Privacy Policy

Last updated: [DATE — to be completed]

1. Data We Collect

[Full privacy policy to be completed with legal counsel before launch]

  • Account information (name, email — via Clerk)
  • Usage data and analytics (PostHog, with consent)
  • AI interaction logs (for EU AI Act compliance — WORM audit log)
  • Cookie and consent preferences

2. How We Use Your Data

[To be completed with legal counsel]

3. GDPR Rights

If you are located in the European Economic Area, you have rights including access, rectification, erasure, and data portability. To exercise your rights, contact us at [privacy@bullynx.com — to be set up].

4. Data Retention

[Retention periods to be completed with legal counsel]

5. Third-Party Services

We use the following third-party services: Clerk (authentication), Supabase (database), Vercel (hosting), Stripe (payments), PostHog (analytics, with consent), OpenAI (AI processing), Sentry (error tracking).