Privacy Policy
Last updated: March 3, 2026
1. Who We Are
Bonsai Software, LLC ("Bonsai," "we," "us") operates the BonsaiPod platform at pods.bonsai.so and related services. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, business name, phone number, and billing details when you sign up or contact us.
- Business data: Website URLs, content, analytics, and other information you provide for your BonsaiPod.
- Communications: Messages, support requests, and feedback you send us.
2.2 Information We Collect Automatically
- Usage data: Dashboard interactions, feature usage, and operator activity logs.
- Technical data: IP address, browser type, device information, and access times.
- Performance data: Site audit scores, content pipeline metrics, and publishing analytics generated by your BonsaiPod.
2.3 Information From Third Parties
We may receive information from third-party services you connect to your BonsaiPod, such as Google Analytics, social media platforms, or review sites. We access only the data necessary to provide our services.
3. How We Use Your Information
- Provide services: Operate your BonsaiPod, generate content, run audits, and deliver features.
- AI processing: Your business data is processed by AI models (including third-party LLMs) to generate content, recommendations, and operator actions. We do not use your data to train AI models.
- Communicate: Send service updates, support responses, and billing notices.
- Improve: Analyze aggregate, anonymized usage patterns to improve the platform.
- Legal compliance: Meet legal obligations, resolve disputes, and enforce agreements.
4. AI and Data Processing
BonsaiPod uses AI models (including those provided by Anthropic, OpenAI, and Google) to power the Sensei operator and content generation. Important details:
- Your business data is sent to AI model providers only as needed to perform specific tasks (content generation, analysis, etc.).
- We do not use your data to train AI models. Our AI providers' enterprise terms prohibit training on customer data.
- AI-generated content is reviewed and may be edited before publishing.
- You can request human-only review for any content before it goes live.
5. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- Service providers: Hosting providers (DigitalOcean), payment processors (Stripe), AI model providers, and email services — only as necessary to provide our services.
- With your consent: If you authorize us to share data with a third party (e.g., connecting social media accounts).
- Legal requirements: If required by law, subpoena, or court order.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
6. Data Security
We implement reasonable technical and organizational measures to protect your data, including:
- Encrypted connections (TLS/SSL) for all data in transit
- Dedicated, isolated server infrastructure per BonsaiPod
- Regular security audits and automated monitoring
- Access controls and authentication for all operator actions
No method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your information.
7. Data Retention
- Active accounts: We retain your data for the duration of your service.
- After cancellation: We retain your data for thirty (30) days after cancellation to facilitate data export. After that, data is permanently deleted unless legally required to retain it.
- Billing records: Retained for seven (7) years for tax and legal compliance.
8. Your Rights
You have the right to:
- Access: Request a copy of all data we hold about you.
- Export: Receive a complete export of your BonsaiPod data at any time.
- Correction: Request correction of inaccurate information.
- Deletion: Request deletion of your data (subject to legal retention requirements).
- Opt out: Opt out of anonymized case studies or aggregate reporting.
To exercise any of these rights, contact us at privacy@bonsai.so.
9. Cookies and Tracking
The BonsaiPod dashboard uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking pixels on the dashboard. Your public-facing website (if hosted by Bonsai) may include analytics tools at your direction.
10. Children's Privacy
BonsaiPod is a business service and is not directed at individuals under 18. We do not knowingly collect information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform at least thirty (30) days before changes take effect.
12. Contact
For questions about this Privacy Policy or your data:
- Email: privacy@bonsai.so
- Mail: Bonsai Software, LLC, Park City, Utah
Privacy Policy v1.0 · Bonsai Software, LLC · bonsai.so