Privacy Policy

1. What we collect

• Account data — email, name, role (company or bounty hunter), and the optional profile details you add (LinkedIn URL, verticals you can reach, company name and website). Signing in with Google or LinkedIn shares your name, email, and profile picture from that provider.
• Marketplace activity — bounties you post or claim, results you log, and verification decisions, because that is the product.
• Usage analytics — pageviews and product events via PostHog, including UTM campaign parameters stored in a first-party cookie so we know which email or campaign brought you here. We honor your browser's Do Not Track setting.
• Email engagement — we send transactional and marketing email through Resend and log delivery, open, and click events to measure what's working.

2. Where it lives

Account and marketplace data is processed and stored in Supabase (Postgres, hosted in the US). Analytics events live in PostHog (US cloud). Email sending and engagement data live in Resend.

3. What we don't do

We do not sell personal data. We don't share it with third parties except the processors named above (Supabase, PostHog, Resend, and our payment processor at payout time), and as required by law. Companies see the hunter profile information relevant to vetting a claim — that's disclosed in the product where it happens.

4. Cookies

We use first-party cookies for authentication (Supabase session) and campaign attribution (b_attr, 90 days). PostHog sets its own first-party analytics cookie unless Do Not Track is on.

5. Retention and deletion

We keep account data while your account is active. To delete your account and personal data, email hello@bounty.yournextcustomer.com from your account address — we confirm and complete deletion within 30 days, except records we're legally required to keep (e.g. tax records for paid-out bounties).

6. Changes and contact

Material changes will be announced on this page with a new effective date. Questions: hello@bounty.yournextcustomer.com.