Privacy Policy
1. Information We Collect
1.1 Account Information
You can sign in with Google or with an emailed sign-in link. If you use Google, we receive from your Google account:
- Your name
- Email address
- Profile picture
- Google account ID
If you use an emailed sign-in link, we receive the email address you type.
1.2 Project Information
When you use Bundly, we collect information about your projects, including:
- Company/project name
- Website URL
- Business descriptions and details
- Generated business development packages
1.3 Product-Update Sign-Up
If you leave your email in the "Get product updates" form on our home page, we keep that address in the XT3 platform Inbox, only to write to you about Bundly, until you ask us to delete it.
1.4 Payments and Email
Paid plans are processed by Stripe. Stripe collects your card details on its own pages; Bundly does not receive or store your card number. We keep your plan, your Stripe customer reference and your payment status so we can give you access and handle refunds. We send sign-in links, receipts and account notices by email through Resend. Product emails respect your opt-out and include an unsubscribe link.
2. How We Use Your Information
2.1 Service Provision
- To create and maintain your account
- To generate business development packages
- To track usage limits based on your subscription plan
- To provide customer support
2.2 Service Improvement
- To improve our content generation algorithms
- To develop new features
- To protect against fraud and abuse
3. Information Processing and Storage
Your data is stored in a Supabase database that we run ourselves. We use OpenAI's GPT service to generate content for your business development packages: the website pages you point Bundly at and the brief you write are sent to OpenAI to build your playbook, and OpenAI processes them in accordance with its privacy practices. Your playbook stays private to your account unless you create a share link.
4. Data Retention and Deletion
You own all content you create with Bundly. You can delete your generated bundles at any time through your account. When you delete a bundle, it is permanently removed from our systems.
5. Information Sharing
We do not sell, rent, or share your personal information with third parties except as necessary to provide our services:
- Google (for sign-in)
- OpenAI (for content generation)
- Supabase (for data storage and sign-in)
- Stripe (for payments)
- Resend (for sending email)
We count anonymous page views on our public pages with our own self-hosted Umami server. It sets no cookies, sends nothing when your browser asks not to be tracked, and records only the page address without query strings, never account pages or the codes in share links. If you arrive from another website, it keeps only that site's domain, never the page you came from. Google Analytics and Microsoft Clarity load only after you accept analytics in the consent banner; if you choose essential only, neither runs. Our own self-hosted error-reporting server receives crash reports with personal data removed.
6. Security
We implement appropriate technical and organizational measures to protect your personal information:
- Secure authentication through Google or an emailed sign-in link
- Database encryption at rest
- Secure HTTPS connections
- Regular security audits
7. Your Rights
You have the right to:
- Access your personal information
- Delete your account and associated data
- Export your generated content
- Opt-out of marketing communications
8. Updates to Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the effective date.
9. Contact Us
If you have any questions about this privacy policy or our treatment of your personal information, please write to [email protected] or use our contact page.