Privacy Policy

1. Information We Collect

We collect only what we need to run a local hair and beauty marketplace.

Information you give us

• Account information: name, email address, password or sign-in credentials, and optionally a phone number and profile photo. If you sign in with Google or Apple, we receive your name, email address, and account identifier from that provider.
• Vendor and provider business information: business name, description, services, products, prices, photos, portfolio images, business address or service area, booking policies, accepted payment methods, and contact details you choose to display.
• Messages: the content of messages you send to and receive from other users through in-app chat.
• Photos and images you upload (profile pictures, product photos, portfolio and inspiration images).
• Reviews and ratings you post, and booking notes.
• Bookings and orders: services or products requested, dates and times, the vendor or client involved, order status, and delivery address if you choose delivery.
• Payment and purchase records: amounts, dates, items, deposit and subscription status. Card and bank details are entered directly with our payment processor (Stripe) and are not stored by Bundle Tea; we receive only limited details such as the last four digits, card type, and payment status.
• Support communications: anything you send to support@bundletea.com.
• SMS opt-in: your mobile number and opt-in/opt-out records if you join our text program (see Section 5).

Information collected automatically

• Location: with your permission, your device's precise or approximate location, used to show vendors and providers within a 50-mile radius. We collect location only while you use the app and only after you allow it in your device settings. You can turn it off at any time; you can still search by entering a city or ZIP code.
• Device and usage information: device type, operating system, app version, language, IP address, push-notification token, app and installation identifiers, and how you use features (for example, screens viewed, searches, favorites, comparisons).
• Crash and performance data: crash logs, error reports, and diagnostics that help us fix problems.
• Install and link attribution data: information about how you found or opened the app (for example, which link or campaign led to an install).

We do not intentionally collect your contacts, calendar entries, or microphone audio for Bundle Tea features.

2. How We Use Information

We use personal information to:

• Create and secure your account, verify your email or phone, and prevent fraud and abuse.
• Show you vendors, providers, products, and services within 50 miles of you.
• Let you book appointments, place orders, pay deposits or purchases, and message vendors and clients.
• Let vendors and providers create listings, manage bookings, and receive payments.
• Process listing subscriptions for vendors and providers (Basic and Premium plans) when purchased on the website.
• Send transactional messages by email, push notification, or SMS — such as verification codes, booking confirmations, reminders, changes, cancellations, and order updates.
• Send marketing messages only if you opt in (you can opt out any time).
• Screen user-submitted text and images for prohibited content and enforce our Terms of Service.
• Understand app performance, fix crashes, and improve features.
• Comply with legal obligations and respond to lawful requests.

We do not sell or rent your personal information. Measurement and attribution tools may process limited device and install data to help us understand how people find Bundle Tea; you can limit ad tracking in your device settings.

3. How Information Is Shared

With other users

• Public profile content: vendor and provider listings, business details, photos, prices, and reviews are visible to anyone using the Service. Your reviews show your display name and profile photo.
• Bookings and orders: when you book or order, we share the information needed to complete it (such as your name, contact details, booking details, and, for delivery, your address) with that specific vendor or provider. Client location is never broadcast publicly; it is shared with a specific vendor only to complete an active booking or delivery.
• Messages are delivered to the users you message.

With service providers that process data on our behalf

These companies may process personal information only to provide services to us:

• Base44 — app hosting, database, user authentication, and file storage.
• Stripe — payment processing for orders, deposits, and vendor subscriptions, and in-person payments where enabled.
• Twilio — SMS delivery for verification codes, booking notifications, and our opt-in text program.
• Google Firebase — push notifications, app analytics, and app installation identifiers.
• Sentry — crash reporting and performance monitoring.
• AppsFlyer and Branch — install attribution and deep links (for example, opening the right page from a shared link).
• Meta (Facebook SDK) — app event measurement where enabled.
• Google Maps / map tile providers — displaying maps and calculating distance.
• Google Sign-In and Sign in with Apple — signing in with an existing account.
• Email delivery providers — sending account and booking emails.

For legal reasons and business transfers

We may disclose information if required by law, to protect the rights and safety of users or the public, or to enforce our Terms. If Bundle Tea is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

4. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of certain sharing, and the right not to be discriminated against for exercising those rights.

To exercise these rights, email support@bundletea.com with the subject "Privacy Request", or use the in-app Delete account option (see Section 6). We will verify your request using the email address on your account and respond within 45 days. You may use an authorized agent. We will not discriminate against you for exercising your rights.

Mailing address for legal notices: THE BUNDLE TEA LLC, c/o Republic Registered Agent Inc., 3400 Cottage Way, Ste G2, Sacramento, CA 95825.

5. SMS Text Message Program

When you text the keyword BUNDLE to our campaign number, THE BUNDLE TEA LLC collects your mobile phone number to send you recurring automated marketing text messages: deal alerts, special offers, and other updates about local hair vendors and beauty service providers on the Bundle Tea marketplace, up to 4 messages per month. Message and data rates may apply. Reply STOP at any time to cancel and reply HELP for help. You must be 18 or older to join, and consent is not a condition of any purchase. We are not responsible for message delays or errors caused by your mobile carrier. Your phone number is processed by our messaging provider solely to deliver the program and is never sold or shared for advertising.

Separately from the marketing program, if you provide your phone number in the app we may send transactional texts related to your account and bookings (such as verification codes, booking confirmations, reminders, and changes). Message frequency varies. Reply STOP to opt out of non-essential texts, HELP for help. Mobile opt-in data and consent are not shared with third parties or affiliates for marketing purposes.

6. Deleting Your Account and Data

You can delete your Bundle Tea account at any time:

• In the app: open Profile, tap Delete account, and confirm.
• On the web or without the app: visit https://bundle-tea.com/delete-account, or email support@bundletea.com from the email address on your account with the subject "Delete my account". We will confirm the request and complete it within 30 days.

What we delete: your account and profile, profile photos, saved favorites, messages, uploaded photos, vendor or provider listings, products, services and portfolio, location data, and push/SMS contact details.

What we may keep, and for how long: records of payments, orders, bookings, and subscriptions required for tax, accounting, chargeback, and fraud-prevention purposes (up to 7 years); records of SMS opt-outs (so we do not text you again); and information needed to resolve disputes or enforce our Terms. Reviews you posted may remain visible but will be shown as from a deleted user. Backups are overwritten on a rolling schedule within 90 days.

Vendor listing plans purchased on the website end when the account is deleted; manage any remaining plan on https://bundle-tea.com.

Full instructions: https://bundle-tea.com/delete-account

7. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy:

• Account, profile, listing, and message data: while your account is active, then deleted within 30 days after you delete your account.
• Location data: used in real time to show nearby results; we do not keep a long-term history of your precise location for profiling.
• Payment, order, booking, and subscription records: up to 7 years for tax, accounting, and legal purposes.
• Crash and diagnostic data: up to 90 days.
• SMS opt-in and opt-out records: as long as needed to honor your choices and meet carrier requirements.
• Support emails: up to 2 years.

8. Your Choices

• Location: turn location access on or off in your device settings.
• Push notifications: manage them in your device settings.
• Marketing texts: reply STOP. Marketing emails: use the unsubscribe link.
• Access, correction, or deletion: edit your profile in the app, or email support@bundletea.com.

9. Security

We use industry-standard safeguards, including encryption in transit (HTTPS) and access controls through our hosting provider. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. Children

Bundle Tea is intended for adults 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in California). If you believe a child has provided us information, email support@bundletea.com and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. We will change the effective date above and, for material changes, notify you in the app or by email before the changes take effect.

12. Contact Us