Bouncebeam Privacy Policy

This Privacy Policy explains how Bouncebeam Ltd (“Bouncebeam,” “we,” “us,” or “our”) collects, uses, discloses, transfers, stores, and protects personal data when you visit our websites, use our dashboards and product workflows, interact with our landing and content systems, authorize integrations, join events or beta programs, or communicate with our team. It applies to visitors, customers, workspace users, prospects, beta testers, partners, and authorized integration users unless a written agreement says otherwise.

For controller-level processing, such as website operations, account administration, product analytics, security, marketing, and authorized app integrations, Bouncebeam decides why and how personal data is processed. For customer-provided workspace data that we process on a customer’s behalf, Bouncebeam acts as a processor or service provider under the applicable agreement and data processing addendum (“DPA”).

This Policy is intended to be read together with any applicable order form, terms of service, DPA, cookie notice, product-specific notice, or integration authorization screen. If a signed agreement gives you stronger privacy rights for a specific service, that agreement controls for that service.

Data Controller: Bouncebeam Ltd, a company registered in England and Wales under company number 15714718, with its registered office at 20 Wenlock Road, London, N1 7GU, United Kingdom.

• Email: yigittabel@bouncebeam.co

You can contact us about privacy questions, data-subject requests, integration revocation, deletion requests, or complaints. EU and UK data subjects may also contact their local supervisory authority. UK data subjects may contact the Information Commissioner’s Office.

We collect information in the following ways:

• Information you provide. Account details, contact details, billing and subscription information, workspace settings, URLs, briefs, creative assets, uploaded files, messages, support requests, surveys, feedback, review notes, and communications with our team.
• Information collected automatically. Device identifiers, IP address, browser and device type, operating system, pages viewed, referring URLs, approximate location derived from IP address, session activity, diagnostic logs, security events, error reports, campaign attribution signals, cookie and pixel identifiers, and similar telemetry.
• Customer and workspace content. Source facts, page drafts, strategy notes, landing-page copy, generated assets, analytics inputs, optimization goals, research instructions, approval records, and other content that a customer or authorized user submits to the Services.
• Information from integrations. Data from tools, accounts, platforms, or services that you authorize, such as website analytics, search, advertising, CRM, email, calendar, customer-support, identity, payment, or social-platform integrations.
• Information from service providers and public sources. Business contact data, company information, security signals, payment confirmations, fraud-prevention signals, or public webpage content where it is relevant to the Services and permitted by law.

Sensitive personal data is not required to use Bouncebeam. Do not submit sensitive personal data unless it is necessary for your authorized use of the Services and you have a valid legal basis, all required permissions, and all required notices in place.

We use the information we collect for the following purposes:

• Provide, maintain, secure, and improve the Services.
• Create, review, personalize, test, and optimize pages, assets, workflows, recommendations, reports, and automations.
• Administer accounts, workspaces, subscriptions, billing, support, onboarding, and customer communications.
• Operate authorized integrations, including importing, reading, writing, reconciling, or measuring data that you authorize.
• Monitor performance, debug issues, detect abuse, prevent fraud, protect systems, and preserve audit records.
• Send product updates, service notices, onboarding resources, and marketing communications. You may opt out of marketing.
• Conduct product research, quality review, analytics, benchmarking, and model or workflow evaluation.
• Comply with legal obligations, enforce agreements, exercise legal rights, and respond to lawful requests.

Where the GDPR or UK GDPR applies, we rely on the following lawful bases:

• Performance of a contract. To provide services, administer accounts, process subscriptions, support users, and deliver requested workflows.
• Legitimate interests. To secure the Services, prevent misuse, improve product quality, communicate with business users, measure performance, and operate business-to-business workflows, provided those interests are not overridden by individual rights.
• Consent. For optional marketing, cookies where required, optional beta programs, or integrations that require user authorization.
• Legal obligations. To meet accounting, tax, corporate, regulatory, compliance, and lawful-request obligations.
• Vital interests and public interest. These bases are used only where legally applicable and necessary.

If you authorize a Bouncebeam LinkedIn application or another platform integration, we process the data made available by that platform only within the permissions, roles, scopes, terms, and purposes you authorize. For LinkedIn company-page workflows, this may include LinkedIn account identifiers, organization or page identifiers, company-page role context, authorized organization content, post text, media, drafts, comments, reactions, mentions, social-action metadata, follower or page statistics, share statistics, publish receipts, readback evidence, OAuth tokens, refresh tokens, expiration times, and integration logs.

We use LinkedIn integration data to draft, schedule, publish, read, reconcile, measure, secure, troubleshoot, and improve authorized Bouncebeam company-page workflows; to comply with LinkedIn developer requirements; and to maintain audit records for actions taken through the integration. We do not use LinkedIn data for third-party advertising, sell LinkedIn member or organization data, build unrelated data products from LinkedIn data, or access LinkedIn data for company pages you have not authorized.

You may revoke LinkedIn or other platform access through the platform’s own app settings where available, by removing the integration in Bouncebeam where the product surface supports it, or by emailing us. After revocation or a verified deletion request, we will stop using the integration for new actions and delete or de-identify retained integration data when it is no longer required for security, legal, audit, dispute-resolution, or backup purposes.

Bouncebeam may use automated systems, rules, models, analytics, and human review to generate drafts, score quality, detect policy risks, prepare reports, route tasks, and improve product behavior. Customer inputs, outputs, metadata, and review decisions may be processed for these purposes unless a customer agreement imposes a stricter rule.

Some workflows can affect public pages, social-platform posts, messages, or external systems. Where approval is required by product policy, law, platform rules, or customer configuration, Bouncebeam records approval and readback evidence before the action proceeds. Automated output should be reviewed for accuracy, rights, and compliance before external publication.

We may disclose information to the following categories of recipients:

• Service providers and subprocessors. Providers for hosting, cloud infrastructure, storage, analytics, security, logging, customer support, communications, payments, AI processing, quality review, and operational tooling.
• Integrations you authorize. Platforms or services you connect, such as analytics, search, advertising, CRM, email, calendar, social, identity, or payment systems. Data is exchanged according to your configuration and the platform’s authorization flow.
• Workspace members and administrators. People authorized by a customer may see workspace content, reports, approvals, logs, and configuration data.
• Professional advisors. Lawyers, auditors, accountants, insurers, and other advisors bound by confidentiality obligations.
• Authorities and safety recipients. Courts, regulators, law enforcement, or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, security, and the integrity of the Services.
• Business transaction parties. Counterparties and advisors in a merger, acquisition, financing, restructuring, due diligence process, or sale of assets, subject to appropriate confidentiality and transfer safeguards.

We do not sell personal data. We do not sell LinkedIn member or organization data. We do not disclose personal data to third parties for their independent direct marketing unless you direct us to do so or the law permits it with required notice and choice.

We retain information for as long as necessary to fulfill the purposes outlined in this Policy, provide and improve the Services, comply with legal and accounting obligations, resolve disputes, enforce agreements, and maintain appropriate business records and backups. Workspace content can be deleted or exported via in-product controls or support requests. Residual copies may remain in archives and logs for a limited period consistent with our data retention schedule and defence-of-claims requirements.

OAuth tokens, integration credentials, publish receipts, action logs, approval evidence, and security logs are retained only as long as needed to operate the authorized integration, preserve auditability, investigate misuse or errors, meet legal obligations, or resolve disputes. We may retain de-identified or aggregated data that no longer identifies a person.

Bouncebeam uses administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, access controls, credential handling practices, network and application controls, logging, monitoring, review workflows, and restricted access to production systems. Access to personal data is limited to people and providers with a business need.

No system is completely secure. You are responsible for using strong credentials, protecting authorized accounts, limiting workspace access, and telling us promptly about suspected unauthorized access, platform-token exposure, or vulnerabilities at yigittabel@bouncebeam.co.

Bouncebeam is based in the United Kingdom, and our service providers, customers, users, and integration partners may be located in other countries. We may transfer personal data to countries outside the United Kingdom, European Economic Area (“EEA”), Switzerland, or your country of residence.

Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other lawful transfer mechanisms. Copies of applicable safeguards are available upon request, subject to confidentiality and security limitations.

We and our providers may use cookies, pixels, local storage, SDKs, log files, and similar technologies to operate the website, remember preferences, measure traffic, understand product use, attribute campaigns, detect abuse, and improve performance. Some cookies are necessary for security or core functionality; others may be optional depending on your location and settings.

You can control cookies through your browser settings and, where available, through our consent or preference tools. Blocking some technologies may affect how the website or Services work.

Depending on your location and the type of processing, you may have the right to:

• Access, confirm, correct, update, or delete personal data.
• Object to, restrict, or opt out of certain processing.
• Receive a portable copy of certain personal data.
• Withdraw consent where processing is based on consent, without affecting earlier lawful processing.
• Opt out of marketing communications.
• Revoke authorized integrations, including LinkedIn app access, where applicable.
• Lodge a complaint with your supervisory authority.

Submit requests by emailing yigittabel@bouncebeam.co. We may verify your identity before responding. Authorized agents must provide proof of authority and, where required, proof that the request has been signed by the subject individual.

If we process personal data on behalf of a customer as a processor, we may refer your request to that customer or ask you to contact them directly. We will not discriminate against you for exercising privacy rights where prohibited by law.

Residents of California and certain other U.S. states may have additional rights to know, access, correct, delete, port, or opt out of certain uses of personal information. Bouncebeam does not sell personal information. We do not knowingly sell or share personal information of people under 16. We also do not use LinkedIn member or organization data for cross-context behavioral advertising.

The categories of personal information we may collect include identifiers, commercial information, internet or network activity, approximate location, professional or employment-related information, inferences, and content you submit. We use and disclose those categories for the business and commercial purposes described in this Policy.

Bouncebeam is a business service and is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy to reflect legal, technical, or operational changes. When we do, we will post the date of the latest revision and, where required, provide additional notice or request consent. The updated Policy applies from the effective date shown on this page unless another notice says otherwise.

Questions about privacy can be sent to yigittabel@bouncebeam.co or by mail to Bouncebeam Ltd, 20 Wenlock Road, London, N1 7GU, United Kingdom.