BundleUp - Privacy Policy

Privacy Policy

Effective Date: November 1, 2025

This Privacy Policy explains how OneClick Lab, LLC, doing business as BundleUp (“BundleUp,” “we,” “us,” or “our”), collects, uses, stores, and protects information when you use bundleup.io, our APIs, dashboards, and related services (collectively, the “Services”). If you don’t agree with this policy, don’t use the Services.

1. Information We Collect

1.1 Information You Provide

Account details (name, email, company name)
Authentication credentials
Billing information (handled by third-party payment processors)
Support communications

1.2 Information Processed on Your Behalf

When you use BundleUp to create integrations, we may process:

OAuth tokens and API credentials
Connection metadata
Requests and responses flowing through our proxy

We act as a data processor for this information. You are the data controller.

1.3 Automatically Collected Data

IP address
Usage metrics (requests, errors, latency)
Logs for debugging, security, and billing
Device and browser metadata for dashboard usage

2. How We Use Information

We use information to:

Provide and operate the Services
Authenticate users and secure accounts
Route, retry, and monitor API requests
Enforce rate limits and prevent abuse
Bill usage accurately
Improve performance and reliability
Respond to support requests
Comply with legal obligations

We do not sell your data.

3. Data Storage and Security

Tokens and sensitive credentials are encrypted at rest
Access is restricted to authorized systems only
Logs are retained for limited periods
We use industry-standard security practices

No system is 100% secure. You use the Services at your own risk.

4. Data Retention

We retain data only as long as necessary:

Account data: while your account is active
Logs and metrics: limited retention for debugging, billing, and security
Tokens: deleted when connections are removed or accounts closed

You can request deletion by contacting us.

5. Sharing of Information

We may share data only with:

Infrastructure providers (e.g., cloud hosting, logging, billing)
Payment processors (billing data only)
Law enforcement if legally required

We do not share data for advertising.

6. International Data Transfers

Your data may be processed in the United States or other jurisdictions where our infrastructure providers operate.

7. Your Rights

Depending on your location, you may have rights to:

Access your data
Correct inaccuracies
Request deletion
Object to processing

8. Changes to This Policy

We may update this policy. Material changes will be communicated via the dashboard or email.

9. Contact

OneClick Lab, LLC
Email: support@bundleup.io