Privacy
Spotlight is a project built on the Buffer API for Buffer Commit 2026. Here is exactly what it does with your data.
Your Buffer account
When you connect, Buffer asks you to let Spotlight read your account, posts and ideas, and create posts and ideas. Spotlight only creates something in Buffer when you press a send button. Access tokens are encrypted at rest and never reach your browser. You can revoke access at any time in your Buffer settings.
Your past posts
Spotlight reads your recent sent posts once, to describe what you do and how you write. It keeps that short description, not the posts themselves.
Photos and voice notes
Photos you add are stored in Vercel Blob at long, unguessable public links, because Buffer needs a public link to publish an image. Voice notes are transcribed and then discarded; only the text you approve is kept.
AI providers
Photos, voice notes and text are processed by Google Gemini and Groq on their free tiers, which may use inputs to improve their services. Only add photos you'd be happy to post.
Deleting your data
In Spotlight, open "Edit what Spotlight knows about you" and press "Delete my data". That removes your profile, photos, moments, drafts and Buffer tokens from Spotlight. Posts you already sent stay in Buffer.
Questions? Open an issue on GitHub.