Privacy Policy

Introduction

Bonder.us ("we," "our," or "us") operates a collaborative travel planning application (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

We collect personal information you provide directly:

• Name – to personalize your experience and identify you to trip participants
• Email Address – for account creation, authentication, and invitations

Authentication Information

You can sign up using:

• Email and password
• Google OAuth or Facebook OAuth (we receive basic profile info)

Payment and Subscription Information

When you subscribe to Pro, payments are securely processed by Stripe. We do not store or process any credit card information on our servers.

We collect and store:

• Name, email, and Stripe customer ID
• Subscription type, billing status, trial periods, and invoice history

All payment details (including credit card numbers) are handled and stored exclusively by Stripe under their Privacy Policy.

Trip and Collaboration Data

We store data necessary for collaborative trip planning, including:

• Destinations, dates, and itineraries
• Budgets and expenses
• Trip participants, roles, and invitations
• User-generated content (posts, comments, votes)

Technical and Usage Data

Automatically collected data includes:

• Device and browser information
• IP address and access times
• Log and session data
• Authentication tokens and preferences
• Website analytics via Google Tag Manager (page views, user interactions, device information)
• In-app product analytics via PostHog (actions like creating a trip or adding an itinerary item), tied to a pseudonymous account ID — never your name, email, or trip content
• Website visit counts on bonder.us via PostHog in cookieless mode — no cookies or device storage; visits are counted with a privacy-preserving hash computed on PostHog's servers

How We Use Information

We use data to:

• Provide and improve trip planning, budgeting, and collaboration features
• Authenticate users and manage accounts
• Process payments and subscriptions
• Send account and trip notifications
• Generate itinerary suggestions, trip summaries, and import assistance using AI (Google Gemini and OpenAI)
• Provide customer support
• Meet tax, accounting, and legal obligations

We do not use or share your data for third-party marketing or advertising.

Information Sharing

Within Bonder.us

• Trip participants can see your shared trip content (itinerary items, expenses, comments).
• Deleting your account will not delete shared data in trips owned by others; your profile will instead be anonymized.

Service Providers

We share data only with trusted processors that support our Service:

These providers act as data processors and may only use data for the purposes specified above.

Legal Requirements

We may disclose information if required by law or government request.

AI Assistants (Claude and ChatGPT)

You can connect an AI assistant you already use, such as Claude or ChatGPT, to your Bonder account. This is off by default and happens only if you choose to connect one. Bonder isn't made by or affiliated with Anthropic or OpenAI.

How you grant access

Connecting uses OAuth. You sign in to Bonder, review what the assistant will be allowed to do, and choose Allow access. The assistant receives an access token for your account. It never sees your Bonder password.

What a connected assistant can access

• Read the trips you're on: dates, destinations, who's going, the itinerary, saved research, travel limits such as a daily driving cap, and the expenses you can see in Bonder.
• Change trip content when you ask it to: add, edit, or remove itinerary items, save research, and log, edit, or delete expenses. It can do this only on unlocked trips where you're the Organizer or a Co-Planner, and only within your role.
• It can't see dietary, accessibility, or other written preferences. It can't make or take payments, send invitations, change who's on a trip, create or unlock trips, or change your account, email, or password.

The assistant works only with what you ask for in your conversation. Trip information it reads is sent to that assistant's provider (Anthropic for Claude, OpenAI for ChatGPT) and is handled under that provider's privacy policy and your settings there, not this one.

What we record

For each request an assistant makes, we log which tool it used, which trip it was for, whether it succeeded, how long it took, and when. We use this for security, rate limiting, and support. We don't log the content of your conversation or the text the assistant sends or receives. Itinerary items an assistant adds or edits are labeled that way in Bonder, so your group can tell them apart.

How to disconnect

In Bonder, go to Settings → Connected assistants and choose Disconnect. That assistant loses access right away, and connecting again needs a new approval. You can also remove the connector in Claude or ChatGPT, but disconnecting in Bonder is what revokes its access to your account. Deleting your Bonder account also ends all connections.

Cookies and Local Storage

We use a small number of first-party cookies and local storage entries:

We use Google Analytics cookies for website analytics and performance monitoring. We do not use advertising or marketing cookies. You can manage your cookie preferences through the cookie banner.

Data Retention

We retain data only as long as necessary to provide the Service:

• Account Data – While your account is active
• Trip Data – Retained while your account exists (you can delete trips anytime)
• Financial Records – 7 years (tax/legal compliance)
• Support Logs – 2 years (debugging and troubleshooting)

You can request deletion of your account and data at any time.

Your Rights and Choices

Manage Your Account

• View and edit your profile at any time
• Delete trips or your entire account
• Request data export by emailing [email protected]

Account Deletion

To delete your account, email [email protected]. Deletion is permanent within 30 days (subject to legal retention requirements).

Subscription Management

Manage or cancel subscriptions via the Stripe Customer Portal.

Data Security

We use industry-standard measures to protect your data:

• SSL/TLS encryption
• Hashed passwords and secure sessions
• Role-based access controls and row-level security
• PCI-compliant payment processing via Stripe
• Ongoing monitoring and security audits

No system is completely secure, but we take every reasonable step to protect your information.

International Data Transfers

Your data may be processed in the U.S. or other countries. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards provided by our vendors.

GDPR Legal Basis (EEA Users)

We process data under these legal bases:

• Contract Performance – To provide our service and support
• Legitimate Interests – To improve functionality and ensure security
• Consent – For optional features (e.g., invitations)
• Legal Obligation – For financial and compliance purposes

Your GDPR Rights

If you're in the EEA, you may:

• Access, correct, or delete your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with your local data authority

Contact [email protected] to exercise these rights.

California Privacy Rights (CCPA/CPRA)

California residents have the right to:

• Request access to personal data
• Request deletion of personal data
• Correct inaccurate information
• Know what personal data is collected
• Opt out of the sale or sharing of personal data

We do not sell or share personal information for advertising or marketing.

Requests can be sent to [email protected].

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect information from minors. If you believe a child has provided us personal data, contact us for deletion.

Changes to This Policy

We may update this Privacy Policy periodically. If changes are material, we'll:

• Update this page
• Change the "Last Updated" date
• Notify you by email (if applicable)

Contact Us

For any privacy-related questions or requests:

• Email: [email protected]
• Company: Bonder.us
• Location: Springboro, OH, United States