Privacy Notice

Bundata is an AI-powered document processing platform for teams. We help organizations upload documents (such as PDFs and text files), extract structured fields, generate embeddings for semantic search, index content for retrieval, and power workflows and AI-assisted answers—all in a multi-tenant software-as-a-service environment.

This Privacy Notice explains what personal information and customer content we process, why we process it, and the choices you have. If you use Bundata on behalf of an organization, that organization may be the controller of certain data and we may act as a processor under their instructions; this notice describes our practices in both cases at a high level.

We collect the categories below depending on how you interact with Bundata.

Account and profile data. Name, email, organization name, role, authentication identifiers (including SSO where enabled), billing contact details, and similar information you or your admin provide when creating or managing an account.

Uploaded content and customer data. Files and text you or your users submit for processing, extracted outputs (for example structured "smart bites"), schemas and configuration, vector representations derived from your content, workflow definitions, agent prompts that reference your materials, and related metadata (timestamps, IDs, confidence scores).

Usage and product telemetry. Feature usage, approximate volumes (such as document counts or API calls within plan limits), errors, performance metrics, in-product events, and similar operational data needed to run and improve the service.

Technical and log data. IP address, device and browser type, general location derived from IP, diagnostic logs, security signals, API request metadata (endpoints, timestamps, correlation IDs), and records needed for abuse prevention and support.

We do not intentionally collect sensitive categories of personal data unless you choose to upload them in your documents; you are responsible for lawful grounds to process such information where required.

Provide and operate the service. Authenticate users, isolate tenants, run extraction and embedding pipelines, store and retrieve vectors, execute workflows and agents you configure, enforce plan limits, provide support, and communicate about the service (including transactional notices).

Improve the product. We use aggregated or de-identified usage patterns and feedback to understand reliability and usability. We do not use your uploaded customer content to train generalized machine learning models for other customers unless we tell you otherwise in writing (for example under a separate enterprise agreement with explicit opt-in).

Security and abuse prevention. Monitor for fraud, misuse, and attacks; investigate incidents; enforce our terms; comply with lawful requests; protect the rights and safety of users and the public.

Document transformation. When you submit content, Bundata parses documents, applies your schemas, and produces structured outputs suitable for downstream systems, search, and agents.

Embeddings and retrieval. We may create numerical vector representations of text or structured segments to enable semantic search, similarity, and retrieval-augmented generation within your workspace. Embeddings are used to operate features you enable—not to sell your documents as training data for unrelated models by default.

Model providers. Some AI features may call third-party inference APIs. When we do, we configure processing to serve your requests; we select providers and settings aligned with our security program. Details may vary by plan or region and can be described in order forms or trust documentation.

Multi-tenant isolation. We architect the platform so customer organizations are logically separated. Access to data is limited to authorized users in your organization (and to Bundata personnel and subprocessors with a need to know, under appropriate controls).

A newly created, clearly labeled non-retaining workspace has an immutable processing policy. It does not convert or delete data in an existing stored workspace. Processing is disabled until application, hosting, admission and the specific provider/account/model/endpoint controls have been approved and verified.

The initial workflow accepts one UTF-8 TXT, CSV or supported modern DOCX file and an unsaved schema/instructions. File content, extracted text, prompts and results are processed within the request and active browser review, not saved by Bundata. Filenames remain in the browser. PDFs/OCR, images, other Office files, remote sources and content-saving features are unavailable; there is no retaining fallback.

Account, membership, workspace-policy, authentication and aggregate usage/billing metadata may remain. Minimal security events contain fixed codes and rotating keyed pseudonyms, not document content, and expire within seven days; admission counters and leases expire sooner. These exceptions are not anonymous data or a promise that no user data is stored.

Results cannot be recovered after the review ends. Clearing a session drops application references and cancels work; it does not prove physical erasure of browser or managed-runtime memory. Your original files and explicitly downloaded JSON remain on your device. Hosting and provider controls require separate evidence; a no-training statement or request storage flag alone does not establish non-retention.

We share information only as needed to run Bundata or as required by law.

• Service providers. Cloud hosting, databases, vector stores, logging, analytics, authentication, email delivery, payment processing, and similar vendors who process data on our behalf under contracts that require appropriate safeguards.
• Professional advisers. Lawyers, accountants, or insurers under confidentiality obligations.
• Legal and safety. When we believe disclosure is required to comply with law, regulation, legal process, or government requests; to enforce our agreements; or to protect rights, property, or security.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to appropriate notice and commitments regarding personal data.

Customer content is processed and stored using reputable cloud infrastructure. Specific regions and subprocessors are identified in your order form, security documentation, or a subprocessor list we provide on request.

We retain information for as long as needed to provide the service, comply with law, resolve disputes, and enforce agreements. Exact retention depends on your plan, workspace settings, and whether you delete content or close your account.

Plan-aligned examples. Our public pricing for Free, Growth, Business, and Enterprise describes illustrative limits and retention for extracted "smart bites" (for example, roughly 30 days on Free and 90 days on Growth, with higher tiers offering extended or configurable retention). Business and Enterprise may offer extended retention or custom schedules as described in your order form or admin controls. Source documents and vectors may follow separate retention rules shown in-product or in your contract.

When you delete content or an account, we delete or de-identify associated data within a reasonable period, subject to backup rotation and legal holds.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, to object to or restrict certain processing, or to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority.

Organizations using Bundata may control certain workspace data; in those cases we may direct requests to your administrator. To exercise rights, contact us at privacy@bundata.com.

We use cookies and similar technologies on our websites and marketing properties to operate the site, remember preferences, measure performance, and (where applicable) support advertising. For categories, choices, and how to manage preferences, see our Cookie Policy.

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, or alteration. Examples include encryption in transit for connections to our services, access controls and authentication, logging and monitoring, and vendor due diligence. No method of transmission or storage is completely secure; we encourage you to use strong passwords, SSO where available, and least-privilege access for your users.

Compliance certifications or audit reports, if available, are provided under NDA or through our trust materials—this notice does not imply a particular certification unless we have expressly stated so in a contract with you.

We may process and store information in countries other than where you live, including where our subprocessors operate. Where required, we use appropriate safeguards (such as standard contractual clauses) to govern transfers. You may request more detail about our transfer mechanisms by contacting privacy@bundata.com.

Data controller: Bundata Inc.. Address: [Registered business address — TODO].

Privacy inquiries: privacy@bundata.com. General support and billing: contact@bundata.com.