1. Overview
Bouncer ("we", "us", "our") operates the usebouncer.dev website and API. This Privacy Policy describes how we collect, use, and protect your information when you use our Service.
2. Information We Collect
Account Information
When you sign in with Google, we receive and store:
- Your email address
- Your display name
- Google account identifier (sub)
Usage Data
- API key metadata (name, creation date, last used)
- Scan count and usage statistics
- Account tier and billing information
Scan Data
- File metadata: name, size, MIME type, SHA256 hash
- Scan results: verdict, threats detected, engine results, duration
- File content: temporarily stored for scanning, deleted within 24 hours
3. How We Use Your Information
- To provide the Service: Authenticate you, process scans, track usage.
- To improve the Service: Analyze usage patterns, identify issues, optimize performance.
- To communicate: Send service-related notifications (usage alerts, security issues).
- To enforce terms: Detect abuse, prevent fraud, enforce rate limits.
4. What We Do NOT Do
- We do not sell your personal information to third parties.
- We do not read, analyze, or use the content of your uploaded files for any purpose other than malware scanning.
- We do not share scan results with other users or third parties.
- We do not use your data for advertising or marketing purposes.
5. Data Storage and Security
- All data is stored on AWS infrastructure in the ap-south-1 (Mumbai) region.
- API keys are stored as SHA256 hashes. We never store the raw key.
- Uploaded files are encrypted at rest (AES-256) and automatically deleted after 24 hours.
- All API communication is encrypted via TLS (HTTPS).
- Authentication is handled via AWS Cognito with Google OAuth.
6. Data Retention
- Uploaded files: Deleted automatically within 24 hours.
- Scan metadata: Retained for as long as your account is active.
- Account data: Retained until you request deletion.
- Revoked API keys: Retained for audit purposes (soft deleted).
7. Third-Party Services
We use the following third-party services:
- Amazon Web Services (AWS): Infrastructure, compute, storage, database.
- Google OAuth: Authentication only. We receive your email and name.
- Cloudflare: DNS and CDN for the website.
8. Your Rights
You have the right to:
- Access your data through the dashboard and API.
- Delete your account and associated data by contacting support.
- Export your scan history via the API.
- Revoke API keys at any time through the dashboard.
9. Cookies
We use localStorage (not cookies) to store authentication tokens for dashboard access. No tracking cookies or analytics scripts are used.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or data deletion requests, contact us at hello@manishj.com.