Privacy Policy

Information we collect

• Account information such as email address and authentication details. If you sign in with Google, we receive basic profile information from Google as permitted by your Google account.
• Profile preferences and settings you save in the app, including your eligibility, capacity, and notification settings.
• Offer, task, and timeline data you enter to track your bonus progress.
• Content you submit for AI-assisted parsing, such as screenshots of offers, and — if you choose to use AI-assisted column matching when importing your bank-account history from a spreadsheet — the spreadsheet's column headers and a small sample of its rows. This is processed to extract or map structured details.
• Information you provide when you contact us, such as your name, email, and message, along with basic context like the page you were on and your browser, to help us respond and diagnose issues.
• Optional analytics events, only when you consent to analytics cookies/tracking — such as which offers you save and coarse value ranges of bonuses you complete. We never send your bank names for completed bonuses, exact bonus amounts, or account balances to our analytics provider.
• If a technical error occurs while you use the app, a diagnostic recording of that session so we can reproduce and fix the problem. These recordings mask all text you see or type and block images; they capture page structure, the addresses of pages you visit, and your interactions, rather than the content you enter. We do not record sessions in which no error occurs.

How we use your information

• Provide, operate, and improve the Bonus Sitter service.
• Authenticate your account and secure access to your data.
• Send service-related emails, such as reminders you requested.
• Parse and structure data you submit, including AI-assisted parsing of screenshots you upload and, when you opt in, AI-assisted column matching for bank-history spreadsheets you import.
• Understand product usage trends through optional analytics.

Cookies and session storage

We use cookies and similar storage that are strictly necessary to operate the service — for example, authentication and session cookies that keep you signed in and protect against cross-site request forgery. These are always active when you are signed in. Separately, optional analytics cookies/tracking are only set after you grant consent, and you can decline them without losing access to core features.

Analytics and consent

We only enable optional analytics after you grant consent in the in-app banner. You can decline analytics and still use core site features.

Data sharing and service providers

We do not sell your personal information. We share limited data with infrastructure and service providers that help us operate Bonus Sitter, each subject to contractual and security safeguards:

• Supabase — database hosting and authentication.
• Vercel — application hosting and deployment.
• Upstash — rate limiting and caching.
• Resend — delivery of reminder and service emails.
• Sentry — error monitoring and diagnostics, including masked session recordings captured only when an error occurs.
• Anthropic — AI-assisted parsing of offer details and screenshots you submit, and, when you opt in, AI-assisted column matching for bank-history spreadsheets you import (column headers and a sample of rows).
• Google — optional sign-in (OAuth) and, with your consent, analytics.

We may also disclose information when required by law or to protect the rights, safety, and security of our users and our service.

How we protect your data

We encrypt data in transit using TLS and rely on our infrastructure providers' encryption at rest. Access to your account data is isolated per user and enforced at the database level through row-level security, so other users cannot read or modify your data. Your personal calendar (iCal) feed is protected by a private token that acts as a credential; you can rotate or revoke it from your account settings if it is ever exposed.

Data retention

We keep personal data for as long as needed to provide the service and comply with legal obligations. You can request account deletion, and we will remove or anonymize data unless we must retain it for legitimate legal reasons.

Your choices and rights

• Access or update your profile/account information in your account settings.
• Choose whether to allow optional analytics tracking.
• Request a copy of the offer, task, and tracking data you have entered.
• Delete your account at any time from the Danger Zone in your account settings, which removes your tasks, tracked offers, capacity profile, and account record.

California privacy rights

If you are a California resident, you have the right to know what personal information we collect, to request access to or deletion of that information, and to opt out of the sale of personal information. We do not sell personal information. You can exercise your access and deletion rights directly through your account settings, and we will not discriminate against you for exercising these rights.

Children's privacy

Bonus Sitter is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. For material changes, we will provide additional notice, such as an email or an in-app notice, before the change takes effect.

Contact

Questions about this policy or your data? You can manage and delete your information from your account settings, or contact us directly.