1. Introduction

Bookbag Inc. ("Bookbag," "we," "us," or "our") operates the website at bookbag.ai and the Bookbag Intelligence platform, an AI quality assurance and evaluation platform that helps organizations review, audit, and improve AI-generated messages before they reach end users.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, use our platform, submit a form, or otherwise interact with our services. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is effective as of March 2026.

2. Information We Collect

Information You Provide Directly

When you request a demo, contact us, or create an account, we may collect the following information that you voluntarily provide:

Full name
Business email address
Company or organization name
Job title or role
Information about the AI tools you use
Approximate monthly message volume
Your primary challenge area or use case
Any optional messages or context you include in form submissions

When you use the Bookbag Intelligence evaluation platform, you or your organization may upload AI-generated messages and related content for quality review and auditing purposes.

Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on each page
Referral source (e.g., search engine, link from another site)
Date and time of your visit

Cookies and Tracking Technologies

We use cookies and similar technologies on our website for the following purposes:

Essential cookies: These are necessary for the website to function properly, such as maintaining session state and security features.
Analytics cookies: We may use analytics services to understand how visitors interact with our website, which pages are most visited, and how we can improve the user experience. These cookies collect information in an aggregated form.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to your inquiries: When you submit a demo request or contact form, we use your information to respond to your inquiry, schedule demonstrations, and provide you with relevant information about our services.
To deliver our services: We use your information to operate the Bookbag Intelligence AI evaluation platform, including processing AI-generated messages you submit for review, generating audit reports, and delivering evaluation results.
To communicate with you: We may send you information about your account, service updates, security alerts, and support messages related to the services you use or have requested.
To improve our platform: We analyze usage patterns and feedback to improve the functionality, reliability, and user experience of our website and platform.
To comply with legal obligations: We may process your information when required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

We do not sell your personal information. Bookbag does not sell, rent, or trade your personal information to third parties for their marketing purposes.

We do not use purchased or rented contact lists. We do not use purchased, rented, or third-party affiliate lead lists to contact individuals. We only contact people who have directly provided their information to us through our website or platform.

4. Communications and Consent

By submitting a form on our website (such as a demo request, contact form, or free audit request), you consent to receiving communications from Bookbag related to your inquiry. These communications may include follow-up emails, information about our services, and scheduling correspondence.

We only initiate contact with individuals who have directly and voluntarily provided their information through our website. We do not send unsolicited messages to individuals who have not interacted with us.

SMS/Text Messaging

If you opt in to receive SMS or text messages from Bookbag Intelligence, the following terms apply:

Consent: By checking the SMS consent checkbox on our contact form, you expressly consent to receive text messages from Bookbag Intelligence at the phone number you provide. Consent is not a condition of purchase or service.
Message types: Messages may include responses to your inquiry, appointment confirmations, service updates, and relevant product information.
Message frequency: Message frequency varies based on your interactions with us. We do not send more than 5 messages per month unless you initiate a conversation.
Message and data rates: Standard message and data rates may apply depending on your mobile carrier and plan.
Opt-out: You may opt out of SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive one final confirmation message. You may also opt out by contacting legal@bookbag.ai.
Help: For support, reply HELP to any SMS message or contact us at legal@bookbag.ai.

We do not share, sell, rent, or otherwise disclose your phone number or SMS opt-in consent information with any third parties or affiliates for their marketing purposes. Your SMS opt-in data will only be used by Bookbag Intelligence to send you messages you have consented to receive.

Email Communications

You may opt out of receiving email communications from us at any time by:

Clicking the "unsubscribe" link included in any marketing email we send
Contacting us at legal@bookbag.ai with your opt-out request
Replying to any communication with a request to stop further contact

We will honor your opt-out request promptly. Please note that even after opting out of marketing communications, we may still send you transactional messages related to your active account or services (such as security notifications or billing information).

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information only in the following limited circumstances:

Service providers: We may share information with trusted third-party service providers who assist us in operating our website, delivering our platform, processing payments, sending communications, or performing analytics. These providers are contractually obligated to use your information only for the purposes we specify and to protect it in accordance with this Privacy Policy.
Legal requirements: We may disclose your information if required to do so by law, or in response to valid requests by public authorities, including subpoenas, court orders, or government regulations.
Business transfers: If Bookbag Inc. is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
Protection of rights: We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

6. Data Security

We take the security of your personal information seriously and implement industry-standard measures to protect it. Our security practices include:

SOC 2 Type II certified infrastructure: Our platform is built on infrastructure that meets SOC 2 Type II compliance standards, demonstrating our commitment to security, availability, processing integrity, confidentiality, and privacy.
Encryption: All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256 or equivalent encryption standards.
Access controls: We employ strict access controls, including role-based permissions, multi-factor authentication, and the principle of least privilege to ensure only authorized personnel can access personal information.
Monitoring and logging: We maintain comprehensive audit logs and monitoring systems to detect and respond to potential security incidents.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents in accordance with applicable laws.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

Specifically:

Account and service data: We retain your account information and service-related data for the duration of your active account or business relationship with us, and for a reasonable period thereafter as needed to comply with our legal obligations.
Form submission data: Information submitted through demo requests or contact forms is retained for as long as necessary to respond to your inquiry and for legitimate business follow-up.
Platform evaluation data: AI-generated messages and evaluation content uploaded to our platform are retained in accordance with your service agreement and applicable data retention schedules.

You may request deletion of your personal information at any time by contacting us at legal@bookbag.ai. We will process your request in accordance with applicable laws and respond within 30 days.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

Right to access: You may request a copy of the personal information we hold about you.
Right to correction: You may request that we correct inaccurate or incomplete personal information.
Right to deletion: You may request that we delete your personal information, subject to certain legal exceptions.
Right to opt out: You may opt out of receiving marketing communications from us at any time.
Right to data portability: Where applicable, you may request a copy of your data in a structured, commonly used, machine-readable format.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

The right to know what personal information we collect, use, disclose, and sell
The right to request deletion of your personal information
The right to opt out of the sale or sharing of your personal information (note: we do not sell personal information)
The right to non-discrimination for exercising your privacy rights

To exercise your CCPA/CPRA rights, contact us at legal@bookbag.ai. We will verify your identity before processing your request and respond within 45 days as required by law.

European Economic Area Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:

The right to access, rectify, or erase your personal data
The right to restrict or object to our processing of your personal data
The right to data portability
The right to withdraw consent at any time, where processing is based on consent
The right to lodge a complaint with a supervisory authority

Our legal bases for processing personal data include your consent, the performance of a contract, our legitimate business interests, and compliance with legal obligations. To exercise your GDPR rights, contact us at legal@bookbag.ai.

9. Children's Privacy

Our services are designed for businesses and professionals and are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us immediately at legal@bookbag.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company: Bookbag Inc.
Website: bookbag.ai
Email: legal@bookbag.ai

We will make every effort to respond to your inquiry within 30 days.