Privacy Policy

Information you give us

We collect the information you provide directly:

• Account details: your name, email address and password (stored as a bcrypt hash)
• Contact-form messages: name, company, business email and the details you include
• Project settings: application URLs, HTTP basic-auth credentials (encrypted at rest), test identities and project variables
• Content you create: prompts, expected results, file attachments, scenario settings and answers to agent questions
• Team details: the email addresses of people you invite

Information created when you use the app

When you use BuniOD, the service creates and stores:

• Generated scenarios, run results, screenshots, and console and network logs captured while testing your application
• Token usage for each scenario generation and run
• Notifications and your email notification preferences
• Authentication cookies that keep you signed in

Analytics on our website

On buniod.com we use Google Analytics and Yandex Metrica to understand how visitors interact with the site. They may collect technical and usage data such as your IP address, browser and device type, pages viewed, referring source, approximate location and on-page behaviour (including session recordings through Yandex Webvisor), using cookies and similar technologies.

How we use your information

We use the information we collect to:

• Provide the service: generate and run scenarios, store results and send notifications
• Create and secure your account, including email verification
• Measure token usage and manage your plan
• Respond to your messages and support requests
• Measure and improve the website and the product
• Maintain the security and integrity of our services

AI processing

To generate and run scenarios, BuniOD sends your prompts, expected results and project context, the address, title and structure of the pages being tested, and the content of emails received in test inboxes to AI model providers. We currently use Google (Gemini models) and OpenAI. They process this content to return results to us. Avoid putting real personal data of your customers into prompts, test identities or the environments you test.

Cookies

buniod.com uses cookies for analytics through Google Analytics and Yandex Metrica. The BuniOD app uses first-party cookies to keep you signed in and loads a live-chat widget (Tawk.to), which may set its own cookies. You can control cookies at any time through your browser settings.

Service providers

We share data only with the providers that help us run BuniOD:

• Google — Gemini AI models used to generate scenarios, Google Analytics on our website, and YouTube, which hosts our product video (the player loads only when you press play)
• OpenAI — AI models used to run scenarios
• Yandex — Yandex Metrica website analytics
• Paddle — payment processing for paid plans
• Tawk.to — live chat in the app
• testmail.app — test email inboxes used by test identities
• FormSubmit — delivery of website contact-form messages to our team by email
• Our email delivery provider and our hosting provider, which operate the infrastructure BuniOD runs on

Data retention

We keep account and project data for as long as your account is active. Run results, screenshots and logs are kept until you delete the project or your account. In-app notifications are deleted after 30 days. A deleted account can be restored for 30 days; after that, the account and its projects, files and usage records are permanently deleted. Contact-form messages are kept as long as needed to respond to you and maintain our relationship. Analytics data is retained according to each provider’s retention settings.

Your rights

Depending on your location (including under the EU/UK GDPR), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing, including analytics
• Request a portable copy of your data
• Withdraw consent at any time

Data security

We apply reasonable technical and organisational measures, including HTTPS connections to the app, encryption at rest for HTTP basic-auth credentials, bcrypt password hashing and per-project access control. No method of transmission or storage is completely secure, but we work to safeguard the data you share with us.

Changes to this policy

We may update this Privacy Policy as our product evolves. Material changes will be reflected here with an updated date at the top of the page.

Contact us

For any privacy question or to exercise your rights, contact us at contact@newproweb.com.