Privacy policy
We store your account details, the brands and questions you ask us to track, and the answers and citations the engines return. We send your tracked questions to Perplexity and your payments to Stripe. We do not sell anything to anyone.
Read this first. This is a plain-language draft written from
the database schema and the code as they actually are on 20 September 2026. It
is not legal advice and it has not been reviewed by a lawyer. The owner should
have it reviewed before anyone relies on it. Passages marked
[OWNER TO CONFIRM: …] are facts we could not source from the
system itself, and they must be filled in rather than guessed.
Who we are
Bungad AEO is an Answer Engine Optimization subscription. The marketing site is
bungad.com and the application is app.bungad.com.
- Registered entity:
[OWNER TO CONFIRM: registered entity name and, if any, its registration number] - Registered address:
[OWNER TO CONFIRM: registered business address] - Contact for anything on this page: hello@bungad.com
- Data protection contact:
[OWNER TO CONFIRM: whether a separate data protection contact or officer is required and who it is]
What we store, field by field
This list is taken from the application database, not from a template. If a field is not here, we do not have it.
| What | Exactly which fields, and why we have them |
|---|---|
| Your account | Email address, name, a bcrypt hash of your password, your role in the organisation, the date the account was created, and the date the email address was confirmed if it ever is. This is what lets you sign in and what a monthly report would be addressed to. |
| Your organisation | Organisation name, a URL slug and the plan it is on. This is what groups accounts, brands and billing together. |
| Billing | A Stripe customer id, a Stripe subscription id, the subscription status, the date the current period ends, and whether the subscription is set to lapse at that date. Card numbers never reach us. |
| Brands you track | Brand name, domain, an optional description, and the names and domains of any competitors you add. This is whose name we look for in an answer. |
| Questions you track | The text of each question, the buying intent you tag it with, and whether it is active. These are the questions we send to the engine. |
| What the engine answered | The full answer text, which engine produced it, whether your brand was named, where it appeared among the brands named, a sentiment label, how long the call took, and any error. A score means nothing without the answers behind it. |
| What the engine cited | Each cited URL, its domain, its title, its rank in the list, and whether it is your own domain. Citation share is computed from these rows. |
| Runs and reports | When a check started and finished, whether it was manual or scheduled, the score and metrics computed from it, the actions we recommend, and for a monthly report its summary, its metrics and the addresses it was sent to. |
| Email plumbing | A SHA-256 hash of any email confirmation link we issue — never the link itself — so the link can only be used once, plus a list of addresses a provider has refused, so they are not mailed again. |
| Stripe events | The id and type of each webhook event Stripe delivers, and when we finished handling it, so a redelivered event is not processed twice. |
Two things are worth stating in the negative, because they are the ones people assume. We never see or store a card number, expiry date or security code — those go straight to Stripe from your browser. And we do not build a profile of you, do not run behavioural advertising, and do not sell, rent or share your data with anyone for their own purposes.
The free visibility check
The check at app.bungad.com/check needs no account and asks for no
personal details. You type a domain; we ask the engine what the site is, then
ask three buyer questions in that category and count what comes back.
- What is stored: the domain checked, the category the engine derived, the questions we asked, the counts and score we computed, and the domains the engine cited instead.
- What is deliberately not stored: the engine's answer text. The check keeps the measurement and discards the prose, so nothing an answer could be steered into saying becomes content we host.
- Your IP address is not written to the database. The daily limits are counted against a keyed one-way HMAC of it, which cannot be turned back into an address. The raw address exists only transiently in server memory, and in our hosting provider's own request logs, which we do not control.
- Results are cached and shared. A domain checked in the last seven days is served from the stored run rather than asked again, so anyone who checks the same domain inside that window sees the same stored result. The page always shows when it was measured.
- It is capped. There are daily ceilings per address, per site and across the whole service, because every fresh check costs us money at the engine.
Anyone can check any domain, including yours. The check is public and unauthenticated, so a result may exist for a domain you own without you having asked for it. It contains only what a public AI answer already says about that category. If you want a stored result removed, email hello@bungad.com.
Who else sees your data
Four companies process data on our behalf, and one more receives your IP address simply because a page loads a font from it. There are no others.
| Who | What reaches them | Why |
|---|---|---|
| Perplexity | The text of the questions we run for you, under our API key. Not your name, your email or your account | It is the engine that answers. Their own terms govern what they do with a request, and we do not control that |
| Stripe | Your payment details, which you give to Stripe directly, plus your email address and the plan you chose | Stripe takes the payment and is the authority on your subscription |
| Amazon Web Services | Everything in the storage table further up this page. The database runs on AWS RDS PostgreSQL in the ap-southeast-1 region, which is Singapore |
It is where the data lives |
| Vercel | Every request to this site and to the app, including your IP address and browser details, in their platform request logs | They host and serve both sites |
| Google Fonts | Your IP address and browser details, when a page loads its typefaces | The site loads two typefaces from Google's font CDN. Nothing else on this site calls a third party |
There is no email provider configured yet. No message has ever been sent from this system. The monthly report is written and tested but dormant, and the confirmation-email machinery cannot deliver, because no provider key exists. When one is added, that provider becomes a fifth company processing data on our behalf, and it will hold a copy of every message sent to you, including its subject and its contents. This page will say so before that happens.
Cookies
We set one cookie, and only after you sign in.
-
bungad_session— a signed token carrying your user id, organisation id, email address and name. It isHttpOnly, is sent only with same-site navigations, is markedSecurein production, and expires after fourteen days. Signing out deletes it.
That is the entire list. This marketing site carries no analytics, no tag
manager, no advertising pixel and no third-party script of any kind — the only
script on the page sets the year in the footer. We do not ask for cookie consent
because there is nothing to consent to beyond the sign-in cookie, which is
strictly necessary for the app to work.
[OWNER TO CONFIRM: whether the applicable law still requires a cookie notice on that basis]
There is no mailing list and no newsletter. The only mail this system is built to send is the monthly report for a brand you track, and it has never sent one, because no email provider is configured. When sending starts, the way to stop receiving reports will be to reply to hello@bungad.com and ask — there is no one-click unsubscribe endpoint yet, and we would rather say so than imply machinery that does not exist.
Where the data is and how it is protected
- The database is AWS RDS PostgreSQL in
ap-southeast-1(Singapore), encrypted at rest, and reached over TLS with a pinned Amazon certificate authority. - Passwords are stored as bcrypt hashes at cost factor 12. We cannot read your password and cannot tell you what it is.
- Email confirmation links are stored as SHA-256 hashes, so a database dump contains nothing that can confirm an address.
- Visitor IP addresses used for rate limiting are stored only as a keyed HMAC, never in the clear.
- Database backups are whatever AWS RDS is configured to take for this database, and we will not describe them more precisely than we can check.
[OWNER TO CONFIRM: whether automated backups are enabled, the retention window, and where they are held] - Hosting is Vercel; secrets are held in Vercel's encrypted environment store and never in the source repository.
We are a very small operation and we will not pretend otherwise: there is no security certification, no formal security review process and no signed data processing agreement on offer today. If your procurement needs those, we are not yet the right supplier, and that is a fair reason to buy elsewhere.
How long we keep it
Honestly: nothing in the system deletes anything on a schedule today. Account
data, brands, questions, runs, answers and citations are kept for as long as the
account exists, because the product is a trend over months and a deleted run is a
hole in it. Free-check rows are kept after their seven-day cache window expires,
and the daily quota counters are per-day rows keyed by a one-way hash.
[OWNER TO CONFIRM: the retention period to commit to, and whether an automatic deletion job should be built]
Deleting your data
Email hello@bungad.com and ask. There is no self-service delete button in the app today, so that mailbox is the only route. Deleting an organisation removes its users, brands, questions, runs, answers, citations and reports, because those rows are tied to it and go with it. Stripe keeps its own record of payments you made, which we cannot delete for you and which their retention terms govern.
Your rights
Which rights you have depends on where you live and which law applies to us, and
that is exactly the kind of fact this draft must not invent.
[OWNER TO CONFIRM: which privacy laws Bungad AEO is subject to — the owner is based in the Philippines, so the Data Privacy Act of 2012 is likely, and customers elsewhere may bring the GDPR or similar with them]
Independently of that, and as a matter of how we intend to behave: ask us for a copy of what we hold about you and we will send it; tell us something is wrong and we will correct it; ask us to delete your account and we will.
Children
This is a business product. It is not directed at children and we do not
knowingly collect data about anyone under
[OWNER TO CONFIRM: the minimum age under the applicable law].
Changes to this policy
The date at the top is the date this page last changed. If a change materially affects what we collect or who we send it to, we will email account holders rather than quietly update the page — once there is an email provider able to send that message.
Common questions
What personal data does Bungad AEO store?
Your account email address, your name, a bcrypt hash of your password, your organisation name, the brands you track with their domains, the questions you ask us to track, and the answers and citations the engines return for those questions. We never store payment card details: Stripe holds those, and we keep only a Stripe customer id and the status of your subscription.
Which AI engines do you send my tracked questions to?
Perplexity, and only Perplexity. It is the one engine we hold an API key for. Adapters for OpenAI and Anthropic exist in the code but are not keyed, so nothing is sent to them, and Gemini is not built at all.
Does the free visibility check store anything about me?
It stores the domain that was checked, the category the engine derived for it, the questions we asked and the counts we measured. It does not store your IP address: the daily limits are keyed by a one-way HMAC of it instead. A stored result is reused for seven days, so anyone who checks the same domain inside that window is shown the stored run rather than a fresh one.
Do you use tracking or advertising cookies?
No. This marketing site carries no analytics, advertising or tracking scripts at all. The app sets one cookie, bungad_session, which holds a signed session token and lasts fourteen days. Web fonts are loaded from Google Fonts, so Google receives your IP address and browser details when a page loads.
How do I delete my account and my data?
Email hello@bungad.com and ask. There is no self-service delete button in the app today and nothing deletes data on a schedule, so that mailbox is the only route. We will tell you when it is done.