Privacy Policy

1.1 Information You Provide to Us

We collect information you provide directly, including:

• Account information. When you create an account, we collect your name, email address, and company name.
• Billing information. When you subscribe to a paid plan, our third-party payment processor collects your payment card details and billing address on our behalf. We do not store payment card numbers. Our current payment processor is identified on our Subprocessor List.
• Communications. When you contact us for support, send us email, or otherwise communicate with us, we collect the content of those communications.

1.2 Information Generated Through Your Use of the Service

We automatically collect certain information when you access or use the Service, including:

• Usage data. API request activity, feature usage patterns, and interaction with the Service.
• Log data. IP addresses, browser type, device information, operating system, referring URLs, and access timestamps.
• Analytics data. We use self-hosted, cookieless analytics (Umami) on our website to understand how visitors use the site. This analytics tool does not use cookies, does not collect personal data, and does not track visitors across websites.

1.3 Data Processed Through the Service

You may direct messages, reports, payloads, and other content to or through the Service as part of your use of it (“Customer Data”). We process Customer Data on your behalf and in accordance with your instructions. The specific contractual obligations governing Customer Data are set forth in our Data Processing Addendum.

1.4 Aggregate Data

We may derive de-identified, aggregated data from the categories described above that cannot reasonably be used to identify any individual or customer. Aggregate data is owned by Banche Labs as described in the Terms of Service.

We use the information we collect for the following purposes:

• Providing the Service. Operating, maintaining, and delivering the features and functionality of the Service.
• Billing and transactions. Processing payments, managing subscriptions, and sending transaction-related communications.
• Communications. Responding to your inquiries, providing customer support, and sending account notifications and service updates.
• Improvement and development. Analyzing usage patterns to improve, develop, and enhance the Service.
• Security. Detecting, preventing, and addressing fraud, abuse, security incidents, and technical issues.
• Legal compliance. Complying with applicable laws, regulations, and legal processes.

We may send you marketing communications about the Service with your consent. You may opt out of marketing communications at any time by using the unsubscribe mechanism included in each message or by contacting us.

Aggregate Data

We may use de-identified, aggregated data for any business purpose, including analysis, research, and service improvement. We will not attempt to re-identify any individual or customer from aggregate data.

We do not sell personal data.

We may share your information in the following circumstances:

• Service providers. We share information with third-party service providers who perform services on our behalf, such as hosting, payment processing, and analytics. These providers process data under contractual obligations that require them to protect your information and use it only for the services they provide to us. A list of subprocessors that handle Customer Data is maintained on our Subprocessor List page.
• Business transfers. If Banche Labs is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your information.
• Legal requirements. We may disclose your information in response to lawful requests by law enforcement or government agencies, or as otherwise required by applicable law, regulation, or legal process. We may also disclose information where we believe it is necessary to protect the rights, property, or safety of Banche Labs, our users, or others.

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your account is terminated, Customer Data is deleted in accordance with the timeline specified in the Data Processing Addendum.

De-identified, aggregate data is not subject to deletion upon account termination and may be retained indefinitely.

Your information may be processed in any country where Banche Labs or its subprocessors operate. These countries may have data protection laws that differ from the laws of your jurisdiction.

For customers who require specific transfer mechanisms under applicable data protection laws (such as Standard Contractual Clauses under the GDPR), these are addressed in the Data Processing Addendum.

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

For information about how we use cookies and similar technologies, please see our Cookie Policy.

You may request access to, correction of, or deletion of your personal data by contacting us using the information in Section 12. We will respond to your request within a reasonable timeframe consistent with applicable law.

For rights specific to the GDPR (such as data portability, restriction of processing, objection to processing, and the right to lodge a complaint with a supervisory authority), the Data Processing Addendum and applicable law govern.

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal data we collect about you and how it is used and shared.
• The right to request deletion of your personal data.
• The right to opt out of the sale of your personal data. We do not sell personal data.
• The right to non-discrimination for exercising your privacy rights.

To exercise these rights, please contact us at privacy@bouncehouse.cloud.

The Service is not directed to anyone under 16 years of age. We do not knowingly collect personal data from anyone under 16. If we become aware that we have collected personal data from a person under 16, we will take steps to delete that information promptly. If you believe that someone under 16 has provided personal data to us, please contact us at privacy@bouncehouse.cloud.

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page indicates when this Privacy Policy was last revised.

Your continued use of the Service after any changes are posted constitutes your acceptance of the revised Privacy Policy.

If you have questions about this Privacy Policy or our data practices, please contact us at:

Banche Labs, Inc.
Email: privacy@bouncehouse.cloud