Privacy policy
Updated 19 October 2026This policy explains how Bunty handles information when you visit Bunty, manage a store or use a merchant website hosted on Bunty.
Who handles your information
Bunty handles account and platform information to operate its services. Contact connect@bunty.store for privacy questions. A merchant controls how it uses the customer information collected for its business; contact that merchant first about an order, appointment or its marketing. Bunty hosts and processes that information to provide the merchant’s tools and also handles information for platform security and administration.
Information we handle
This may include your name, email, account identifiers and authentication information; business and website settings; product and service content; customer names, phone numbers, email addresses, delivery addresses, order details, appointment details and enquiries; subscription/payment references and support messages. Hosting and service providers may also process IP addresses, browser/device information, access logs and diagnostic records. Do not submit payment-card numbers or unnecessary sensitive records in general text fields.
Why we use information
We use information to create and secure accounts, host websites, process orders and appointments, deliver service notifications, support users, administer subscriptions, troubleshoot problems, prevent misuse and meet applicable obligations. Public store content and customer stories selected for publication can be seen by anyone. Merchants are responsible for obtaining permission for their own marketing and published customer stories.
Service providers and sharing
Bunty uses Supabase for database, authentication and storage; Vercel for website hosting and delivery; Resend for supported email notifications; and Meta/WhatsApp where those notifications are configured. Selected store fonts may load from Google Fonts. These providers process relevant information under their own terms and privacy arrangements. A merchant’s authorised users and the providers used to fulfil its orders may receive the information needed for that purpose. We may disclose information where required by law or reasonably necessary to protect users, investigate misuse or resolve disputes. We do not sell personal information.
Cookies, local storage and external links
Bunty uses cookies and browser storage for sign-in/session operation and interface preferences, including setup-guide state. Infrastructure providers may use security-related technologies. External social links, merchant links and third-party services operate under their own policies. New advertising or optional tracking integrations may require additional notices and choices before use. This policy does not provide consent for every merchant’s separate tracking or marketing.
Storage locations and security
Information may be processed outside Pakistan where our providers operate. We use authentication, access controls and other technical measures to protect the service. No system or transmission is completely secure. Share only information needed for your transaction and protect your account credentials.
Retention and deletion
Information is kept while needed to run the account or store and for relevant security, legal, payment-record and dispute purposes. Cancelling a subscription does not automatically delete the store. Owners can use the store-deletion process or contact Bunty about deletion. Deleted data may persist for a limited period in provider backups or records that must be retained. We assess deletion requests and can explain any retention that applies; do not assume that all data is erased immediately.
Your choices and requests
You can update account/store information through the available tools and contact connect@bunty.store to request access, correction, export or deletion, or raise an objection or privacy concern. We may verify your identity and authority before responding. Available rights and any restrictions depend on applicable law. For information held for a merchant’s business, contact that merchant; we can help route a request where appropriate.
Children and sensitive information
Bunty’s business account tools are intended for people authorised to run a business. They are not designed to collect children’s information or medical records. Merchants are responsible for assessing whether their business needs additional safeguards and notices. Contact us if information appears to have been submitted inappropriately.
Updates and contact
This policy was updated on 19 October 2026. Changes will be shown on this page; material changes affecting existing users will be communicated appropriately. Email connect@bunty.store for privacy requests or questions.