At Bamboo Punch (operated by Hijaz Enterprises Inc.), we take your privacy seriously. This policy describes how we collect, use, and protect your data across our web application and marketing sites.
1. Information We Collect
Data Sovereignty
Bamboo Punch (Hijaz Enterprises Inc.) is built on a foundation of data isolation. We process your marketing data to power our AI, but we do not sell your Brand DNA or private content.
In addition to account details, we collect:
Work Assets: Images, videos, and text inputs you provide for AI processing.
Session Data: We use local storage and secure session tokens to maintain your login state.
Platform Connections: When you connect social media accounts, we store only the necessary OAuth tokens required to publish content on your behalf.
2. How Your Data is Used
We use your information to provide our core AI services, specifically:
AI Orchestration: Processing your inputs through our AI engines (e.g., Google Gemini) to generate marketing content.
Workflow Personalization: Using your Brand Voice and Industry data to tailor AI outputs.
Service Improvements: Analyzing anonymized usage patterns to optimize our credit system and model performance.
3. Data Sovereignty and Security
We implement rigorous security protocols to protect your identity:
Encryption: All data transmitted between your browser and our n8n/Supabase infrastructure is encrypted via SSL/TLS.
R2 Storage: Your media assets are stored in secure, private buckets (Cloudflare R2) and are only accessible via authenticated session tokens.
4. Third-Party Sharing and Billing Agent
We only share data with third parties necessary to operate the Service:
AI Providers: Your prompts are sent to AI providers (like Google) for generation. These providers do not use your data to train their public models based on our enterprise agreements.
Social Media APIs: Content is shared only with platforms you explicitly connect (e.g., Facebook, Instagram, LinkedIn).
Billing Agent: All payment processing and subscription management are handled entirely by Stripe. Stripe acts as our secure billing agent, and we do not store raw credit card data on our servers.
5. Your Rights and Deletion
You have the right to access, correct, or delete your data at any time. If you choose to delete your account, all associated media assets and database records will be permanently purged from our active systems within 30 days.
6. Changes to This Policy
We may update this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the new Privacy Policy.