At Bandio, PBC ('the company', 'we', or 'us'), we respect your privacy and are committed to protecting it through our compliance with this privacy policy ('Policy' or the 'Privacy Policy'). This policy describes the types of information we may collect from you or that you may provide when you use our product, Bandio ('the service', 'the website', or 'product'), and our practices for collecting, using, maintaining, protecting, and disclosing that information. Your use of the Product and Services and any information you provide on the Services are subject to the terms of this Privacy Policy.
We collect Personal Information you provide to us, as well as information collected automatically as described below. For the purpose of this policy, Personal Information is defined as information that identifies, relates to, or could reasonably be linked with or describes an individual or household, either directly or indirectly.
The product or service collects personally identifiable information from users, including personal data like the email address a user uses to register with the service. The purpose for collecting personal data from the user of the product or service is for account management, accessing the services, providing support to you, and enabling app functionality. Additionally, some types of data are collected automatically from users of the product or service including product interactions, usage, and diagnostic data such as IP address. The purpose for collecting usage data from the user of the product or service is for security and compliance, analytics, and app functionality.
The website collects only limited data as users cannot create or upload content other than an email address. The company will not combine data collected from users with additional data from other third-party sources.
Collection or use of data is limited to the purpose for which it was collected. This includes: Service delivery (such as provide, operate and improve the Service and our business), Research, Marketing, Compliance, and Retention.
Data is not collected by the product or service for the purpose of tracking. Partners and third-parties may not create data profiles for personalized advertisements. Data is deleted when no longer necessary. A user's data is deleted upon account cancellation or termination.
Collected information is not shared with third parties, except as disclosed in this policy. Personal information is not shared for third-party marketing. Personal information is not sold or rented to third parties. Third-party services such as Webflow and Hubspot are used to support the website and may process some user information in order to provide the services. This includes app functionality and account management. User information can be transferred to a third party in the event of a merger, acquisition, or bankruptcy. Personal information is not displayed publicly. Data is not collected by third-parties for the purpose of tracking.
Currently user information is used to operate the website, and notify users of updates to the products via email. Users can opt out of email notifications at any time, except those that are required to provide service and account related information. User submitted emails may be used for the purposes of marketing the services however, users can opt-out of marketing emails at any time and personal information used for marketing is not shared with third parties. The website does not have any contextual advertising, personalized advertising, or advertising profiling.
The Service may contain links to websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or other online services that are not associated with us. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. Third-party login is not supported for our Products and Services.
Reasonable security practices are used to protect data. Access to user information is limited. All data in transit is encrypted. All data is stored in an encrypted format. Users are provided notice in the event of a data breach.
This policy may change from time to time. We will email you if the context in which data is collected changes.
Users can contact us with questions or privacy requests at privacy@bandio.com.
Except as otherwise provided, this section applies to residents of specific regions where they have privacy laws applicable to us that grant their residents the rights described below.
For purposes of this section, “personal information” has the meaning given to “personal data”, “personal information” or similar terms under the applicable privacy laws of the state in which you reside. Please note that not all rights listed below may be afforded to all users and that if you are not a resident of the relevant region, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.
In some cases, we may provide a different privacy notice to certain categories of residents of these regions, such as job applicants, in which case that notice will apply with respect to the activities it describes instead of this section.
Verification: Upon receipt of your request, we will initiate the identity verification process to confirm that you are the individual for whom we hold information in our system. This verification procedure necessitates your cooperation in supplying relevant information, allowing us to compare it with the details you previously furnished. Depending on the nature of your request, we may request specific information to align with our existing records, or we may reach out to you using a previously provided communication method (such as phone or email). In certain situations, alternative verification methods may be employed based on the circumstances.
Any personal information disclosed in your request will solely be utilized for the purpose of confirming your identity or validating your authority to make the request. We will make every effort to minimize the need for additional information for verification purposes. However, should it be impossible to verify your identity with the existing information in our records, we may request additional details to ensure security and prevent fraud. Any supplementary information you provide for verification will be promptly deleted upon the completion of the verification process.
Authorized Agents: Your authorized agent may be able to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.
Access: You can request a copy of the personal information that we have collected about you.
Correction: You can request that we correct inaccurate personal information that we have collected about you.
Deletion: You can request that we delete your personal information. Please note that once we process a deletion request, we may be unable to provide access or support to any past products or services.
End users must opt-in for their personal information to be sold or shared with third parties, indicating that they have control over the sharing, selling, or disclosure of their data. You have the right to request details on the personal information that we sold, shared, or disclosed to a third-party for a business purpose.
The product is intended for parents and guardians to register accounts and is not intended to collect any information from children under 13 years of age or teenagers under 18 years of age. If it is discovered that information was collected from children under 13 years of age without parental consent it will be deleted.
