Privacy Policy
Effective date: April 1, 2026
Bumah LLC ("we", "us", or "our") operates OhBounce.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account information. When you register, we collect your name, email address, password (hashed), and workspace name.
Profile information. You may optionally provide your job title, phone number, company name, website, and industry.
Email addresses you validate. We process email addresses you submit for validation. These are stored to provide your validation history and analytics.
Payment information. Billing is handled by Stripe. We store only a reference to your Stripe customer ID — we never store raw card numbers.
Usage data. We collect logs of API calls, validation requests, and feature usage to operate and improve the Service.
Cookies and session data. We use cookies to maintain your authenticated session. See our Cookie Policy for details.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your email validation requests and return results
- Manage your account, workspace, and team members
- Process payments and send transaction receipts
- Send service notifications (low credits, bulk job completion, security alerts) based on your preferences
- Respond to your support requests
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do not sell your personal information to third parties.
3. How We Share Your Information
We share your information only in the following circumstances:
- Service providers. We share data with trusted vendors (Stripe for payments, transactional email providers) solely to operate the Service.
- Within your workspace. Workspace owners and admins can see team member names, emails, and roles.
- Legal requirements. We may disclose information if required by law, court order, or to protect the rights and safety of Bumah LLC or others.
- Business transfers. If Bumah LLC is acquired or merges, your information may be transferred as part of that transaction.
4. Data Retention
We retain your account data for as long as your account is active. Validation history is retained for up to 24 months by default.
When you delete your account, we permanently delete your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes.
5. Security
We implement industry-standard security measures including TLS encryption in transit, hashed passwords (bcrypt), and scoped API keys. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Export your data in a portable format
To exercise any of these rights, contact us at [email protected].
7. Cookies
We use cookies to keep you signed in and remember your preferences. For full details, see our Cookie Policy.
8. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or a prominent notice in the Service. The effective date at the top of this page reflects the most recent revision.
10. Contact Us
If you have questions about this Privacy Policy, please contact: