Privacy Policy
Last Updated: February 11, 2026
PixelDev s.r.o., IČ: 23476800 ("PixelDev," "Bondery," "we," "us," or "our") respects the privacy of its users ("User," "your," or "you"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Bondery's platform, websites, web application, browser extension, and API (together "Services").
Please read this privacy policy carefully to understand our policies and practices regarding your information and how we will treat it. By accessing or using our Services, you agree to accept all the terms contained in this Privacy Policy and acknowledge and agree with the practices described herein.
If you do not agree with the terms of this privacy policy, please do not access or use our Services.
We do not sell your personal information, nor do we intend to do so.
1. Introduction
Bondery is a personal relationship manager (PRM) and network management tool that helps you organize, track, and nurture your personal and professional relationships. Our Services include:
- Bondery Webapp – A web application for managing your contacts, relationships, activities, and interactions
- Bondery Browser Extension – A Chrome extension that helps you import contact information from social platforms
- Bondery API – Backend services that power the webapp and extension
- Bondery Website – Our public marketing and informational website
We collect and store only the information necessary to provide our Services. We are committed to protecting your privacy and being transparent about our data practices.
2. Data Controller
The data controller responsible for your personal data is:
PixelDev s.r.o.
IČ: 23476800
Bělehradská 858/23
Prague 120 00
Czech Republic
3. Information We Collect
a) Account Information
When you register for Bondery, we collect basic account information necessary to create and manage your account, such as your email address, authentication credentials, and any third-party login identifiers if you choose to sign in via OAuth providers.
b) User Profile and Preferences
You may optionally provide profile information (such as your name and profile photo) and preferences (such as language and display settings) to personalize your experience.
c) User-Generated Content
The core function of Bondery is to help you manage your personal network. You may store various types of information about your contacts, relationships, activities, and interactions. This may include names, contact details, social media handles, notes, photos, dates, location information, and other data you choose to enter.
Important: You are responsible for ensuring you have the appropriate legal basis to store information about other individuals in your Bondery account. We act as a data processor for this contact data on your behalf.
d) Browser Extension Data
If you use the Bondery browser extension, it may extract publicly visible profile information from supported websites when you explicitly initiate an import action. This data is used to pre-fill contact forms in Bondery. The extension only activates when you click the Bondery button and does not automatically collect or transmit data.
e) Technical and Log Data
We automatically collect certain technical information when you use our Services, including IP addresses, browser and device information, access timestamps, and server logs for security and debugging purposes.
f) Analytics Data
We may use analytics tools to understand how users interact with our Services and to improve them. This may include page views, feature usage, session duration, and anonymized interaction data. You may be able to opt out of analytics tracking in your account settings where available.
g) Feedback and Communications
If you submit feedback, contact us for support, or otherwise communicate with us, we collect the content of your communications and your contact information for response purposes.
h) Information We Do NOT Collect
We do not process biometric data. We do not access your social media accounts directly — any browser extension functionality only reads publicly visible page content that you explicitly choose to import.
4. How We Use Your Data
We use the information we collect to:
- Provide our Services – Create and manage your account, store and display your contacts and activities, sync data across your devices
- Authenticate you – Verify your identity and manage secure access to your account
- Improve our Services – Analyze usage patterns to fix bugs, improve features, and develop new functionality
- Communicate with you – Respond to your inquiries, send service-related notifications, and provide support
- Ensure security – Detect and prevent fraud, abuse, and unauthorized access
- Comply with legal obligations – Meet our legal and regulatory requirements
5. Legal Basis for Processing
We process data only when we have a legal basis to do so—typically your consent, a contractual need, or a legitimate business interest. You may object to processing based on legitimate interests at any time by contacting us.
6. Cookies and Similar Technologies
Essential Cookies/Storage
We use essential cookies and local storage for:
- Authentication – Maintaining your logged-in session
- Preferences – Remembering your language and display settings
These are necessary for the basic functioning of our Services and cannot be disabled.
Analytics
We may use analytics tools for product analytics. These tools may set cookies to:
- Distinguish unique users
- Track session information
- Remember opt-out preferences
You can disable analytics tracking in your account settings where available.
We Do NOT Use
- Advertising or tracking cookies
- Third-party marketing cookies
- Cross-site tracking technologies
7. Security
We use industry-standard safeguards (encryption, access controls, monitoring, security reviews) to protect your data.
Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
You are responsible for securing your passwords and devices. That includes following best practices like using strong, unique passwords, logging out of shared devices and reporting any suspected unauthorized access immediately.
8. Data Retention
While Your Account is Active
We retain your data for as long as your account is active and as needed to provide you with our Services.
After Account Deletion
When you delete your account:
- Your data – All your personal data, contacts, activities, and uploaded files are deleted immediately
- Backups – Data in backups is purged within 30 days
- Logs – Server logs containing your IP address are retained for up to 90 days for security purposes, then deleted or anonymized
Exceptions
We may retain certain data longer if:
- Required by law or legal process
- Necessary to resolve disputes or enforce our agreements
- Needed for legitimate business purposes (in anonymized/aggregated form)
9. Disclosure of Personal Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
a) Service Providers (Subprocessors)
We share data with trusted third-party service providers who help us operate our Services (see Section 15 for the complete list). These providers are contractually bound to protect your data and use it only for the purposes we specify.
b) Legal Requirements
We may disclose your information if required to:
- Comply with applicable law, regulation, or legal process
- Respond to lawful requests from public authorities
- Protect our rights, privacy, safety, or property
- Enforce our Terms of Service
c) Business Transfers
If PixelDev is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
d) With Your Consent
We may share your information for other purposes with your explicit consent.
10. International Data Transfers
PixelDev is based in the Czech Republic (EU). Your data may be processed in the European Union and potentially in other countries where our service providers operate.
When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Other legally recognized transfer mechanisms
11. Children
Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us immediately.
12. Your Privacy Rights
For All Users
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data in a portable format
- Object to certain processing activities
For EEA/UK/Swiss Residents (GDPR Rights)
In addition to the above, you have the right to:
- Restrict processing of your personal data
- Withdraw consent where processing is based on consent
- Lodge a complaint with your local data protection authority
The lead supervisory authority for PixelDev is:
Úřad pro ochranu osobních údajů (ÚOOÚ)
Czech Data Protection Authority
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
https://www.uoou.czExercising Your Rights
To exercise any of these rights, please contact us at team@usebondery.com. We will respond to your request within 30 days (or within the timeframe required by applicable law).
We may need to verify your identity before processing your request. In some cases, we may not be able to fully comply with your request (for example, if it would affect the rights of others or if we have a legal obligation to retain certain data).
13. Your Responsibilities for Contact Data
Bondery allows you to store information about other people (your contacts). When you add contact information to Bondery, you are the data controller for that information, and we act as a data processor on your behalf.
You are responsible for:
- Ensuring you have a lawful basis to store and process information about your contacts
- Keeping contact information accurate and up to date
- Respecting the privacy rights of the individuals whose information you store
- Deleting contact information when you no longer have a legitimate reason to keep it
We recommend using Bondery only for managing your genuine personal or professional relationships.
14. Third-Party Links
We may include links to third-party websites or services in our Services. We have no control over the content, privacy policies, or practices of any third-party websites or services.
We recommend that you review the privacy policies of any third-party websites or services you visit through our links. We are not responsible or liable for the collection, use, or disclosure of your information by these third parties.
15. Third-Party Service Providers (Subprocessors)
Bondery uses the following third-party service providers for the provision of services as detailed under the Terms. Each provider is contractually obligated to protect your data and keep it confidential.
| Provider | Use Case | Privacy Policy | Location of Data |
|---|---|---|---|
| Vercel | Website and webapp hosting | https://vercel.com/legal/privacy-policy | |
| Supabase | Authentication, database, file storage | https://supabase.com/privacy | EU |
| PostHog | Product analytics | https://posthog.com/privacy | EU |
| Plunk | Emails | https://www.useplunk.com/legal/privacy | EU |
| OpenFreeMap | Maps | https://openfreemap.org/privacy |
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email or through our Services (for significant changes)
Your continued use of our Services after any changes indicates your acceptance of the updated Privacy Policy.
17. Contact Us
If you have any questions about this Privacy Policy or how we process your information and data, please email us at team@usebondery.com. We'll be happy to help!
Or you can reach us by mail at our postal address: PixelDev s.r.o., Bělehradská 858/23, Prague 120 00, Czech Republic.