Skip to main content

Legal

Privacy Policy

Last updated: April 21, 2026

1. Who we are

This Privacy Policy describes how heyBonita.ai (“heyBonita,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our websites, applications, and services, including the Bonita AI experience (collectively, the “Service”).

If you have questions, contact us at cj@heybonita.ai.

2. Information we collect

Information you provide

  • Account data: such as email address, name, and authentication identifiers when you register or sign in (including via third-party identity providers where offered).
  • Content: messages, prompts, files, and other inputs you send to the Service, and outputs the Service returns to you.
  • Billing data: when you purchase a paid plan, our payment processor (currently Stripe) collects payment details and billing address. We receive limited transaction metadata (for example, subscription status and identifiers) needed to provide the Service.
  • Support communications: information you send when you contact us.

Information collected automatically

  • Device and log data: such as IP address, browser type, approximate location derived from IP, timestamps, and diagnostic logs.
  • Usage data: such as feature interactions, session duration, and error reports, to operate and improve the Service.
  • Cookies and similar technologies: we use cookies or local storage where needed for authentication, preferences, security, and analytics. You can control cookies through your browser settings.

3. How we use information

We use information to:

  • Provide, maintain, secure, and improve the Service.
  • Authenticate users and manage accounts and subscriptions.
  • Process payments and fulfill orders (via our payment processor).
  • Communicate with you about the Service, including transactional messages and (where permitted) product updates.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our terms and policies.
  • Analyze usage in aggregate or de-identified form to understand how the Service is used.

4. AI processing

To generate responses, your prompts and related context may be processed by us and by model providers we use to deliver the Service. We implement administrative, technical, and organizational measures designed to protect personal information. We do not use your conversations to train third-party foundation models unless we clearly disclose otherwise and, where required, obtain your consent.

5. How we share information

We may share information with:

  • Service providers who assist us (for example, hosting, authentication, analytics, email delivery, payment processing, and AI inference), subject to contractual obligations.
  • Payment processors (such as Stripe) to complete transactions you initiate.
  • Authorities when required by law, legal process, or to protect rights, safety, and security.
  • Business transfers in connection with a merger, acquisition, or sale of assets, where we will provide notice as required by law.

We do not sell your personal information as traditionally understood (for money).

6. Retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary based on the type of data and your settings (for example, account deletion requests). Some residual copies may persist in backups for a limited period before automatic deletion.

7. Security

We use industry-standard safeguards designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. International transfers

We may process and store information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a data protection authority. To exercise these rights, contact cj@heybonita.ai. We will respond in line with applicable law.

Where processing is based on consent, you may withdraw consent at any time (without affecting prior processing that was lawful).

10. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the “Last updated” date. For material changes, we will provide additional notice where appropriate.

12. Related policies

Terms of Service · Refund Policy