Privacy policy
This policy explains how Bon.do (CVR 43473425, Denmark) handles personal data when you visit our website, use the Qualihelp service or talk to an assistant that runs on Qualihelp. Questions go to m@bon.do.
Two roles
For our customers' end users, Qualihelp is a processor: the customer (the company that embeds the assistant) decides why and how a visitor's conversation is used and is the controller. Those terms are in our data processing agreement. For our own website, customer accounts and billing, Bon.do is the controller, and this policy applies.
What we collect, and why
- Account data (name, work email, hashed password, workspace and role): to provide the service and keep it secure. Basis: contract.
- Content a customer uploads (documents, web pages, skills, branding): to build the customer's assistant. Basis: contract; the customer is controller of any personal data inside.
- Conversations (the questions visitors ask, the answers given, the sources cited, and an optional visitor reference a customer supplies): to run the assistant and show the customer how it performs. Basis: the customer's instructions.
- Usage and billing data (plan, calls, tokens, invoices and billing address): to meter the service and invoice. Basis: contract and accounting law.
- Technical data (IP address, request logs, security events): to run, protect and debug the service. Basis: legitimate interest.
- Email we send (verification, invitations, billing notices): to operate your account. Basis: contract.
We do not sell personal data and we do not use customer content or conversations to train models.
Cookies and measurement
This website asks first. A consent banner (Privaci) records your choice, and nothing from Google Analytics, Meta or LinkedIn is loaded until you accept the matching category: Analytics for Google Analytics, Marketing for Meta and LinkedIn. Rejecting both leaves the site fully usable and sets no tracking cookies.
With your consent we measure which pages are read, which buttons start a trial, clicks on our email address, and whether a visit ends in a new account. We do not send names, email addresses, workspace names or anything typed into a form to these tools, and we do not use them to build advertising profiles of visitors who have not accepted Marketing. Google Analytics keeps event data for 14 months.
The customer portal stores what it needs to keep you signed in and to remember your language. It uses the same consent choice as the website where the banner is shown.
Who processes data for us
- Scaleway: hosting of the application, its database and file storage, in the European Union (Amsterdam, the Netherlands).
- Cloudflare: delivery of the website, the customer portal and the chat widget.
- An AI model gateway and model providers: the text of a question and the extracts of the customer's documents needed to answer it are sent to a model to produce the answer.
- Stripe: card payment and subscription management. We never see full card numbers.
- An email delivery provider: sending service emails.
- Privaci: the consent banner that records your cookie choice.
- Google Ireland (Google Tag Manager and Google Analytics 4): website measurement, only after you accept Analytics.
- Meta Platforms Ireland (Meta Pixel): advertising measurement, only after you accept Marketing.
- LinkedIn Ireland (Insight Tag): advertising measurement, only after you accept Marketing.
Our data processing agreement lists the subprocessors in use and how we notify customers of changes. If a provider is outside the European Economic Area, we rely on the European Commission's standard contractual clauses or an adequacy decision.
How long we keep data
Account, content and conversation data are kept while the customer's workspace is active. When a workspace is closed we delete or return its data on request, apart from records we must keep by law, such as invoices (five years under Danish accounting law). Security logs are kept for a limited period.
Your rights
You can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. If your data is in a customer's assistant, we will pass the request to that customer, who is the controller. Write to m@bon.do. You may also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Security
Each customer's data is kept apart from every other customer's, access is controlled by role, connections are encrypted, and sensitive actions are logged. No system is perfectly secure; if a breach affects personal data we will tell the affected customers without undue delay.
Changes
We will update this page when our practices change and show the date at the top. For material changes we will email account owners.