Bouncebeam Privacy Policy

This Privacy Policy describes how Bouncebeam Ltd (“we,” “us,” or “our”) collects, uses, and shares information when you visit our websites at https://www.bouncebeam.co, engage with our landing and content automation system, or interact with our services, events, and communications. It applies to marketing visitors, workspace users, beta testers, and partners unless a separate contract states otherwise.

We process personal data as a data controller when we determine the purposes and means of processing (e.g., marketing, product analytics). When we host or process customer-provided data within a workspace, we act as a data processor in accordance with the relevant agreement and data processing addendum (“DPA”).

Data Controller: Bouncebeam Ltd, a company registered in England and Wales under company number 15714718, with its registered office at 20 Wenlock Road, London, N1 7GU, United Kingdom.

• Email: yigittabel@bouncebeam.co

EU/UK data subjects may also contact us to exercise their rights or lodge complaints with their local supervisory authority.

We collect information in three primary ways:

• Information you provide. Account details, contact information, billing data, workspace configuration details, briefs, creative assets, surveys, and communications with our team.
• Information collected automatically. Device identifiers, IP address, browser type, pages viewed, referring URLs, heatmap interactions, and campaign attribution signals collected via cookies, pixels, or similar technologies.
• Information from third parties. CRM systems, ad networks, data enrichment services, or integration partners, collected according to your configurations and legal permissions.

Sensitive personal data is not required to use Bouncebeam. If you choose to upload sensitive data, you must ensure you have a lawful basis and provide any required notices to impacted individuals.

We use the information we collect for the following purposes:

• Provide, personalize, and maintain the Bouncebeam platform, including AI-generated assets, placements, and automations.
• Process transactions, manage subscriptions, and collect fees via our billing providers.
• Monitor performance, debug issues, and protect the security and integrity of our systems through logging and telemetry.
• Send product updates, onboarding resources, and marketing communications (you may opt out at any time).
• Conduct research, analytics, and benchmarking to improve accuracy, fairness, and usability.
• Comply with legal obligations, enforce agreements, and defend our legal rights.

Where the GDPR or UK GDPR applies, we rely on the following lawful bases:

• Performance of a contract (e.g., delivering services covered by an order form).
• Legitimate interests (e.g., securing services, improving features, preventing fraud).
• Consent (e.g., marketing communications, optional beta programs).
• Compliance with legal obligations (e.g., responding to lawful requests, tax reporting).

We share information with:

• Trusted vendors that provide hosting, analytics, payment processing, customer support, and security services.
• Integration partners you authorize (e.g., CRM, ad networks, data warehouses). Sharing occurs according to your selected configurations.
• Professional advisors (lawyers, auditors, insurers) bound by confidentiality obligations.
• Regulators or law enforcement when required to comply with applicable laws, court orders, or to protect rights and safety.
• Another company in connection with a merger, acquisition, financing, or sale of assets, subject to contractual safeguards.

We do not sell personal data or share it with third parties for their independent marketing purposes.

We retain information for as long as necessary to fulfill the purposes outlined in this Policy, provide and improve the Services, comply with legal and accounting obligations, resolve disputes, enforce agreements, and maintain appropriate business records and backups. Workspace content can be deleted or exported via in-product controls or support requests. Residual copies may remain in archives and logs for a limited period consistent with our data retention schedule and defence-of-claims requirements.

Bouncebeam uses encryption in transit, network segmentation, role-based access controls, log monitoring, and automation guardrails to protect information. No system is fully secure; please notify us immediately of suspected vulnerabilities or unauthorized access at yigittabel@bouncebeam.co.

We may transfer personal data to countries outside the UK or European Economic Area (“EEA”). When we do, we rely on appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms. Copies of applicable safeguards are available upon request, subject to confidentiality requirements.

Depending on your location, you may have the right to:

• Access, correct, or delete personal data.
• Object to or restrict certain processing.
• Port your data to another controller.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your supervisory authority.

Submit requests by emailing yigittabel@bouncebeam.co. We may verify your identity before responding. Authorized agents must provide proof of authority and, where required, proof that the request has been signed by the subject individual.

Bouncebeam is not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided data, contact us and we will delete it promptly.

We may update this Privacy Policy to reflect legal, technical, or operational changes. When we do, we will post the date of the latest revision and, where required, provide additional notice. Continued use of the Services after an update indicates acceptance of the revised Policy.

Questions about privacy can be sent to yigittabel@bouncebeam.co or by mail to Bouncebeam Ltd, 20 Wenlock Road, London, N1 7GU, United Kingdom.