BounceDay Privacy Policy

Effective date: August 26, 2026 · Last updated: August 26, 2026

BounceDay ("BounceDay," "we," "us") is operated by ARDEO LABS LLC, a Florida limited liability company. This policy explains what we collect, why, and what your rights are. It covers the BounceDay mobile and web apps, the BounceDay website — including public booking-request pages, client portals, and setup-record PDFs — and support channels. It applies both to operators (the rental businesses who hold BounceDay accounts) and to their clients who interact with an operator's booking pages.

The short version: your data is yours. We don't sell it, we don't run ads, we don't use your content to train AI models, and you can export or delete everything at any time.

1. What we collect

Account information. Email address, name, and authentication credentials (managed by our authentication provider).

Your business content. What you enter to run your rental business: fleet units and photos, prices, expenses, bookings, contract and waiver text, weather thresholds, safety checklists, and business branding and payment-link URLs you choose to display.

Your clients' details. You may enter — or your clients may submit through your booking page — their names, emails, phone numbers, event and delivery addresses, and notes. You are responsible for having the right to collect and share that information with us; we use it only to provide the service to you (e.g., rendering a booking portal, checking weather at the event location) and never for our own marketing.

E-signature records. When a client signs a booking contract, we record the typed signature name, the date and time, a hashed IP address, and browser information, so the operator has evidence the agreement was signed.

Photos. Fleet photos you submit for AI listing drafts, day-of checklist photos with capture timestamps, and photos your clients attach to a review of their rental. Photos are never location-tagged — the app does not request device location permission at all.

Payment information. Subscription payments are processed by Stripe. We receive your subscription status only — we never receive or store card numbers, card brands, or billing card details of any kind (billing happens on Stripe's own pages). Payments your clients make to you through your own payment links happen entirely outside BounceDay, and we never see those funds or their details. If you enable integrated collection, client payments are processed by Stripe under your own Stripe account and settle directly to you; BounceDay receives transaction records for these payments (amounts, status, and payment method type — never card numbers or card identifiers of any kind) to display your ledger, reconcile bookings, calculate the platform fee, and send receipts.

Usage and device data. Product analytics events (screens used, features triggered), device type, OS version, and approximate region, collected via PostHog (including on booking portal pages). Crash and error diagnostics collected via Sentry.

Support communications. Emails you send to our support address.

2. How we use it

• Provide, maintain, and improve the service (including offline sync and backups).
• AI fleet capture: unit photos you submit are sent to Anthropic's API to draft a listing (name, size, description). Results always land in a review queue for your approval — nothing is created without your confirmation, prices are never AI-generated, and AI is never used for safety or contract content.
• Weather checks: for bookings you've enabled, we send the event location's coordinates to the U.S. National Weather Service (a government service) to fetch the forecast and flag your thresholds. Forecasts are informational — the app never cancels or reschedules anything on its own.
• Send push notifications you enable (e.g., weather flags, signature confirmations, day-of reminders) and transactional email the service requires.
• Measure aggregate product usage, diagnose crashes, prevent fraud and abuse, and comply with law.

We do not sell or rent personal information, and we do not share it with third parties for their own advertising.

3. Public pages, portals, and PDFs

Operators share several pages that live at unguessable links, and anyone who has such a link can view that page:

• Booking portals show the client's name, the quote (units, totals, deposit), the operator's contract, weather policy and waiver text, and the operator's payment links.
• Setup-record PDFs show the client's name, event date, event address, the units delivered, and each checklist item with photo and timestamp — they're designed for operators to share with insurers, schools, or municipalities.
• Booking-request pages show the operator's fleet and prices, and collect the details a client submits.

Treat these links like the documents themselves. Operators control who receives them.

4. If you're a client of a BounceDay operator

Your rental company uses BounceDay to manage your booking. They are responsible for the relationship with you; we process your details (contact info, event address, signature record) on their behalf to provide the service. To access, correct, or delete information about you, contact your rental company — or email us and we'll help route the request.

Text messages (SMS). If your rental company sends booking texts, the mobile number you give at booking is the number we use to send transactional texts on their behalf about that booking: a day-before confirmation, an on-the-way notice, and weather-reschedule notices. There are two ways that number is recorded for texts, and we keep a record of which one applied to you: you give the number on your rental company's booking form, which tells you directly under that field that we will text booking updates to it and how to stop them, or you can text START to our number yourself. Giving the number is always optional — the field is not required, and leaving it blank does not affect your booking. How booking text updates work shows the exact disclosure. Message frequency varies with your booking activity; message and data rates may apply. Reply STOP at any time to stop all texts (or HELP for help) — opt-out takes effect immediately, applies to every rental company that texts you through BounceDay, and is honored for all future bookings; reply START to turn texts back on. Mobile phone numbers and SMS consent records are never shared with or sold to third parties or affiliates for marketing or promotional purposes. Texts are delivered by our SMS provider (Twilio) solely to send these messages.

5. Where your data lives

Data is stored with Supabase (PostgreSQL and file storage) in the United States, encrypted in transit (TLS) and at rest. Access in our systems is enforced by row-level security scoped to your organization; public pages can read only the specific whitelisted booking data for their link.

6. How long we keep it

• While your account is active: we keep your content so the service works; export is available anytime (JSON/CSV), on any plan, including after you cancel a subscription.
• If you delete your account: we delete your content within 30 days, except minimal records we must keep for legal, tax, or security purposes (e.g., invoices).
• The 7-day grace window. Deleting your account signs you out and schedules your organization's content for permanent deletion 7 days later; the app shows you that date. Signing back in before it cancels the deletion and restores everything. At the end of the window a daily job permanently removes your organization's records and stored files, and your subscription is cancelled when you make the request. If you are a team member rather than the account owner, you are removed from the organization and your account is deleted immediately — there is no grace window and no restore.
• Backups age out on a rolling schedule of no more than 30 additional days.

7. Your rights and choices

• Access & portability: export everything from Settings → Your data → Export my data.
• Correction: edit your content in the app.
• Deletion: delete your account in the app (Settings → Your data), or email [email protected] from your account email and we'll delete your account.
• Marketing opt-out: unsubscribe links in every non-transactional email.
• State privacy rights: depending on where you live (e.g., California, Colorado, Virginia, Florida), you may have statutory rights to access, delete, correct, or obtain a copy of your personal information, and to non-discrimination for exercising them. We honor these requests for everyone, resident or not. We do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA.

To exercise any right: [email protected]. We verify requests via your account email and respond within the time required by applicable law (generally 45 days).

If you don't have an account — for example, you received an introductory email from us — see §9. We verify by the address we contacted, not by an account.

8. Service providers (subprocessors)

Each provider processes data only as needed to provide its service to us, under its own contractual data-protection commitments.

9. If we emailed you and you're not a customer

We send a small volume of introductory email to businesses whose contact details we collect from public business listings and from their own websites. If that is how you got here: the only personal information we hold about you is your business contact details, a note of where we found them, and a record of what we sent and how you replied. We do not sell it, we do not enrich it, and we do not share it.

Every one of those emails carries our postal address and a one-click unsubscribe, and you can reply "unsubscribe" to any of them.

When you opt out, we stop processing your details for outbound and keep a permanent suppression record of your address so we never contact you again. We keep that one suppression record forever, because it is how we guarantee we never contact you again. To have everything else we hold about you deleted, use the request path below.

To see, correct, or delete what we hold, email [email protected] and quote the address we wrote to. You do not need an account, and we will respond within the time applicable law allows (generally 45 days).

10. Children

BounceDay is a business tool for adults; accounts require you to be 18+. Although operators' events often involve children, we do not collect information from children and the service is not directed at them. If you believe a child has provided us information, contact us and we will delete it.

11. Security

Row-level security on every table, TLS everywhere, encryption at rest, scoped credentials, and no card data in our systems. No method of transmission or storage is 100% secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

12. Changes

We'll post changes here and update the date above. For material changes, we'll notify you in the app or by email before they take effect.

13. Contact

ARDEO LABS LLC
[email protected]