1. Information We Collect
We collect the following categories of information:
- Account data: Name, email address, organization name, and role when you create an account.
- Usage data: Pages visited, features used, timestamps, device type, browser, and IP address.
- Payment data: Billing details are collected and processed by Lemon Squeezy. We do not store your full credit card number.
2. How We Use Information
We use your information to provide and improve the Service, communicate with you about your account, send transactional emails (such as invoices and password resets), enforce our Terms of Service, and detect and prevent fraud. We do not sell your personal information to third parties.
3. Data Storage & Security
Your data is stored in MongoDB Atlas clusters with encryption at rest and in transit. We use industry-standard security practices including TLS 1.2+, regular backups, role-based access controls, and vulnerability monitoring. Access to production systems is restricted and logged.
4. Third-Party Services
We use the following third-party services to operate BKit:
- Clerk — Authentication and user management.
- Lemon Squeezy — Subscription billing and payment processing.
- Vercel — Application hosting and edge network.
- Resend — Transactional email delivery.
Each provider has its own privacy policy. We only share the minimum data necessary for each service to function.
5. Cookies
We use essential cookies to maintain your session and preferences. We do not use third-party advertising or tracking cookies. Analytics cookies (if any) are anonymized and used solely to understand aggregate usage patterns.
6. Your Rights
You have the right to access, export, and delete your personal data at any time. You can do this from your account settings or by contacting us at hello@bkit.app. If you are located in the EEA, you also have the right to data portability and the right to lodge a complaint with your local supervisory authority.
7. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Aggregated, anonymized data may be retained indefinitely for analytics purposes.
8. Changes to Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. The “Effective date” at the top of this page indicates when the policy was last revised.
9. Contact
For questions about this Privacy Policy, please contact us at hello@bkit.app.