Privacy Policy

Version 1.0 · Effective September 2026

1. Controller

Business Development Agency LLC, 1209 Mountain Road Place NE STE N, Albuquerque, NM 87110, USA · info@bdagencypro.com

2. What we collect

• Account data: name, email, password hash (or Google identity), language, time zone.
• Practice data: the practice name, its offices, members and roles, and everything the team creates: boards, cards, follow-ups and their log, comments, procedure codes, supply lists.
• Patient references entered by your team: a reference (chart number or initials and last name), insurer name and working notes. We ask you not to enter anything more (see the Terms). This information is processed on behalf of your practice, which remains responsible for it.
• Technical data: notifications you subscribe to (push endpoints), and standard server logs (IP address, browser, timestamps) kept for security.

3. Why and on what basis

To provide the service you signed up for (contract), to keep it secure (legitimate interest), and to send notifications you enabled (your choice, revocable in Settings). We do not sell data and we do not use it for advertising.

4. Who processes it for us

• Supabase (database, authentication, storage), servers in the United States.
• Vercel (hosting).
• Resend (transactional email), when email notifications are enabled.
• Google (sign-in with Google, if you use it).

5. Retention

As long as your practice uses Bond. Deleting your account or practice removes the data within 30 days from live systems; backups expire on their own schedule.

6. Your rights

Access, correction, export and deletion are available from Settings or by writing to info@bdagencypro.com. Members should direct requests about practice data to their practice owner.

7. Cookies

Bond uses only the cookies it needs to keep you signed in and remember your language. No analytics or advertising cookies.

8. Changes

We will ask you to accept a new version when this policy changes materially.