Privacy Policy

Last updated: 2026-08-20

This policy explains what personal data Bumbi collects, why, and what rights you have. It covers two groups of people: account holders (creators, businesses, and marketers who build pages, funnels, and webinars with Bumbi) and visitors and attendees (people who visit, register on, submit a form on, or watch a creator's page or webinar).

1. If you hold a Bumbi account

We collect and process:

• Account data: name, email address, and a securely hashed password.
• Workspace content you create: pages, funnels, webinars, forms, emails, media, settings.
• Billing data: your plan, subscription state, and payment history. Card details are collected and processed by our payment provider; Bumbi never sees or stores full card numbers.
• Support and feedback messages you send us.
• Product usage needed to operate plan limits (counts of registrants, emails sent, credits used).

We use this data to provide and improve the service, process payments, enforce plan limits, provide support, and send service emails (for example receipts and security notices). We record the version and time of your acceptance of the Terms of Service and this policy.

2. If you register or submit a form on a Bumbi page

When you register for a webinar, or submit a form on a creator's landing page, the creator who runs that page or webinar is the controller of your data; Bumbi processes it on their behalf. Creator pages may be served from a Bumbi workspace address such as name.bumbi.io; the data still belongs to that creator, not to Bumbi. Depending on what the creator asks for, this includes:

• Name, email address, and optionally phone number, country, and other fields the creator adds to their form.
• Your chosen session time, and reminder and replay emails sent for it.
• Attendance and engagement events (registration, joining, watch progress, clicks, chat messages you send).
• Technical data: a truncated, salted hash of your IP address (we do not store raw IP addresses), browser user agent, referrer, and campaign (UTM) tags.

Every automated email includes an unsubscribe link. Unsubscribing stops further automated emails from that creator's workspace to your address. For questions or deletion requests about a specific page or webinar, contact the creator first; you can also contact us and we will assist or forward the request.

3. Cookies and similar technologies

See the Cookie Policy for the full list. In short: sign-in session cookies, a theme preference, and a first-party visitor identifier used for registration attribution and analytics.

4. Who we share data with

We share personal data only with the categories of service providers needed to operate Bumbi, each bound by data-protection obligations, and we do not sell personal data. These categories are:

• Hosting and infrastructure providers, to run the application and store your data.
• Email delivery providers, to send account, webinar, and notification emails.
• A payment processor, to handle payments and payouts. Card details are handled by the payment provider (Paystack); Bumbi never sees or stores full card numbers.
• Security and fraud-prevention providers, to protect signup and the platform from bots and abuse.

A current list of our specific subprocessors is available to account holders on request, and under a data-processing agreement where one applies.

Video is never hosted by Bumbi: webinars stream directly from the external video provider the creator connects, which may set its own cookies under its own policy.

5. Retention

• Account and workspace data: kept while the account is active, deleted after account deletion.
• Raw link-click records: pruned after 90 days (daily aggregates are kept).
• Analytics detail: retained according to the workspace's plan.
• Email suppression entries (unsubscribes, bounces): kept so we keep honoring them.

6. Security

Data is encrypted in transit and each workspace's data is kept strictly separated. We practise data minimisation: IP addresses are stored only as a truncated, irreversible hash, never as the raw IP. No method of storage is perfectly secure, but security is a design constraint of the platform, not an afterthought.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict some processing. Account holders can exercise most of these directly in the dashboard; for anything else, or as a visitor or attendee, contact us through the support option or the creator who runs the page or webinar.

8. Changes and contact

We will update this policy as the product evolves and notify account holders of material changes. Questions: contact us through the support option in the dashboard.