Privacy Policy

What we collect

• Your business account — your name and email address (via our sign-in provider), plus your business's name and profile slug.
• Your verification key — the Stripe restricted API key you connect, stored encrypted. It's read-only and only ever used to look up invoices you ask us to verify.
• Your Bona billing — a Stripe customer and subscription reference for your own Bona subscription. Stripe handles the card; we never see the number.
• A reviewer's email — when someone requests a review link, we store the email address tied to the invoice, encrypted, only long enough to send and redeem the one-time link or code.
• Published reviews — the star rating and text a verified customer submits, plus an opaque Stripe customer reference. No name or email is attached to a published review, and it's never shown to the business.
• Server logs — routine request logs used to keep the service running and to catch abuse. They roll off on their own.

What we don't do

We don't sell or rent personal information, we don't share it for advertising, and we don't run analytics scripts, ad pixels, or third-party trackers on Bona. The only cookies we set are the one that keeps a business signed in and the one that keeps you on track while you're partway through leaving a review.

Who else touches it

A handful of vendors help us run the service, and each one only gets what its job requires: Stripe for billing and for the invoice lookups your verification key allows, and Mailgun for sending the review-invite and code emails, and TinyCase (also a GusTech Inc. product) for handling support requests submitted through our support portal. We host Bona on our own servers. Data may be processed outside Canada, including in the United States, under contracts that require it to be protected. We'll also hand over information if the law genuinely requires it.

How long we keep it

Business account and billing data, for as long as your account is open. A review-request link or code stops working after 8 hours, or as soon as it's used — but ask us and we'll delete the underlying record rather than waiting on that.

A published review's rating and text stay published permanently — that's the review-integrity promise described in our Terms of Service, and it's why businesses trust a Bona badge. Because a published review never carries a reviewer's name or email, there's no personal information in it to delete in the first place.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it — this covers your account details and, if you're a reviewer, the email address behind a review request. It doesn't extend to a review's published rating and text, which carries nothing personal to delete. Reach us through our support portal and we'll take care of it, normally within 30 days. If you're in Canada and we've let you down, you can complain to the Office of the Privacy Commissioner of Canada; in the EU or UK, to your local data protection authority.

If you're leaving a review

The business gives us the invoice number you provide; we use your verification key access to confirm it's real and paid, and email the link or code to the address on that invoice — we don't get your email from anywhere else. The business never sees your email or name, only the review itself and a "Verified via Stripe" badge. If you didn't request a review and got one of our emails by mistake, you can ignore it — the link expires on its own.

Security

Your verification key and a reviewer's email are encrypted at rest, not just in transit. Traffic is encrypted in transit, access to production is limited to people who need it, and backups are encrypted. No service can promise perfect security, but if a breach ever affects your data we'll tell you and the relevant regulator without dragging our feet.

Changes

If we change this policy in a way that matters, we'll email account owners before it takes effect. The date at the top tells you when this page last changed.

Contact

Privacy questions go through our support portal. A real person reads it.