Privacy Policy

Bananify Creative ("we," "us," or "our") operates Bunch, an all-in-one CRM, email marketing, and sales platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and being transparent about our data practices. Please read this policy carefully. By using Bunch, you consent to the data practices described here.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and deliver email campaigns on your behalf
• Enable telephony features including the power dialer
• Authenticate users and maintain account security
• Communicate with you about your account, updates, and support
• Analyze usage patterns to improve user experience
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations

We do not sell your personal information. We may share data with:

• Service Providers: Third parties who help us operate the Service (email delivery, telephony, hosting, analytics)
• Within Workspaces: Team members within your workspace can access shared data according to their permissions
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We require all third-party service providers to respect the security of your data and to treat it in accordance with applicable law.

Bunch integrates with third-party services to provide functionality:

• Resend: For email delivery and tracking
• Twilio: For telephony and calling features
• Cloud Infrastructure: For hosting and data storage

Each of these providers has their own privacy policies governing their use of data. We encourage you to review their policies.

We implement appropriate security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Session management and authentication controls
• Access controls and permission systems
• Regular security assessments

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for a limited period for legal, backup, or audit purposes.

Email engagement data and analytics are retained to provide historical reporting. You can request deletion of specific data by contacting us.

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your data
• Export: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data

To exercise these rights, please contact us at hello@getbunch.io. We will respond within the timeframe required by applicable law.

For users in the European Economic Area (EEA), we process personal data in accordance with the General Data Protection Regulation (GDPR).

• We act as a data processor for customer data you upload
• We act as a data controller for account and usage information
• We provide tools for managing consent and data subject requests
• We support data export and deletion requests

Our lawful bases for processing include: performance of contract, legitimate interests, compliance with legal obligations, and consent where applicable.

When you use Bunch to send emails to your contacts, you are responsible for:

• Obtaining proper consent from recipients
• Providing accurate sender information
• Honoring unsubscribe requests
• Complying with applicable email marketing laws

We provide tools to help you manage consent, process unsubscribes, and maintain compliance with regulations like CAN-SPAM, GDPR, and CASL.

Bunch is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service. Your continued use of Bunch after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, please contact us at:

Bananify Creative
Email: hello@getbunch.io

For data protection inquiries in the EU, you may also contact our designated representative or your local data protection authority.