1. Introduction
At Bhann, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Username
- Profile information (name, bio, profile picture)
- Authentication data (managed by Clerk)
Profile Content
Content you create and publish on your Bhann profile, including:
- Cards and links you add to your profile
- Custom themes and styling preferences
- Media files you upload
Usage Data
We automatically collect certain information when you use Bhann:
- Device information (browser type, operating system)
- IP address and general location
- Usage patterns and analytics (if analytics enabled)
- Referral sources
Payment Information
Payment details are processed securely by Stripe. We do not store your full credit card information. We only retain:
- Subscription status and type
- Billing history
- Stripe customer ID (for subscription management)
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process your subscription payments
- Send you service-related notifications
- Provide customer support
- Implement our collective pricing model (tracking community size)
- Prevent fraud and abuse
- Comply with legal obligations
4. Data Sharing and Disclosure
We share your information only in these limited circumstances:
- Public Profiles: Content you publish on your profile is publicly accessible
- Service Providers: We use trusted third parties (Convex for database, Clerk for auth, Stripe for payments, Cloudflare for hosting)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In the event of a merger or acquisition
We do NOT sell your personal information to third parties.
5. Data Storage and Security
Your data is stored securely using industry-standard practices:
- End-to-end encryption for data in transit (HTTPS/TLS)
- Encrypted storage with Convex
- Regular security audits and updates
- Access controls and authentication via Clerk
- Edge computing with Cloudflare for performance and security
6. Your Rights and Choices
You have the following rights regarding your data:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete data
- Deletion: Request deletion of your account and data
- Export: Download your profile data
- Opt-out: Disable analytics on your profile
- Portability: Transfer your data to another service
7. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication and session management
- Remembering your preferences
- Analytics (only if you enable analytics on your profile)
- Security and fraud prevention
You can control cookies through your browser settings.
8. Children's Privacy
Bhann is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it immediately.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
10. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we permanently delete your data within 30 days, except where required by law to retain it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when this policy was last revised.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us at our contact page.
13. GDPR Compliance (EU Users)
If you are in the European Union, you have additional rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority