Privacy Policy

Last updated: April 23, 2026

Bounti ("we," "us," "our") operates a referral marketing platform for local service businesses. This policy describes what data we collect, how we use it, who we share it with, and your rights regarding that data.

1. Information We Collect

From business accounts:

• Business name, legal name, and contact information (email, phone, address)
• Service types, reward amounts, and campaign configuration
• Billing and payment information (processed through Stripe; we do not store full card numbers)
• CRM and Zapier integration credentials and webhook activity

From customers and referral participants:

• Name and mobile phone number
• Content of SMS messages sent to and received from our number, including text body and any shared contact information
• Referral activity: who referred whom, campaign participation, and job completion status
• Phone numbers of prospects shared by customers during the referral process
• Web form submissions on Bounti-powered referral pages

Automatically collected:

• IP addresses and basic request logs from web interactions
• SMS delivery status and carrier response data provided by our messaging provider

2. How We Use Your Information

• To operate referral campaigns: We use names, phone numbers, and message content to send referral SMS messages, track campaign activity, and manage the referral lifecycle from invitation through payout.
• AI-assisted message handling: Inbound SMS messages are processed by an AI language model to classify intent (e.g., requesting a referral link, opting out, asking a question). Message content is passed to the AI model for this purpose and is logged in our system for quality review and compliance.
• To confirm and release rewards: We use referral and payment data to calculate, confirm, and disburse referral rewards to eligible participants.
• To provide account support: We use contact and account data to respond to inquiries and resolve issues.
• To meet legal obligations: We retain records as required by applicable law, including opt-out requests and consent records.

3. SMS Message Data

Bounti logs all inbound and outbound SMS messages associated with referral campaigns. This includes:

• The full text body of messages sent and received
• Phone numbers of senders and recipients
• Timestamps and delivery status
• Any phone numbers or contact information shared within a message

This data is used to operate the platform, classify customer intent using AI, detect opt-out requests, and maintain compliance records. SMS opt-in consent data and message content are not sold or shared with third parties for their own marketing purposes.

4. Subprocessors and Third-Party Services

We use the following third-party services to operate the platform. Each acts as a data subprocessor and is bound by its own privacy and security obligations:

• Twilio — SMS delivery and phone number management. Message content and phone numbers are transmitted through Twilio's infrastructure. See Twilio's Privacy Policy.
• Anthropic / OpenAI — AI language model providers used to classify inbound message intent. Message text is transmitted to these providers for classification. See their respective privacy policies for data handling details.
• Stripe — Payment processing and payout disbursement. Financial data is handled by Stripe and subject to Stripe's Privacy Policy.
• Railway — Cloud infrastructure and database hosting. All platform data resides on Railway-hosted servers.

5. Data Retention

• SMS message logs are retained for a minimum of 4 years to meet TCPA compliance requirements.
• Opt-out (STOP) records are retained indefinitely to honor suppression requests.
• Business account data is retained for the duration of the account and up to 7 years after closure for legal and financial records.
• You may request deletion of personal data not subject to a legal retention obligation by contacting us at the address below.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of SMS communications at any time by replying STOP

To exercise any of these rights, contact us at hello@bountihunter.net.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), access controls, and secure cloud infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but take reasonable precautions to protect your data.

8. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be reflected in the updated date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact

Bounti
1207 College Ave, Blacksher, GA 31516, USA
hello@bountihunter.net
+1 (912) 452-5940