BounceDay Privacy Policy
Effective date: upon publication · Last updated: July 10, 2026
BounceDay ("BounceDay," "we," "us") is operated by ARDEO LABS LLC, a Florida limited liability company. This policy explains what we collect, why, and what your rights are. It covers the BounceDay mobile and web apps, the BounceDay website — including public booking-request pages, client portals, and setup-record PDFs — and support channels. It applies both to operators (the rental businesses who hold BounceDay accounts) and to their clients who interact with an operator's booking pages.
The short version: your data is yours. We don't sell it, we don't run ads, we don't use your content to train AI models, and you can export or delete everything at any time.
1. What we collect
Account information. Email address, name, and authentication credentials (managed by our authentication provider).
Your business content. What you enter to run your rental business: fleet units and photos, prices, expenses, bookings, contract and waiver text, weather thresholds, safety checklists, and business branding and payment-link URLs you choose to display.
Your clients' details. You may enter — or your clients may submit through your booking page — their names, emails, phone numbers, event and delivery addresses, and notes. You are responsible for having the right to collect and share that information with us; we use it only to provide the service to you (e.g., rendering a booking portal, checking weather at the event location) and never for our own marketing.
E-signature records. When a client signs a booking contract, we record the typed signature name, the date and time, a hashed IP address, and browser information, so the operator has evidence the agreement was signed.
Photos. Fleet photos you submit for AI listing drafts, and day-of checklist photos with capture timestamps. Photos are never location-tagged — the app does not request device location permission at all.
Payment information. Subscription payments are processed by Stripe. We receive your subscription status only — we never receive or store card numbers, card brands, or billing card details of any kind (billing happens on Stripe's own pages). Payments your clients make to you (deposits and balances) happen entirely outside BounceDay via your own payment links, and we never see or hold those funds.
Usage and device data. Product analytics events (screens used, features triggered), device type, OS version, and approximate region, collected via PostHog (including on booking portal pages). Crash and error diagnostics collected via Sentry.
Support communications. Emails you send to our support address.
2. How we use it
- Provide, maintain, and improve the service (including offline sync and backups).
- AI fleet capture: unit photos you submit are sent to Anthropic's API to draft a listing (name, size, description). Results always land in a review queue for your approval — nothing is created without your confirmation, prices are never AI-generated, and AI is never used for safety or contract content.
- Weather checks: for bookings you've enabled, we send the event location's coordinates to the U.S. National Weather Service (a government service) to fetch the forecast and flag your thresholds. Forecasts are informational — the app never cancels or reschedules anything on its own.
- Send push notifications you enable (e.g., weather flags, signature confirmations, day-of reminders) and transactional email the service requires.
- Measure aggregate product usage, diagnose crashes, prevent fraud and abuse, and comply with law.
We do not sell or rent personal information, and we do not share it with third parties for their own advertising.
3. Public pages, portals, and PDFs
Operators share several pages that live at unguessable links, and anyone who has such a link can view that page:
- Booking portals show the client's name, the quote (units, totals, deposit), the operator's contract, weather policy and waiver text, and the operator's payment links.
- Setup-record PDFs show the client's name, event date, event address, the units delivered, and each checklist item with photo and timestamp — they're designed for operators to share with insurers, schools, or municipalities.
- Booking-request pages show the operator's fleet and prices, and collect the details a client submits.
Treat these links like the documents themselves. Operators control who receives them.
4. If you're a client of a BounceDay operator
Your rental company uses BounceDay to manage your booking. They are responsible for the relationship with you; we process your details (contact info, event address, signature record) on their behalf to provide the service. To access, correct, or delete information about you, contact your rental company — or email us and we'll help route the request.
Text messages (SMS). If your rental company offers booking text updates and you opted in (an unchecked-by-default checkbox at booking), we send transactional texts on their behalf about your booking: a day-before confirmation, an on-the-way notice, and weather-reschedule notices. Message frequency varies with your booking activity; message and data rates may apply. Reply STOP at any time to stop all texts (orHELP for help) — opt-out takes effect immediately and is honored for all future bookings.Mobile phone numbers and SMS consent records are never shared with or sold to third parties or affiliates for marketing or promotional purposes. Texts are delivered by our SMS provider (Twilio) solely to send these messages.
5. Where your data lives
Data is stored with Supabase (PostgreSQL and file storage) in the United States, encrypted in transit (TLS) and at rest. Access in our systems is enforced by row-level security scoped to your organization; public pages can read only the specific whitelisted booking data for their link.
6. How long we keep it
- While your account is active: we keep your content so the service works; export is available anytime (JSON/CSV), on any plan, including after you cancel a subscription.
- If you delete your account: we delete your content within 30 days, except minimal records we must keep for legal, tax, or security purposes (e.g., invoices).
- Backups age out on a rolling schedule of no more than 30 additional days.
7. Your rights and choices
- Access & portability: export everything from Settings → Export.
- Correction: edit your content in the app.
- Deletion: delete your account in the app (Settings → Your data), or email us from your account email and we'll delete your account.
- Marketing opt-out: unsubscribe links in every non-transactional email.
- State privacy rights: depending on where you live (e.g., California, Colorado, Virginia, Florida), you may have statutory rights to access, delete, correct, or obtain a copy of your personal information, and to non-discrimination for exercising them. We honor these requests for everyone, resident or not. We do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA.
To exercise any right: contact us at the address below. We verify requests via your account email and respond within the time required by applicable law (generally 45 days).
8. Service providers (subprocessors)
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions | US |
| Stripe | Subscription billing | US |
| Anthropic | AI drafting of fleet listings from photos you submit | US |
| National Weather Service (api.weather.gov) | Weather forecasts for event locations (U.S. government service) | US |
| PostHog | Product analytics | US |
| Sentry | Error and crash diagnostics | US |
| Resend | Transactional email delivery (booking and contact emails) | US |
| Twilio | SMS delivery for booking text updates (only if you opt in) | US |
| Cloudflare (Turnstile) | Bot protection on public booking pages (processes the visitor's IP address) | US |
| Expo (EAS) | App builds and push-notification delivery | US |
Each provider processes data only as needed to provide its service to us, under its own contractual data-protection commitments.
9. Children
BounceDay is a business tool for adults; accounts require you to be 18+. Although operators' events often involve children, we do not collect information from children and the service is not directed at them. If you believe a child has provided us information, contact us and we will delete it.
10. Security
Row-level security on every table, TLS everywhere, encryption at rest, scoped credentials, and no card data in our systems. No method of transmission or storage is 100% secure; if we learn of a breach affecting your personal information, we will notify you as required by law.
11. Changes
We'll post changes here and update the date above. For material changes, we'll notify you in the app or by email before they take effect.
12. Contact
ARDEO LABS LLC
Mailing address:Ardeo Labs LLC
5944 Coral Ridge Dr # 1017
Coral Springs, FL 33076
United States