Privacy Policy
This policy explains, in plain language, what BNDR VoiceEngine (“the Service”, operated by BNDR LLC) does and does not do with your information. The short version: BNDR does not store your writing samples, and AI-provider credentials remain server-side.
Provider requests pass through an authenticated BNDR gateway hosted on Supabase. The gateway briefly processes your encrypted-in-transit writing solely to verify access and run the selected provider; application code does not store or log the request body. Provider credentials remain in the server environment and never enter your browser. We store only what's required to run your account: email, entitlement and billing state, usage counts, reports you submit, and profiles or exports you explicitly save. We run no ads, no third-party trackers, and never sell data.
1. What we store (and why)
- Account data — if you create an account: your email address and authentication records, handled by Supabase (our database and login provider).
- Subscription status — whether your plan is trialing, active, or canceled, updated by Stripe events. We never see or store your card number; payment details are handled entirely by Stripe.
- Usage counts — a per-day number of analyses, used to enforce plan limits. Not the content — just the count.
- Saved voice profiles and exports — only if you press Save or Export: the profile name and generated profile files. Writing-sample previews are not retained. Delete saved profiles anytime from within the app.
2. What we don't retain
- AI-provider credentials. Provider credentials remain in the server environment and are never delivered to your browser or written into your profile.
- Your writing samples. Samples are not saved by BNDR. The authenticated gateway forwards them transiently to the selected provider, whose privacy terms apply to that processing.
- Your payment details. Checkout happens on Stripe or Gumroad. We receive only a confirmation of the plan status or license validity.
3. Data stored on your device
The Service uses your browser's local storage to make the app work. This is functional storage, not tracking:
- Session storage (cleared when the tab closes): the latest structured error state used for recovery and support.
- Local storage (persists on your device): your consent acknowledgment, whether you've seen the guided tour before signing in, and on-device voice profiles used only when cloud storage is unreachable. Entitlements, gift-code redemptions, and usage counts live in Supabase, not on the device.
You can clear all of it at any time through your browser's site-data settings. Nothing breaks — you'd just need to redeem your pass or sign in again.
4. Cookies and tracking
The Service sets no advertising cookies and includes no analytics or tracking scripts. Supabase sets the cookies/storage necessary for login sessions. That's it.
5. Third-party services
- Supabase — authentication, database, and secure serverless functions, including the transient DeepSeek relay.
- Stripe — subscription payments and billing management.
- Gumroad — lifetime license sales and license-key verification.
- Google Fonts — typeface delivery.
- AI providers (Anthropic, OpenAI, or DeepSeek) — process the writing you submit using server-managed credentials and under their terms.
6. Data retention and deletion
Saved profiles can be deleted in-app immediately. In-app account deletion cancels any active Stripe subscription, removes all private exports, revokes refresh sessions, deletes the Auth account, and cascades account-owned database rows. BNDR retains only a salted, non-reversible deletion-audit hash for seven years and identifier-free Stripe event receipts for up to 400 days; Stripe and Gumroad retain their own transaction records under their policies and legal obligations. On-device data can be cleared through your browser settings.
7. Your rights
Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to processing. Email us to exercise any of these — we honor them for everyone, regardless of location.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them.
9. Changes to this policy
If we make material changes, we'll update the date at the top of this page. Continued use after changes means you accept the updated policy.
10. Contact
Questions or requests: email us.