Privacy Policy

1. What we collect

Account: your email address, your name if you give one, a username if you choose one, your password (kept only as a salted hash) and, if you sign in with Google or Facebook, that provider’s identifier for you and the name and email it sends.

Your work: the projects, templates, pictures, logos, videos and sounds you save or upload, and the settings of your team and plan.

Use of the service: sign-in events (time, method, result, network address and browser), security events such as password changes and two-step verification, and technical records of the render service (what was made for your account, how long it took, errors) to run the service, limit abuse and count use against your plan.

Payments: our payment provider handles your card and billing details. We receive the status of your subscription, the plan, the dates and the last digits of the card if the provider gives them, never the full card number.

Messages you send to support.

2. Why we use it, and on what basis

To provide the service and keep your work (performing our contract with you); to keep it secure, prevent abuse and fix faults (our legitimate interest); to send you account emails — confirmations, password resets, receipts, important notices (the contract and our legitimate interest); to meet tax and legal duties (legal obligation); and to answer you (the contract and our legitimate interest). We send marketing email only if you ask for it, and you can stop it at any time.

3. Cookies and similar storage

We use a session cookie to keep you signed in, a “remember me” cookie if you choose it, and a security token against forged requests. These are needed for the service and set without asking. Your browser’s local storage keeps your editor settings (theme, panel sizes, the banner you are working on) on your own device; it is not sent to us.

The pages we serve to visitors do not use advertising or tracking cookies.

4. Who we share it with

Only with those who help us run bnnr, under agreements that let them use it only for that: hosting and storage providers, our email delivery provider, our payment provider, and the sign-in provider you choose. We may also disclose data when the law requires it or to protect people and the service. We do not sell personal data and do not use your work to train AI models.

If a service we use is outside your country, we rely on the safeguards the law asks for, such as standard contractual clauses.

5. How long we keep it

We keep your account and work while the account is open. When you close it, we delete your content and personal data within 30 days, except what we must keep longer (invoices and tax records, for the period the law sets) and security and audit records, which we keep for up to a year and then remove. Backups drop out within a further 30 days.

6. Your rights

Depending on where you live you may ask us to give you a copy of your data, correct it, delete it, limit or object to its use, or hand it to you in a usable form, and you may withdraw consent you gave. Much of this you can do yourself in your account and by exporting your projects; for the rest write to support@bnnr.app. We answer within a month. You may also complain to your data-protection authority.

7. Security

Connections are encrypted, passwords are hashed, access to the admin is limited to our staff with two-step verification, and sessions can be ended everywhere from your account. No service is perfectly safe; if a breach affects you, we will tell you as the law requires.

8. Children

bnnr is not meant for people under 16 and we do not knowingly collect their data. If you think a child has made an account, write to us and we will delete it.

9. Changes and contact

If we change this policy in a way that matters we will tell you before it applies; the date at the top shows the latest version. The controller of your data is Nathan Taco. Contact: support@bnnr.app.