Privacy Policy
Effective 27 October 2026
This policy explains what personal data Dynamic Pricing Ltd. (“we”) collects through BanditDB Cloud, the BanditDB Console and banditdb.com, and what we do with it. For data about your account, we are the controller. For data you send into your campaigns, you are the controller and we process it on your behalf.
What we collect
- From Google sign-in: your email address, name, profile picture and Google account ID.
- During onboarding: your name, job role, company name and website, industry, goals and how you heard about us.
- While you use the Console: when you sign in, the organization and team you belong to, and which features you use.
- Campaign data: the context, decisions and outcomes you send through the API. We cannot see what this data is about, so do not include personal data you are not allowed to share.
- Billing: if you buy a paid plan, our payment processor handles your card details. We never see or store them.
Why we use it
- To create your account, run the Service and keep it secure. This is needed to perform our contract with you.
- To suggest a starter campaign from your onboarding answers, and to improve the product. This is based on our legitimate interests.
- To send you service and account emails. We will only send marketing emails if you agree to them, and you can opt out at any time.
We do not sell personal data.
Who we share it with
We share personal data only with providers that help us run the Service:
- Google Cloud: hosting and storage, in the United States (us-central1).
- Google: sign-in. Google Gemini also generates the onboarding campaign suggestion from your onboarding answers.
- Stripe: payments, for paid plans only.
- Google Analytics: visit statistics on banditdb.com. The Console itself does not use it.
We may also disclose data where the law requires it. If your data is transferred outside the UK or EEA, we rely on standard contractual clauses or an equivalent safeguard.
Cookies
The Console sets one cookie, which keeps you signed in. It is needed for the Service to work. The public website uses Google Analytics cookies, which you can block in your browser.
How long we keep it
We keep account and campaign data while your organization exists. When you delete your organization in Settings, its campaigns, keys and user records are deleted. Copies in backups expire on their normal rotation. We keep billing records for as long as tax law requires.
Your rights
You can ask us to access, correct, delete or export your personal data. You can also object to or restrict how we use it. Email us and we will respond within 30 days. You also have the right to complain to your local data protection authority.
Changes and contact
If we change this policy in a material way, we will email account owners first. Questions or requests: Dynamic Pricing Ltd. · info@banditdb.com