Privacy Policy

1. Who we are

Bonafidio Corporation ("Bonafidio," "we," "us," or "our") provides a software platform that helps Shopify brands collect short video reviews from their customers in exchange for thank-you rewards. We act as a data controller for the personal information described in this notice. You can contact us at support@bonafid.io.

2. Information we collect

• Contact information — name, email address, and (where provided) mobile phone number, received from the partner Shopify store where you placed an order.
• Order information — order number, fulfillment status, and the brand you purchased from. We do not receive payment card details.
• Submitted content — video reviews, written feedback, and any consents or releases you provide when uploading content.
• Usage data — basic technical information (IP address, device, browser, pages viewed) when you interact with our review pages.
• Account data — for brand users, the email address and authentication data used to sign in to the Bonafidio dashboard.

3. How we use your information

• To send post-purchase SMS and email review requests on behalf of the brand you ordered from.
• To deliver thank-you reward codes when you submit a review.
• To share submitted reviews with the brand you purchased from, for use in their marketing where you have agreed.
• To operate, secure, and improve our services and prevent fraud or abuse.
• To comply with legal obligations, including messaging-compliance recordkeeping.

Our legal bases (where applicable) include performance of a contract, legitimate interests in operating and improving our service, consent (for SMS and marketing where required), and legal obligations.

4. SMS messaging

You receive SMS messages from Bonafidio because you provided your phone number and consent at checkout on a partner brand's Shopify store. Message frequency is low — typically one message per fulfilled order. Message and data rates may apply. You can reply STOP at any time to unsubscribe, or HELP for assistance. Mobile opt-in data and consent records are not shared with third parties for marketing purposes.

5. How we share information

• Partner brands — the brand whose store you ordered from receives your submitted reviews and aggregated campaign data.
• Service providers — including Twilio (SMS delivery), Resend (email delivery), Shotstack (video processing), Supabase (hosting/database), and Paddle (payments for our brand customers). These providers process data on our behalf under contract.
• Legal and safety — where required by law, to enforce our terms, or to protect the rights and safety of users.
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to standard confidentiality.

We do not sell personal information, and we do not share it with third parties for their own marketing.

6. Data retention

We retain personal data for as long as needed to provide the service, comply with legal obligations (including SMS consent recordkeeping), resolve disputes, and enforce agreements. Submitted reviews are retained for the brand's use until you or the brand request deletion.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or port your personal information, to object to or restrict processing, and to withdraw consent. To exercise any of these rights, email support@bonafid.io. You also have the right to lodge a complaint with a supervisory authority.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and audit logging — to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

Our service is not directed to children under 16, and we do not knowingly collect their personal information.

10. Changes to this notice

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.

11. Contact

Questions about this notice? Email support@bonafid.io.