How we collect, use, and protect your information
BnBDetector (https://bnbdetector.com) values your privacy. This policy explains how we collect, use, and protect your information when you use our property analysis service.
1. Information We Collect
Personal Data
We collect the following personal information:
- Email addresses and profile information when you sign up through Google authentication via NextAuth.js
- Limited billing information processed through Polar.sh for subscription management
- Property addresses that you submit for BnBIndex analysis
Non-Personal Data
We collect:
- Cookies and IP addresses to track website usage and provide analytics
- Usage data including detection credits consumed, subscription tier, and service interaction patterns
- Technical data such as browser type, device information, and access times
2. Use of Information
Personal Data
Your personal information is used to:
- Manage your account and subscription
- Provide access to BnBIndex reports and analysis
- Send service-related communications and updates
- Process payments through Polar.sh
- Provide customer support
Non-Personal Data
Non-personal data is used to:
- Analyze website traffic and user behavior
- Improve our AI algorithms and service performance
- Generate business insights and analytics
- Enhance user experience and platform functionality
Property Address Data
- Used solely to generate BnBIndex scores and reports
- Stored long-term because it is necessary for service delivery
- Not shared with third parties except as required for analysis
3. Sharing of Data
We do not sell or trade your personal data. We may share limited data with trusted third-party service providers who assist in delivering our services:
- Google (NextAuth.js) for secure authentication
- Polar.sh for payment processing and subscription management
- Analytics providers for website performance tracking
These providers process data strictly on our behalf and are bound by confidentiality agreements.
4. Email Communications and Tracking
We use third-party email providers to send transactional and service-related emails. These emails may include tracking technologies (such as tracking pixels or redirect links) to monitor:
- Email delivery status
- Email opens and engagement
- Link clicks and user interaction
This data helps us improve communication effectiveness and understand engagement with our platform.
5. Data Retention
- Account data: Retained for the duration of your active subscription and up to 30 days after cancellation
- Property analysis history: Retained for the duration of your active subscription and up to 30 days after cancellation
- Usage analytics: Aggregated and anonymized data may be retained indefinitely for service improvement
- Payment records: Retained as required by financial regulations and Polar.sh's policies
6. Cookies
We use cookies to:
- Maintain your login session
- Track website usage for analytics
- Remember your preferences and settings
- Improve your user experience
You can disable cookies in your browser settings, but doing so may limit your access to certain features of our service.
7. Security
We implement reasonable security measures to protect your personal and non-personal data from unauthorized access, disclosure, or misuse, including:
- Encrypted data transmission (HTTPS)
- Secure authentication through Google OAuth
- Regular security assessments
- Limited access controls for our team
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. International Data Transfers
As our service operates globally, your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
9. User Rights
You have the right to:
- Access your personal data and obtain copies of information we hold about you
- Modify or update your account information at any time
- Delete your account and associated personal data
- Restrict processing of your data in certain circumstances
- Data portability - receive your data in a structured, commonly used format
- Object to certain uses of your data
To exercise these rights, contact us at [email protected].
10. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.
11. Regional Privacy Rights
European Economic Area (EEA) and UK Users
If you are located in the EEA or UK, you have additional rights under GDPR and UK data protection laws, including those outlined in Section 9 above.
California Residents
California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.
12. Updates to Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the updated policy.
13. Third-Party Links and Services
Our service may contain links to third-party websites or integrate with external services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.
14. Contact Information
For questions about this Privacy Policy, data protection concerns, or to exercise your privacy rights, please contact us at:
Email: [email protected]