Privacy Policy

Effective date: March 27, 2026

This Privacy Policy describes how Anvil Labs LLC (“Anvil Labs,” “we,” “us,” or “our”) collects, uses, and shares information in connection with Blue Bubba — our websites, applications, APIs, and related services (collectively, the “Service”). By using the Service, you agree to this Policy together with our Terms of Service.

1. Information we collect

We collect information in the following categories, depending on how you use the Service:

• Account and billing. Name, email address, organization details, authentication data, and payment-related information. Payment card data is handled by our payment processor (Stripe); we do not store full card numbers on our servers.
• Messaging and CRM data. Phone numbers, message content (inbound and outbound), delivery or read status when available, contacts, tags, notes, automation configuration, scheduled messages, call logs if you use calling features, and similar data you choose to store in the Service.
• API and integration data. API keys, webhook URLs, payloads sent to or from integrations you configure, and diagnostic metadata needed to deliver those features.
• Technical and usage data. IP address, device and browser type, cookies and similar identifiers, log data (such as timestamps, request paths, and error reports), and product usage signals we use to secure and operate the Service.
• Support and communications. Information you send when you contact us, including email content and call or chat transcripts if you engage with our team.

2. How we use information

We use the information above to:

• Provide, maintain, and improve the Service (including inbox, automations, APIs, webhooks, and realtime features).
• Authenticate users, prevent fraud and abuse, and enforce our Terms of Service.
• Process payments and communicate about billing, security, and product updates.
• Send transactional email (such as magic links or account notices) through providers like Resend.
• Comply with law, respond to lawful requests, and protect rights and safety.
• Analyze usage in aggregate or de-identified form to understand reliability and plan improvements.

3. Legal bases (EEA, UK, and similar jurisdictions)

Where required, we rely on: performance of a contract (providing the Service you requested); legitimate interests (security, product improvement, and internal operations balanced against your rights); consent where we expressly ask for it (for example, certain cookies or marketing, if offered); and legal obligation where applicable.

4. How we share information

We share information only as described here:

• Service providers. Vendors that process data on our behalf under contractual obligations, such as payment processing (Stripe), email delivery (Resend), cloud or server hosting, and monitoring or security tools.
• Message infrastructure. To deliver messages, content may be processed by mobile carriers, Apple’s services, and equipment or software you connect (for example, bridge components on hardware you control). Those parties process data under their own policies when messages leave our systems.
• Your directions. When you configure webhooks, exports, or integrations, we transmit data to endpoints or third-party services you designate.
• Legal and safety. When required by law, legal process, or to protect Anvil Labs, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell personal information as that term is defined under the California Consumer Privacy Act (CCPA), and we do not sell personal data for money in the traditional sense.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and protect the Service. You can control cookies through browser settings; disabling certain cookies may limit functionality.

6. Retention

We retain information for as long as your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce our agreements. Retention periods may vary by data type; message and contact data are generally kept until you delete it or close your account, subject to backup and legal holds.

7. Security

We implement administrative, technical, and physical safeguards designed to protect information. No system is perfectly secure; you should protect credentials, rotate API keys, and restrict access within your organization.

8. International transfers

We operate primarily in the United States. If you access the Service from other regions, your information may be transferred to and processed in the United States or other countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses).

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us at [email protected]. We may verify your request before responding.

10. California residents

If you are a California resident, the CCPA may grant you rights to know, delete, and opt out of certain sharing. We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under California law. You may designate an authorized agent as permitted by law. See the “Contact” section below.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with an updated effective date and, where changes are material, provide additional notice as appropriate (such as email or an in-product message).

13. Contact

For privacy questions or requests, contact [email protected] or use the options on bluebubba.com.

Anvil Labs LLC — Blue Bubba