Your information

What we collect

We collect account details (email, mobile number, display name, username, encrypted login credentials, age band, verification status), profile and content data, hub and chat activity, purchases and makespend ledger records, reports and appeals, device and security logs, approximate or user-provided location, language preference, and communications with support. Age-verification providers should return a status and reference rather than identity-document images whenever possible.

Why we use it

We use information to create and secure accounts; verify phones and age eligibility; operate squares, hubs, chat, classifieds, events, rankings, translation, payments, alerts, and support; prevent fraud and abuse; moderate content; comply with law; and analyze and improve the service. We do not sell personal information for money. If advertising or cross-context sharing is added, required notices and opt-outs will be provided first.

Intellectual property, anti-cloning, and DMCA

Copyright © 2026 Bundigo Inc. All rights reserved. Unauthorized reproduction, reverse engineering, or automated scraping of platform architecture is strictly prohibited. Automated harvesting, reuse, or cloning of Community Hub content, member products, user lists, directories, rankings, or platform behavior is not permitted without prior written authorization. We may use access controls, bot restrictions, rate limits, and security logs to protect people’s information and Bundigo's proprietary platform assets.

If you believe content on Bundigo infringes your copyright, email legal@bundigo.com with the copyrighted work, the exact location of the challenged material, your contact information, a good-faith statement, an accuracy-and-authority statement under penalty of perjury, and your physical or electronic signature. We may remove or restrict access to material while we review a notice. A person whose material was removed may submit a counter-notice with the information required by applicable law.

Sharing

Public content is shared according to your settings. Service providers may process data for hosting, authentication, phone verification, email, payments, realtime messaging, age assurance, translation, analytics, and safety. We may disclose information with consent, in a business transfer, to protect people or the service, or in response to valid legal process. Providers must be limited to the purposes for which they receive data.

Account deletion

When reviewed deletion intake is enabled, you can request deletion in Account Settings or at our public account-deletion page. We verify the current password. Deletion is scheduled seven days later; normal account access is restricted immediately, but you may review status and cancel with your current password before the displayed deadline. A request is not a completed deletion. Processing and completion are shown separately, and a private receipt lets you review final confirmation after the login identity is removed.

Completion removes the Better Auth identity and sessions, email and phone, profiles and storefronts, messages and memberships, personal relationships and notifications, listings, posts and replies, products, ads, polls and votes, usernames and handles, and associated media stored by the service. A Community Hub created by the user remains available as a neutral, ownerless shared space with no replacement owner; the deleting member’s attribution, supplied Hub metadata, posts, messages, and other content are removed while other members’ content remains. Other owned rooms and legacy forums are removed rather than transferred. Realtime clients, browser storage, and PWA caches are cleared where technically possible.

We may retain only limited pseudonymized payment, wallet, subscription, fulfillment, referral, fraud, safety, security, legal-hold, and deletion-audit records where required or reasonably necessary for those purposes. We do not state an invented fixed legal period: each retention and backup rule requires documented approval against applicable law, disputes, holds, and provider schedules. Restored or Time Travel data must remain isolated and cannot return to service until completed deletions have been reconciled against the approved external completion ledger. Purchased balances and pending refunds, disputes, or chargebacks receive operator review before completion; earned or promotional credits are extinguished at completion.

Retention outside deletion

We keep account and content data while the account is active and for the time reasonably needed for the purposes above. Account inactivity does not by itself delete account data, content, balances, usernames, ownership, receipts, or audit records. Subscription expiration, suspension, moderation, and voluntary deletion are separate processes.

Your choices and rights

You may update profile details, location, message settings, mature-content preference, language, and notifications; download or delete content where available; block users; and request access, correction, deletion, portability, restriction, or objection as applicable where you live. Contact privacy@bundigo.com. We may verify your identity before completing a request. You may appeal a denied privacy request and contact your local regulator.

Security, children, and international use

We use administrative, technical, and organizational safeguards, but no system is perfectly secure. The service is not for children under 13 and is not directed to them. Users below the local digital-consent age may be ineligible. Data may be processed in countries other than your own with legally required safeguards.

Contact

Privacy and deletion support: privacy@bundigo.com. Child-safety concerns: childsafety@bundigo.com. A business mailing address and any legally required regional representative details must be added before public launch.