Effective date: September 01, 2025
Who we are: BerryBond, Inc. (“BerryBond,” “we,” “us,” “our”)
Scope: This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website (berrybondapp.com), mobile applications, and related services, tools, and features (collectively, the “Services”). It applies to Consumers/Shoppers and Business Users/Merchants.

Quick promise: We do not sell your personal information. We also don’t share it for cross-context behavioral advertising (“targeted advertising”) as defined under U.S. state privacy laws.

1) Who this policy covers

• Shoppers / Consumers using our site or app to discover, join, or start group deals, and make purchases or redemptions.
  
  
• Merchants / Business Users creating profiles, configuring deals, viewing analytics, and receiving payments or reports.
  
  
• Visitors browsing our site, contacting support, or joining waitlists.
  
  

2) The data we collect

We collect information you provide, automatically, and from third parties.

A. Information you provide

• Identifiers & contact: name, email, phone, city/ZIP, account credentials (hashed), referral codes.
  
  
• Profile & preferences: interests (e.g., salon/spa categories), communication preferences.
  
  
• Transactional: deal participation, redemption details, purchase amounts, timestamps.
  
  
• Payment-related: handled by our payment partners (e.g., last 4 digits, tokenized details, payment status). We do not store full card numbers.
  
  
• Merchant business info: legal/business name, location(s), category, pricing/tiers, redemption rules, contact persons, support details, tax or settlement info as needed.
  
  
• Communications: support requests, survey responses, reviews, or other messages.
  
  
• Invites/referrals: if you invite others, we process the invitee contact data you submit. (We do not access your device contacts unless you explicitly allow it.)
  
  

B. Information collected automatically

• Device & usage: IP address, device type, OS/browser, app version, pages/screens viewed, clicks, referring URLs/UTMs, session duration.
  
  
• Approximate location: derived from IP or user-provided city/ZIP. We do not collect precise geolocation by default.
  
  
• Cookies/SDKs: essential, analytics, and (if enabled) marketing pixels. See Cookies & Tracking below.
  
  

C. Information from third parties

• Single Sign-On (SSO): Google, Apple (basic profile, email).
  
  
• Payments & fraud prevention: processors, risk and verification tools.
  
  
• Analytics & infrastructure: hosting, error monitoring, A/B testing.
  
  
• Partners & referrals: limited data to attribute campaigns or fulfill promotions.
  
  

3) Why we use your information (purposes)

• Provide the Services: account creation, authentication, deal orchestration (groups, tiers, redemptions), customer support.
  
  
• Process transactions: route payments via processors; confirm redemptions; issue receipts.
  
  
• Operate merchant tools: dashboards, analytics (views → joins → redemptions), audit logs, abuse prevention.
  
  
• Communicate: transactional emails/SMS/push (e.g., group status, tier reached), service notices, policy updates.
  
  
• Improve & secure: troubleshoot, debug, protect against fraud or abuse, ensure service reliability.
  
  
• Personalize & research: show relevant categories, measure performance, develop new features.
  
  
• Legal & compliance: enforce terms, respond to lawful requests, maintain records.
  
  

Legal bases (EEA/UK only): contract performance, legitimate interests (e.g., service security and analytics), consent (where required), and legal obligations.

4) How we share information

We do not sell personal information and do not share it for targeted advertising. We may disclose data to:

• Service providers / processors: hosting, cloud storage, analytics, communication, payments, fraud/risk, support tools—bound by contractual confidentiality and use limits.
  
  
• Merchants: shopper details necessary to fulfill and verify a deal you join (e.g., name/ID, redemption status).
  
  
• Other users: limited group-context info (e.g., your display name/avatar if you join a public group).
  
  
• Corporate events: business transfers (merger, acquisition); we’ll notify you of changes.
  
  
• Legal/safety: to comply with law, court orders, or protect rights, safety, and security.
  
  
• Aggregated/de-identified data: insights that do not identify you.
  
  

Processor vs. controller note:

• For your BerryBond account, we act as a controller.
  
  
• When we process certain merchant-provided data to deliver merchant services (e.g., redemption logs), we act as a processor to the merchant.
  
  

5) Cookies & tracking

We use:

• Essential cookies/SDKs (required for login, security, deal flows).
  
  
• Analytics (e.g., GA4) to understand usage; IP masking or similar measures may apply.
  
  
• (Optional) Marketing pixels only if/when implemented with proper consent controls.
  
  

Your choices: You can manage cookies in your browser, device settings, or our on-site Cookie Preferences. Blocking some cookies may limit functionality.

Do Not Track & Global Privacy Control: Some browsers and extensions send DNT or GPC signals. Where applicable, we treat a valid GPC as an opt-out request under relevant state laws.

6) Data retention

We keep personal information only as long as necessary for the purposes above (e.g., your account lifetime, required records, dispute windows) or as required by law. We then delete or de-identify it.

7) Your privacy choices & rights

Depending on your location, you may have rights to:

• Access/Know the data we have about you.
  
  
• Delete your data.
  
  
• Correct inaccuracies.
  
  
• Portability (receive a copy in a portable format).
  
  
• Opt out of sale/sharing/targeted advertising (we don’t sell/share, but the option exists).
  
  
• Limit use/disclosure of Sensitive Personal Information (we do not collect SPI by default for shoppers; payment data is handled by processors).
  
  
• Withdraw consent where we rely on consent.
  
  
• Appeal a decision (for certain U.S. states).
  
  

How to exercise: Email privacy@berrybondapp.com or use Settings → Privacy (app) / Privacy Request form (web). We’ll verify your identity and respond within the legally required time (e.g., 45 days in California, extendable once). You may designate an authorized agent (CA/CO/CT/VA/UT).

8) Shoppers vs. Merchants: what’s different?

• Shoppers: We process account, group, redemption, and limited payment-related information to operate deals and support you.
  
  
• Merchants: We process business contact info, deal configuration, analytics, payout and tax/settlement details, and maintain audit logs for compliance and fraud prevention. We may send you product and onboarding emails as a business contact (you can opt out of non-transactional messages).
  
  

9) Children’s privacy

Our Services are not for children under 13 (or the relevant minimum age in your jurisdiction). We don’t knowingly collect data from children. If you believe a child provided data, contact privacy@berrybondapp.com to remove it.

10) Security

We use industry-standard administrative, technical, and physical safeguards (encryption in transit, access controls, logging). No system is 100% secure; please use strong passwords, keep them confidential, and promptly notify us of suspected unauthorized activity.

11) International data transfers

We’re U.S.-based (Dallas, TX). If you’re outside the U.S., your data may be processed in the U.S. and other countries. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) for EEA/UK transfers.

12) State-specific notices (U.S.)

California (CPRA/CCPA) — Notice at Collection

Categories we collect: identifiers (name, email, phone), commercial info (deal participation, redemptions), internet/network activity (usage), approximate location (city/ZIP), inferences (preferences), and for merchants, professional/business information.
Purposes: to provide the Services, process transactions, communicate, secure, and improve the Services.
Sensitive personal information: not collected by default; payment details are handled by processors.
Retention: as described above.
Sale/Sharing: we do not sell or share your personal information for cross-context behavioral advertising.
Your rights: access/know, delete, correct, portability, opt-out (if applicable), limit SPI, and non-discrimination. Submit requests via privacy@berrybondapp.com.
GPC: We honor Global Privacy Control signals where applicable.

Virginia, Colorado, Connecticut, Utah

You may have rights to access, correct, delete, and opt out of targeted advertising/profiling (not used as defined) and data sales (we don’t sell). You may appeal a decision by contacting privacy@berrybondapp.com (subject “Appeal”).

Nevada

We do not “sell” personal information under Nevada law. You can still contact info@berrybondapp.com with questions.

13) GDPR/UK-GDPR rights (EEA/UK)

Where these laws apply, you have rights to access, rectification, erasure, restriction, portability, objection, and to withdraw consent where relied upon. You may lodge a complaint with your local supervisory authority. Our contact: info@berrybondapp.com.

14) Third-party services & links

Our Services may link to third-party sites or use third-party SDKs (SSO, payments, analytics). Their privacy practices are governed by their own policies.

15) Changes to this policy

We may update this policy from time to time. We’ll post the updated version and change the “Effective date.” Material changes will be communicated via email, in-app notice, or banner.

16) Contact us

BerryBond, Inc.
10714 Atlanta Dr. Frisco, Texas, 75035
Email: info@berrybondapp.com
Support: info@berrybondapp.com • +1-214-293-3410  •  +1-214-282-3985

Addendum: Cookies & Tracking (detailed)

• Essential: authentication, security, load balancing.
  
  
• Performance/Analytics: aggregate usage, feature adoption (e.g., GA4).
  
  
• Functional: remember preferences (e.g., city/ZIP).
  
  
• Marketing (if enabled): campaign attribution, optional retargeting.
  
  

Manage: Use our Cookie Preferences center, your browser settings, or OS controls to delete/disable cookies, reset ad IDs, or limit tracking. Some features may not function without essential cookies.

Addendum: Merchant Data Processing Agreement (summary)

When we process personal data on behalf of a Merchant (e.g., redemption logs tied to Merchant systems), BerryBond acts as a processor and will:

• Process data only on documented instructions;
  
  
• Implement appropriate security measures;
  
  
• Assist with data subject requests received via the Merchant;
  
  
• Notify Merchant of data incidents without undue delay;
  
  
• Support audits as reasonably required;
  
  
• Delete or return personal data at contract end.