Privacy policy

Who we are

What we collect

• Information you give us: The website address you enter and, if you join the waitlist, your email address. We also record where on Bonwa you joined the waitlist so we can understand which experience was useful.
• Basic technical information: A random session identifier, a protected hash of your IP address, approximate country, the referring website's origin, timestamps and basic events such as submitting a domain or joining the waitlist. We use these details to keep the service working, prevent abuse and understand demand.
• Aggregate usage information: Vercel Web Analytics and Speed Insights collect limited page, device, location and performance information so we can see how the site is used and improve it. We do not use advertising pixels or build cross-site profiles.

How we use it

We use the information above to:

• show the example Bonwa walkthrough you requested;
• manage the early-access waitlist;
• send the waitlist and launch emails you asked to receive;
• prevent spam, repeated submissions and misuse;
• understand aggregate usage and improve the website; and
• respond to support, privacy and deletion requests.

Where data-protection law requires a legal basis, we rely on your consent for requested waitlist communications and our legitimate interests in operating, improving and protecting Bonwa. You can withdraw from waitlist communications at any time.

We do not sell your personal information or use it for targeted advertising.

What happens to your website address

The check currently shown on bonwa.ai is an illustrative walkthrough. The domain you enter personalises that walkthrough and helps us connect your waitlist request to your website.

We do not currently send your website address or questions about it to OpenAI, Google, Anthropic, Perplexity or any other AI model provider.

If Bonwa introduces live AI-answer checks or optional connections to services such as Google Search Console, we will update this policy before those features begin processing that information.

Who handles information for us

We use a small number of service providers. Each receives only the information needed for its role:

• Vercel: website hosting, anonymous web analytics, performance measurement and bot protection.
• Neon: database hosting for submitted domains, waitlist records and related operational events.
• Resend: storing waitlist contacts and sending requested waitlist and launch emails.

We may disclose information if required by law, to protect Bonwa or others from harm, or as part of a future sale or reorganisation. If ownership changes, this policy will continue to apply unless you are told otherwise.

Cookies and analytics

bonwa_prospect_session: a first-party, HTTP-only cookie that connects your domain and waitlist submissions, prevents duplicates and supports abuse protection. It expires after 30 days.

Vercel Web Analytics does not use cookies and reports aggregate usage rather than tracking people across websites. Bonwa does not currently use advertising cookies, so there is no cookie-consent banner. If we add non-essential cookies later, we will ask for any consent required before setting them.

How long we keep it

• The Bonwa session cookie expires 30 days after it is set.
• We keep your waitlist record until you opt out, ask us to delete it, or the early-access programme has ended and we no longer need the record.
• We review submitted domains and related product events at least every 12 months and delete records we no longer need.
• Security and rate-limit records are kept only for as long as reasonably needed to prevent misuse and investigate faults.

If you ask us to delete your information, we will action the request within 30 days unless we need to keep a limited record to comply with law, resolve a dispute or protect the service. Residual copies may remain briefly in protected backups until they are overwritten.

Where it is processed

Our service providers operate internationally, so information may be processed outside the country where you live, including in the United States. Where applicable law requires it, we use provider contracts and other recognised safeguards for international transfers.

Security

We use reasonable technical and organisational measures to protect information. These include encrypted connections, restricted access to production services, one-way hashing of IP addresses, input validation, bot checks and rate limiting. No online service can promise absolute security.

Your rights

Depending on where you live, you may have the right to ask what information we hold about you, receive a copy, correct it, delete it, restrict or object to its use, or withdraw consent. You may also have the right to complain to your local data-protection authority.

Email hello@bonwa.ai to make a request. We may need to verify that the request relates to you before acting on it.

Children

Bonwa is designed for business owners and is not intended for children under 18. We do not knowingly collect personal information from children.

Changes to this policy

We will update the date at the top when this policy changes. If a change materially affects how we use waitlist information, we will provide an additional notice where reasonably possible.