bumbi.

Privacy Policy

Last updated: 2026-07-12

This policy explains what personal data Bumbi collects, why, and what rights you have. It covers two groups of people: account holders (creators who run webinars with Bumbi) and attendees (people who register for or watch a creator's webinar).

1. If you hold a Bumbi account

We collect and process:

  • Account data: name, email address, and a securely hashed password.
  • Workspace content you create: webinars, pages, emails, media, settings.
  • Billing data: your plan, subscription state, and payment history. Card details are collected and processed by our payment provider; Bumbi never sees or stores full card numbers.
  • Support and feedback messages you send us.
  • Product usage needed to operate plan limits (counts of registrants, emails sent, credits used).

We use this data to provide and improve the service, process payments, enforce plan limits, provide support, and send service emails (for example receipts and security notices). We record the version and time of your acceptance of the Terms of Service and this policy.

2. If you attend a webinar run on Bumbi

The creator who invited you is the controller of your data; Bumbi processes it on their behalf to run their webinar. Depending on what the creator asks for at registration, this includes:

  • Name, email address, and optionally phone number and country.
  • Your chosen session time, and reminder and replay emails sent for it.
  • Attendance and engagement events (registration, joining, watch progress, clicks, chat messages you send).
  • Technical data: a truncated, salted hash of your IP address (we do not store raw IP addresses), browser user agent, referrer, and campaign (UTM) tags.

Every automated email includes an unsubscribe link. Unsubscribing stops further automated emails from that creator's workspace to your address. For questions or deletion requests about a specific webinar, contact the creator first; you can also contact us and we will assist or forward the request.

3. Cookies and similar technologies

See the Cookie Policy for the full list. In short: sign-in session cookies, a theme preference, and a first-party visitor identifier used for registration attribution and analytics.

4. Who we share data with

We share data only with the trusted service providers required to operate Bumbi (such as hosting, email delivery, and payment processing), under data-protection obligations, and we do not sell personal data.

Video is never hosted by Bumbi: webinars stream directly from the provider the creator connected (for example Bunny, Vimeo, or YouTube), which may set its own cookies under its own policy. We do not sell personal data.

5. Retention

  • Account and workspace data: kept while the account is active, deleted after account deletion.
  • Raw link-click records: pruned after 90 days (daily aggregates are kept).
  • Analytics detail: retained according to the workspace's plan.
  • Email suppression entries (unsubscribes, bounces): kept so we keep honoring them.

6. Security

Data is encrypted in transit, isolated per workspace with database-level row security, and access to production systems is restricted. IP addresses are stored only as truncated salted hashes. No method of storage is perfectly secure, but security is a design constraint of the platform, not an afterthought.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict some processing. Account holders can exercise most of these directly in the dashboard; for anything else, or as an attendee, contact us through the support option or the creator who runs the webinar.

8. Changes and contact

We will update this policy as the product evolves and notify account holders of material changes. Questions: contact us through the support option in the dashboard.