Privacy Policy

KLYTICS LLC is a limited liability company organized in San Juan, Puerto Rico. For privacy inquiries, contact privacy@bimbas.io.

2.1 Information you provide

• Account information. When you sign up through Clerk, we receive your email address and, optionally, your name and profile image. Clerk stores the authenticated credential; we store an opaque Clerk user identifier plus the email.
• Payment information. When you subscribe to a paid plan, Stripe processes your payment. We store only a Stripe customer identifier and your current plan. We never see or store full card numbers.
• Video URLs you submit. When you log a video for performance tracking, we store the public URL you provide, along with the platform you designated and the brief (if any) associated with the submission.
• Competitor accounts you add. If you use the CLONE feature, we store the competitor handles you choose to track.
• Preferences. Niches, notification choices, and other settings you configure in the Service.

2.2 Information we derive

• Content briefs. When you generate a brief, we send the trend context to Anthropic (Claude) and store the structured output we receive.
• Performance metrics. We query public metrics APIs (TikTok Research API, YouTube Data API, Instagram Graph API where available) at 24 and 72 hours after your submission and store the resulting view, like, and engagement counts together with a computed performance score.
• Usage events. We record in-product events via PostHog — which trend you viewed, when you generated a brief, when you logged a video. Our event taxonomy explicitly excludes email, name, IP address, and any free-text user input.
• Error telemetry. We use Sentry to capture errors. Stack traces and request context are stored with PII scrubbing applied at capture time.

2.3 Information we ingest from public sources

Our SCOUT pipeline queries public social platform APIs to identify trending content patterns. We store aggregate metrics (views per hour, engagement rate, creator count) keyed by niche and keyword. We do not store per-video author handles, raw post text, or any identifier tied to a specific creator other than those creators who voluntarily use the Service.

• To provide, maintain, and improve the Service.
• To generate personalized content briefs and performance feedback.
• To compute aggregate statistics such as the "BIMBAS Lift" metric. Aggregates require a minimum sample size (currently 20 qualifying users) and are reported without individual identification.
• To operate subscription billing and account management.
• To send transactional emails (e.g., HERALD trend alerts) and, with your consent, product updates.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We share information only with:

• Service providers acting on our behalf: Clerk (authentication), Stripe (payments), Anthropic (AI inference), Resend (email delivery), PostHog (analytics), Sentry (error monitoring), and infrastructure providers hosting our databases and compute. Each processes data under their own privacy terms and only for the purposes described.
• Legal authorities when required by valid legal process.
• Successors in the event of a merger, acquisition, or sale of assets, subject to confidentiality protections consistent with this Policy.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

• Account information is retained for the life of your account and deleted within 30 days of account closure, except where we are required to retain it for legal or accounting purposes.
• Performance logs (the URLs you submit and the derived metrics) are retained for 90 days after creation to support the calibration loop, then purged.
• Webhook event logs (Stripe, Clerk) are retained for 90 days for audit and then purged.
• Trend metadata ingested from public sources is retained indefinitely in aggregated form; no individual creator is identifiable from these aggregates.

Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict processing of your personal information, and to withdraw consent where processing is consent-based. You may exercise these rights by:

• Managing your account settings directly in the Service.
• Emailing privacy@bimbas.io with your request. We will verify your identity and respond within 30 days.

Account deletion removes your user record and cascades to your performance logs, content briefs, and competitor-account preferences. Aggregate statistics that included your data before deletion are not re-computed; the next scheduled aggregation will exclude your data.

We use strictly necessary cookies for authentication (set by Clerk) and anonymous analytics cookies set by PostHog to measure product usage. We do not use cross-site tracking or advertising cookies. You may block cookies in your browser; authentication will not function without the Clerk session cookie.

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under that age. If you believe a child has provided us personal information, contact privacy@bimbas.io and we will delete it.

BIMBAS is operated from Puerto Rico (United States). If you access the Service from the European Union, United Kingdom, or another jurisdiction with data-protection laws, your information may be transferred to and processed in the United States. By using the Service, you consent to such transfers. For EU/UK users, KLYTICS is the data controller under the GDPR; the legal bases for processing are (a) contract performance, (b) legitimate interests in operating and improving the Service, and (c) consent for optional communications.

We use industry-standard safeguards, including TLS in transit, encryption at rest for databases, secret-scanning in our build pipeline, and least-privilege access to production systems. No method is perfectly secure; we cannot guarantee absolute security but we respond promptly to suspected incidents.

We may update this Policy from time to time. Material changes will be communicated by email or in-product notice. The "Effective" date at the top reflects the most recent revision.

KLYTICS LLC · San Juan, Puerto Rico
Privacy: privacy@bimbas.io
General support: support@bimbas.io