the platform's native "Paid partnership with [Brand]" tag and the use of #ad in the first three words of the caption.
• Truthful advertising. Brands are responsible for ensuring that all claims in Campaign content are truthful, not misleading, and substantiated where required by law.
• Endorser authenticity. Creators must genuinely use or have experience with the product or service they endorse, where the endorsement implies such use.
• Material connections. Any material connection between the Brand and the Creator that may affect the credibility of the endorsement must be disclosed.

BeBuzz reserves the right to suspend or remove Campaigns or accounts found to be in violation of FTC standards or applicable advertising law.

03Data protection (CCPA, CalOPPA, GDPR)

BeBuzz protects user data in accordance with the California Consumer Privacy Act (CCPA), the California Online Privacy Protection Act (CalOPPA), and where applicable, the General Data Protection Regulation (GDPR) for EEA users.

Detailed practices, including the categories of data we collect, how we use it, and your rights, are documented in our Privacy Policy. In summary:

• Transparency. We disclose what data we collect, for what purposes, and with whom we share it.
• User rights. California and EEA users have the right to access, correct, delete, restrict, port, object to, and (where applicable) opt out of the sale or sharing of their personal information.
• Security. Data is encrypted in transit using current TLS protocols, hosted on AWS infrastructure with industry-standard controls, and protected by role-based access controls.
• Retention. Data is retained only as long as needed for the purposes for which it was collected, subject to applicable legal-retention obligations.
• Children. The Platform is not directed at children under 13. Specific protections under COPPA are described in section 7.

04Payments and money services

BeBuzz facilitates payments from Brands to Creators in connection with Campaigns and processes subscription payments for the VIP Badge. Payments are processed through licensed third-party payment processors and are subject to those processors' terms.

• Card processing is performed by PCI DSS-compliant providers. BeBuzz does not store full card numbers; tokenized references are used in our systems.
• Money transmission. Where applicable, payment activities are conducted through partners holding the relevant licenses. BeBuzz itself does not act as a bank or money transmitter outside the limits permitted by applicable law.
• State licensing. Where money-transmitter licensing is required for specific user flows, BeBuzz partners with licensed providers and complies with the requirements of the California Department of Financial Protection and Innovation (DFPI) and applicable state regulators.
• Apple Pay. VIP Badge subscriptions purchased through Apple Pay are subject to Apple's terms of service and any applicable App Store commission.

05Anti-money laundering & KYC

BeBuzz applies anti-money laundering (AML) and Know-Your-Customer (KYC) procedures consistent with the Bank Secrecy Act (BSA) and Financial Crimes Enforcement Network (FinCEN) requirements applicable to our partners and to our own user activity thresholds.

• Identity verification. Users may be required to verify their identity through documents and authentication mechanisms before initiating certain transactions, including withdrawals above defined thresholds.
• Transaction monitoring. Payment activity is monitored for patterns that may indicate fraud, money laundering, or terrorism financing.
• Sanctions screening. Users and beneficiaries are screened against US Office of Foreign Assets Control (OFAC) sanctions lists and equivalent international sanctions databases.
• Suspicious activity. Where required, BeBuzz files Suspicious Activity Reports (SARs) with the appropriate authorities.
• Recordkeeping. Transaction records are retained for the period required by law.

06Tax compliance

BeBuzz complies with applicable US tax reporting obligations. Where applicable:

• Form 1099-NEC and 1099-K. US-based Creators earning above the IRS reporting threshold in a calendar year may receive a Form 1099-NEC or 1099-K reflecting their BeBuzz earnings, as required by IRS rules.
• Sales tax / VAT. Where applicable to the location of the Brand or service, BeBuzz collects and remits sales tax, VAT, or equivalent regional taxes.
• International users. Non-US Creators may be subject to US withholding tax on certain payments. BeBuzz may require completion of IRS Forms W-8BEN or W-8BEN-E to apply any treaty rates.

Users are responsible for declaring their BeBuzz earnings to their local tax authority and meeting any individual tax obligations in their jurisdiction.

07Children's privacy (COPPA)

BeBuzz is not directed at children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA).

For users between 13 and 18 (or the age of majority in the user's jurisdiction), additional restrictions apply: campaign content cannot be targeted to minors in regulated categories (alcohol, gambling, tobacco, dating, financial products), and certain platform features are restricted to verified adults.

If you believe a child has provided personal information to BeBuzz without appropriate consent, contact us at [email protected] for prompt review and, where appropriate, deletion.

08Disclosures & reporting

BeBuzz maintains comprehensive compliance documentation including these legal pages, internal policies, and procedure manuals. We file and provide reports, disclosures, and information to applicable regulators and government authorities as required by law or in response to valid legal process.

Documentation is reviewed periodically and updated to reflect changes in regulatory requirements and industry standards. Material changes are communicated to users by email or in-product notification.

09Compliance officer

BeBuzz designates a senior member of the management team as the Compliance Officer, responsible for the design and operation of the compliance program. The Compliance Officer monitors regulatory developments, assesses their impact on BeBuzz's operations, and implements changes as required to maintain compliance.

BeBuzz also engages external legal counsel and qualified compliance consultants on specialized topics as needed.

10Enforcement & cooperation

BeBuzz cooperates with law enforcement, regulators, and government authorities in connection with lawful investigations and inquiries. Non-compliance with applicable law or these legal documents may result in account suspension, account termination, withholding of payments, or other action consistent with the Terms and Conditions and applicable law.

Users may report suspected violations of legal compliance or platform policies to [email protected]. Reports are reviewed promptly and confidentially.

11Contact

For compliance-related questions or to exercise your rights under applicable law, contact: