BonsAI Blueprint
Privacy Policy

(How we use your data)

Last Updated: October 22, 2025

Welcome to BonsAI Blueprint ("we," "us," or "our"). We are committed to protecting your privacy and the privacy of your customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and all-in-one conversational platform (collectively, the "Services").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access or use the Services.

1. Information We Collect

We collect information in a few different ways:

A. Information You (Our Client) Provide to Us:

Account Information: When you sign up for our Services, you provide us with personal information, such as your name, business name, email address, phone number, and billing information (including credit card details).
Communications: If you contact us directly for support or other inquiries, we may receive additional information about you, such as the contents of your message and any attachments.

B. Information We Process on Your Behalf (Your End-Customer Data):

Our platform is a tool for you to manage conversations with your leads and customers ("End-Customers"). In providing our Services to you, we process information you and your End-Customers provide:

Contact Information: Names, phone numbers, and email addresses of your End-Customers that you import or that are captured by our tools.
Conversation Data: The content of all communications sent and received through our platform, including SMS text messages, Facebook messages, Instagram DMs, Google Business Chat, and webchat logs.
Reputation Data: Customer reviews and feedback submitted through our review request feature.
Payment Data: Information required to process transactions via our Text-2-Pay or Tap-2-Pay features, which may include credit card information and billing details. This data is typically handled directly by our third-party payment processors.

C. Information We Collect Automatically:

Usage Data: We automatically collect information about how you and your authorized users interact with our Services. This includes IP addresses, browser type, device information, pages viewed, and the dates/times of your interactions.
Cookies and Similar Technologies: We use cookies to operate and improve our Services, store your preferences, and analyze platform usage.

2. How We Use Your Information

We use the information we collect for the following purposes:

A. To Provide and Manage Your Service:

To create and manage your account, process your payments, and provide you with customer support.
To operate the core functions of the platform, such as sending and receiving messages, managing contacts, and tracking conversations.
To enable features like Missed-Call Text-Back, AI-powered conversational responses, and automated nurturing sequences.
To process payments from your End-Customers on your behalf.
To send you service-related announcements, billing reminders, and technical notices.

B. On Your Behalf to Serve Your End-Customers:

We use End-Customer data only as directed by you. Our AI models may analyze conversation data to provide insights, suggest replies, or automate responses, but these actions are part of the Service you subscribe to.
We act as a "data processor" for this information. You, our Client, are the "data controller." This means you are responsible for ensuring you have the legal right and necessary consents (e.g., TCPA compliance for texting) to collect and process your End-Customers' data.

C. For Improvement, Safety, and Marketing:

To analyze usage trends to improve our Services and develop new features.
To protect against fraud, spam, and abuse.
To market our Services to you (our Client). You may opt out of marketing communications at any time.

We will never use your End-Customer data to market our services to them or sell this data to any third party.

3. How We Share Your Information

We do not sell your personal information or your End-Customer data. We may share information in the following limited circumstances:

Third-Party Service Providers: We use service providers to help us operate our business. These include:
- Telephony/SMS Providers: To send and receive text messages.
- Cloud Hosting Providers: To store our data (e.g., AWS, Google Cloud).
- Payment Processors: To handle your subscription payments and your End-Customers' payments (e.g., Stripe).
- Email Service Providers: To send you service and marketing emails. These providers are only given access to the information necessary to perform their services and are contractually obligated to protect it.
Legal Compliance: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

4. Data Security

We implement reasonable administrative, technical, and physical security measures to protect the information we process. This includes using SSL encryption for data in transit and securing our data at rest. However, no electronic transmission or storage solution is 100% secure, and we cannot guarantee its absolute security.

5. Data Retention

We retain your Client account information for as long as your account is active and for a reasonable period thereafter in case you decide to re-activate the Services.

We retain your End-Customer data on your behalf for as long as your account is active. If you close your account, we will delete this data in accordance with our standard procedures, unless required to retain it for legal or compliance purposes.

6. Your Data Rights and Choices

A. For Our Clients (Business Users):

Account Information: You can access and update your account information at any time through your account settings.
Marketing Communications: You can opt out of receiving promotional emails from us by using the "unsubscribe" link in those emails. You can opt out of receiving promotional texts at any time simply by replying with STOP. Message and data rates may apply.
Data Deletion: You can request to close your account and delete your data by contacting us.

B. For Your End-Customers:

As we are a data processor, your End-Customers who wish to exercise their data rights (such as access, correction, or deletion) should contact you (the business) directly. We will assist you in responding to these requests as required by law.

7. Children's Privacy

Our Services are not intended for or directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the email address specified in your account) or by means of a notice on our website prior to the change becoming effective.