Legal

Privacy Policy

Effective: April 25, 2026

Who we are

Bonai is operated by Admati Labs, a company registered in Israel. This policy describes what information we collect when you use the Bonai platform at app.bonai.app, how we use it, and the choices you have about it.

This policy applies to your use of Bonai itself. It does not apply to any website, blog, or other property where you publish content generated using Bonai. You remain responsible for the privacy practices of your own properties.

The short version

Bonai works primarily with publicly available information. You give us your business details and the URL of your website. We query public AI search engines (ChatGPT, Perplexity, Gemini) and the public web to see how your business is described. We generate content drafts for you to review and publish on your own. We do not host your website, do not handle data about your website's visitors, do not auto-publish anything, and do not sell your information.

What we collect from you

To create and operate your Bonai account, we collect:

To deliver the service, we also collect business information you choose to share:

This business information is what you have voluntarily shared about your own company to help Bonai produce useful output for you. It is not personal data about third parties.

What we generate and store on your behalf

To deliver the service, Bonai produces and stores:

You retain ownership of all content generated for you, subject to the Terms of Service. You can view, copy, regenerate your API key, or mark content as posted from your dashboard.

What we do not collect or do

Bonai does not host your website. We do not collect personal data from visitors to your website. We do not place tracking pixels, advertising tags, or analytics scripts on your website.

Bonai does not auto-publish content. Every piece of content Bonai generates is a draft for your review. You decide what to post, where to post it, and when. If you choose to connect Bonai's API to an automation tool or agent that publishes on your behalf, you remain responsible for what it publishes.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your business data to train AI models. Information you provide is used to operate the service for you and is not pooled into a general dataset.

How we use your information

We do not send marketing emails without your explicit consent. Transactional emails about your account and the service you have subscribed to are sent regardless of marketing consent.

Sub-processors and third parties

Bonai uses the following service providers to operate. Information you give us passes through these services as needed to deliver the platform. Each has its own privacy policy.

Where your data is stored

Bonai's primary infrastructure runs on Railway, with data stored in regions Railway operates. Sub-processors store data according to their own infrastructure choices. By using Bonai you consent to your information being processed in the United States, the European Economic Area, and other jurisdictions where our sub-processors operate.

Data retention and deletion

Active accounts: we retain your account data and generated content for as long as your account is active.

Account deletion: when you delete your account from the dashboard, we immediately and permanently delete your account record, sites, content drafts, audit results, and API key from our active database. The deletion is a hard delete with no retention window. Recovery after deletion is not possible.

Backup retention: routine database backups maintained by our hosting provider may retain copies of your data for up to 30 days after deletion. These backups are encrypted, are used only for disaster recovery, and are overwritten on the standard backup rotation.

Server logs: standard server logs are retained for up to 90 days for security and operational purposes.

Your rights

You have the right to access, correct, export, or delete the personal data we hold about you. The dashboard provides direct access to most of your data and a self-serve account deletion flow. For requests we cannot fulfill through the dashboard, contact us using the details below and we will respond within 30 days.

If you are a resident of the European Economic Area, the United Kingdom, California, or another jurisdiction with applicable data protection laws, you may have additional rights including the right to object to processing, the right to data portability, and the right to lodge a complaint with a supervisory authority.

Cookies and tracking

Bonai uses minimal cookies necessary to operate the service: a session cookie for authentication and a cookie that remembers your dashboard preferences. We do not use advertising cookies, third-party tracking pixels, or behavioral analytics.

Children

Bonai is not directed at children under 16 and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify active subscribers by email and update the effective date at the top of this page.

Contact

Privacy questions or data requests: bonai.support@gmail.com

Data controller: Admati Labs, Israel.