Privacy

Two different groups, with different relationships to Bonjo.

Account holders are clients and callers who signed up. Prospects are the people a caller contacts on a client's behalf. Prospects did not sign up for anything, and this policy is mostly about them.

Your name, email address and password, which is stored only as a one-way hash and cannot be read by anyone including us.

For clients: your company details, any sales material you upload, the bounties you post and the meetings delivered to you.

For callers: your profile, the bounties you work, the meetings you deliver and what you have been paid.

You can download everything held about you from your account at any time.

Name, job title, company, and where provided an email address, phone number or LinkedIn profile. This comes either from a list a client uploaded or from a caller recording a meeting they booked.

Bonjo processes this to run the marketplace: to prevent the same person being contacted twice, to enforce suppression lists, and to record what a client paid for.

Where a client uploads a list, the client is responsible for having the right to share it.

Callers use their own dialling software and can upload its call log against a bounty. That log holds the number dialled, when, what the outcome was, and where their tool provides one, a link to a recording of the call.

Bonjo stores the link, not the audio. Recordings stay in the caller's own system, which means we can remove our reference to a recording but cannot delete the recording itself. If you want the audio deleted, tell us and we will pass the request to the caller, who is the party that holds it.

A client is shown the calls with the person they were introduced to, and not the caller's wider dial log, which contains other companies' prospects. Phone numbers are partly masked in that view.

Recording a call is subject to the law where the parties are, and in some places every party must consent. Callers are independent contractors and are responsible for recording lawfully; Bonjo does not make the recording and does not operate the dialler.

Uploaded contact lists are deleted 180 days after the bounties using them close.

Meeting records are kept for 730 days because they are the evidence behind a payment, then the prospect's identity is stripped and only the anonymised financial record remains.

Imported call logs are kept on the same clock and stripped the same way: after 730 days the number, the name and the recording link are removed, and what remains is that a call happened and how it went.

Suppression records are kept indefinitely, and deliberately so. They are the only way to honour a request never to be contacted again: deleting the record would mean the next upload could add that person back.

You can ask what Bonjo holds about you, ask for it to be deleted, or ask never to be contacted again. Email hello@bonjo.io.

When we delete a prospect's data, we remove them from uploaded lists and strip their name and contact details from meeting records and from any imported call log, including the link to any recording. The records themselves are kept in anonymised form, because they are the evidence behind a payment already made.

We also add them to every suppression list, which is what stops a future upload putting them back in front of a caller.

Stripe, for payments and payouts. Stripe holds card and bank details; Bonjo does not.

Resend, to send notification emails. Receives the recipient's address and the message.

Neon, which hosts the database.

Cloudflare, for DNS and for storing uploaded documents and photos.

Anthropic, only if enabled, to read uploaded sales material and draft a call script.

Callers' own dialling tools, which hold the call recordings Bonjo links to. Bonjo does not send them data; they hold it because the caller made the call.

Bonjo does not sell personal data.