Last updated: June 2025
Short version: We collect only what's needed to run BNDRY. We don't sell your data or the data of people who message you. You can delete everything anytime.
We collect information you provide directly: your name, email address, phone number, and account credentials. When you use BNDRY's auto-reply features, we also collect the phone numbers and email addresses of contacts who message you, along with the content of those messages, solely to deliver and log your auto-replies.
We collect usage data such as which features you use, when away profiles are active, and analytics about auto-reply volume to improve our service.
We use your information to: (1) operate and deliver the BNDRY service, including sending auto-replies on your behalf; (2) send you account notifications and product updates; (3) improve our product through aggregate analytics; (4) process payments through Stripe; (5) comply with legal obligations.
We do not sell your personal information or the contact information of people who message you.
BNDRY sends automated SMS messages on your behalf when you activate away mode. Message frequency varies based on how many people contact you. Message and data rates may apply. Reply STOP to opt out at any time. Reply HELP for help. For support, visit bndry.online or email support@bndry.online.
No mobile information, including phone numbers and opt-in/consent data, will be shared with third parties or affiliates for marketing or promotional purposes. Mobile information is used solely to operate the BNDRY auto-reply service as described in this policy.
Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. We use row-level security to ensure your data is only accessible by you. Passwords are hashed using bcrypt. All data in transit is encrypted with TLS 1.2 or higher.
BNDRY integrates with the following third parties to deliver its service:
• Telnyx — SMS delivery • Stripe — payment processing • Google — Gmail OAuth and Calendar sync (when you enable it) • Supabase — database and authentication • Vercel — hosting
Each of these services has its own privacy policy. We only share data with them as necessary to deliver our service.
You can request access to, correction of, or deletion of your personal data at any time by emailing support@bndry.online. You can delete your account from Settings → Profile.
If you are in the European Economic Area, you have rights under GDPR including the right to erasure, portability, and objection to processing.
We retain your account data for as long as your account is active. Auto-reply logs are retained for 12 months by default. When you delete your account, your data is permanently deleted within 30 days.
For privacy questions or requests, contact us at support@bndry.online