Privacy Policy

We collect what we need to run the service: your account and billing details, basic website analytics, and request logs (kept for 14 days) so we can debug issues and let you audit your own usage. We don't sell your data. We don't store your full credit card details. Full details below.

Account information. When you create an account on the Bonai console and subscribe to a Bonai product, we collect the information you provide directly, such as your name, email address, and billing details. Payment processing is handled by our payment provider, Stripe, which collects and processes your payment information in accordance with their own privacy policy. We do not store your full credit card details on our servers.

Website analytics. When you visit our website, we use Google Analytics to understand how the site is used. This collects anonymous usage data such as pages visited, device and browser type, approximate location, and referring site. We do not use this data to track individual visitors or for advertising.

When you make requests to our APIs, we automatically collect certain technical information ('Log Data') to ensure service reliability, maintain security, debug issues, and prevent abuse. This data may include:

• Your IP address and approximate geographic location.
• Timestamps and request endpoints.
• The query parameters you send (for example, your search terms).
• A truncated view of the data returned in API responses.
• Usage metrics and performance data.

Request and response logs are retained for 14 days. You can review your own request logs in the Bonai console at any time.

We use the data we collect to: (a) provide, maintain, and improve our services; (b) detect and prevent fraudulent or unauthorized usage; (c) debug and troubleshoot technical issues; and (d) comply with legal obligations.

If you are located in the European Economic Area or the United Kingdom, we process personal data under the following legal bases:

• Contract: to provide the services you signed up for, including account access, billing, and support.
• Legitimate interest: to keep our services secure, debug issues, and understand how our products are used.

We do not sell your personal information. We share data only with the service providers needed to operate the service, and we contractually require them to keep it confidential and to process it only on our instructions:

• Stripe: payment processing.
• Google Analytics: website analytics.
• Amazon SES: transactional email.
• European hosting provider (Germany): server infrastructure.

We may also disclose information if required by law, in response to a valid legal request, or to protect the rights and safety of Bonai LLC and our users.

Your data is stored on servers in the European Union (Germany). Some service providers we use, such as Stripe, Google Analytics, and Amazon SES, are based in the United States and may process data outside the EU. These transfers are protected by Standard Contractual Clauses approved by the European Commission.

Bonai LLC implements commercially reasonable technical and organizational measures to protect your data from unauthorized access or disclosure. However, no transmission over the internet or electronic storage system is 100% secure, and we cannot guarantee absolute security.

We keep account data for as long as your account is active, and request logs for 14 days. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to keep it or need it to resolve an outstanding dispute.

Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; receive a copy of your data in a portable format; object to or restrict certain processing; and, where processing is based on consent, withdraw that consent.

If you are in California, you also have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights.

To exercise any of these rights, contact us at privacy@bonai.io.

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

If we are involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We may update this Policy from time to time. We will post the updated version here and update the date at the top of the page. Significant changes will be announced on our website.

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@bonai.io.