Privacy Policy

At Bublly, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. Please read this policy carefully. By using Bublly, you consent to the data practices described in this policy.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect information that identifies you personally, including:

• Name and contact information (email address, phone number)
• Company name and business information
• Billing and payment information
• Account credentials (username, password)
• Profile information and preferences

Usage Data

We automatically collect certain information when you use our Service, including:

• Device information (browser type, operating system, device ID)
• IP address and general location data
• Pages visited and features used within Bublly
• Time spent on the platform and interaction patterns
• Error logs and performance data

Cookies & Tracking Technologies

We use cookies, pixels, and similar tracking technologies to collect information about your browsing activities. These help us provide a better user experience, analyze usage patterns, and deliver relevant content. You can control cookie preferences through your browser settings.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing, maintaining, and improving our Service
• Processing transactions and sending billing information
• Personalizing your experience and delivering relevant content
• Communicating with you about updates, features, and support
• Analyzing usage to improve our products and develop new features
• Training and improving our AI assistant (using anonymized data)
• Detecting, preventing, and addressing security issues
• Complying with legal obligations

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services as agreed
• Legitimate Interests: Processing for our legitimate business purposes, such as improving services and security
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Processing required by applicable laws

4. Data Sharing & Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our Service (e.g., payment processors, hosting providers)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights and safety
• With Your Consent: When you have explicitly authorized us to share your information

5. Data Security Measures

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• SOC 2 Type II compliance for organizational security
• Regular backups and disaster recovery procedures

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our safeguards.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When your account is terminated, we will delete or anonymize your data within a reasonable timeframe, unless required to retain it for legal or legitimate business purposes.

7. Your Rights

GDPR Rights (EU/EEA Users)

If you are located in the European Economic Area, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time

CCPA Rights (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

To exercise any of these rights, please contact us using the information provided below.

8. Third-Party Services

Our Service may integrate with third-party services or contain links to external websites. We use trusted service providers for:

• Payment processing (Stripe)
• Analytics (Google Analytics)
• Cloud hosting and infrastructure
• Customer communication tools

These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

10. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Information

If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your information, please contact us:

• Email: hello@bublly.com
• Support: support@bublly.com

For GDPR-related inquiries, you may also contact your local data protection authority if you believe your rights have not been adequately addressed.