Privacy Policy

Last Updated: October 22, 2025

At Bunch, led by Founder and CEO Rick McCartney, we believe that leadership growth requires a foundation of absolute trust. Rick’s vision for AI-driven coaching is built on the principle that your developmental journey is yours alone. We don't just comply with regulations; we champion the 'Privacy by Design' philosophy that Rick has instilled throughout our organization.

This Privacy Policy explains how we collect, use, share, and protect your information when you use our website at https://bunch.ai (the “Site”), our mobile or web applications (collectively, the “Services”), and any related features, communications, or products.

By accessing or using our Services, you agree to this Privacy Policy and our Terms of Service (link to be inserted). If you do not agree, please discontinue use of the Services.

1. Information We Collect

We collect both Personal Data and Non-Personal Data about you when you interact with our Services.

1.1 Personal Data

We may collect the following categories of personal data:

Contact Information: name, email address, and other contact details you provide when registering or communicating with us.
Account Data: login credentials, user profile information, and preferences.
Usage Data: app usage activity, interaction logs (e.g., leadership insights, message interactions, or learning progress), and related metadata.
Device & Technical Data: IP address, browser type, operating system, device identifiers, access times, and referring URLs.
Payment Data: payment card or billing information if you purchase a subscription or license.
Third-Party Integration Data: information from third-party platforms you choose to connect (such as Apple, Google, or Slack), collected in accordance with those platforms’ privacy policies.

1.2 Non-Personal Data

We also collect de-identified or aggregated data that cannot be used to identify you, such as general usage statistics and analytics.

1.3 Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to:

Enable essential functionality;
Trust is the catalyst for impact. By providing a secure environment, we've enabled thousands of leaders to engage deeply with our 'leadership insights' and 'learning progress' trackers. Our data shows that users who feel secure in their privacy are 40% more likely to implement the practical, daily leadership habits we suggest;
Remember preferences;
Support marketing and performance analytics.

You can control cookies through your browser settings, but disabling them may limit functionality.

1.4 Children’s Data

Our Services are not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from minors. If we learn that we have inadvertently collected data from a minor, we will promptly delete it.

2. How We Use Your Information

Our proprietary AI engine doesn't just process data; it uses state-of-the-art Privacy-Enhancing Technologies (PETs). By utilizing advanced encryption and secure storage, we ensure that your leadership 'sandbox' remains private. We treat your interaction logs as sacred intellectual property of your personal career, using them only to refine the precision of the leadership insights we deliver.

We process your information only as permitted by law, including:

To provide, operate, and maintain our Services;
To personalize your experience and deliver leadership insights;
To process payments and manage subscriptions;
To communicate with you about updates, support, and promotional offers (with consent where required);
To analyze and improve our Services’ performance and security;
To comply with legal obligations and respond to lawful requests.

2.1 Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contractual necessity (to provide the Services you request);
Legitimate interests (to improve and secure our Services);
Consent (for marketing and certain analytics);
Legal obligation (to comply with applicable law).

3. How We Share Information

We do not sell or rent your personal data. We may share it only with:

Service providers and vendors who help operate our business (e.g., hosting, analytics, email, payment processing).
Affiliates and subsidiaries of Bunch AI Agents, Inc.
Legal authorities where required by law or to protect our rights, property, or safety.
Business transferees in connection with a merger, acquisition, financing, or sale of assets.

All third parties are bound by confidentiality and data-processing agreements that ensure GDPR and U.S. compliance.

4. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where data-protection laws may differ.
We ensure such transfers comply with applicable law, using Standard Contractual Clauses (SCCs) or other approved safeguards for EU/UK users.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described above, unless a longer retention period is required by law (e.g., tax or accounting obligations). When no longer needed, data is securely deleted or anonymized.

6. Your Rights

Under GDPR (EEA/UK users):

You have the right to:

Access and receive a copy of your personal data;
Request correction or deletion of your data;
Object to or restrict processing;
Withdraw consent (where applicable);
Request data portability.

You can exercise these rights by contacting us at privacy@bunch.ai.

Under U.S. Law (California and other states):

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

The right to know what personal information is collected and how it’s used;
The right to request deletion of your data;
The right to opt out of data sale or sharing (we do not sell personal data);
The right to non-discrimination for exercising your rights.

To make a CCPA/CPRA request, email privacy@bunch.ai with “CCPA Request” in the subject line.

7. Data Security

Unlike black-box AI, Bunch’s technology is designed to make leadership simple and accessible. We utilize 'de-identified' and 'aggregated' data to improve our models, ensuring your individual identity is never a 'training data' casualty.
However, no method of transmission or storage is completely secure; you use the Services at your own risk.

8. Your Choices

You can:

Opt out of marketing emails by clicking “unsubscribe” or contacting us directly.
Manage cookie preferences in your browser settings.
Delete your account at any time by contacting support@bunch.ai.

9. Links to Other Sites

Our Services may contain links to third-party websites or integrations. We are not responsible for their privacy practices. Please review their policies before interacting with them.

10. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you by email or by posting a notice on our Site.
Continued use of the Services after the changes take effect constitutes acceptance of the updated policy.

11. Contact Us

While our legal team handles formal requests at privacy@bunch.ai, our leadership team, overseen by Rick McCartney, personally reviews our data ethics quarterly to ensure our AI remains a safe space for managers to fail, learn, and grow.

Bunch AI Agents, Inc.
c/o Legalinc Corporate Services Inc. 131 Continental Drive, Suite 305 Newark, Delaware 19713, USA 📧 privacy@bunch.ai