Bonnector Digital is the controller for personal data submitted through Scan by Bonnector. This notice explains the application's operating choices in plain language.
What we collect
For a staff-created scan: name, company, optional work email, optional phone number, optional function, optional need description, optional company website, scan input, consent choices, creation time, research status and report link. A public self-scan requires name, company email and company website. When staff deliberately capture a business card, its image is sent once to the configured AI vision service to extract visible contact fields and is not stored by Bonnector Scan. For staff access: the verified Google account email, display name, encrypted authorization tokens and session dates. The unlisted report displays the submitted name and company, but not the client email, phone, function or verbatim need description.
Why we use it
To create and store the company opportunity report you request, maintain Bonnector’s internal follow-up record, protect staff-only actions, let staff add or update a recipient when emailing a report or creating a meeting, automatically deliver a completed public self-scan to its requester and notify Bonnector, and record any optional future marketing preference.
Research and automation
The system scans up to 20 relevant company-owned pages, then temporarily uses multiple AI research agents to review public company, news, careers, partnership and market sources. A separate verification and synthesis step distinguishes evidence from inference. This is company-level research, not personal or sensitive-trait profiling.
Who receives data
Bonnector and the providers needed to operate hosting, storage and AI-assisted research. For a staff-created scan, Google receives meeting details or a report recipient only when a signed-in Bonnector user confirms that action. For a public self-scan, the completed report link is automatically emailed to the submitted company address and a completion notice is sent to office@bonnector.com through an authorized Bonnector Google account. If the visitor books a discussion, Bonnector creates the calendar event and sends the invitation to that same submitted company address; the visitor does not sign in to an email or calendar account through this application. Contact name and email are excluded from research prompts.
Retention
Contact and report records are kept for up to 24 months, unless you request earlier deletion or a longer period is required by law. Marketing consent is kept until withdrawal, with a minimal suppression record retained where needed to respect the withdrawal.
Your choices and rights
You may request access, correction, deletion, restriction or portability of your personal data and may object where applicable. You may withdraw consent at any time without affecting processing already completed. You can also lodge a complaint with the relevant data protection authority.
Storage
Encrypted service infrastructure, server-side domain checks and encrypted Google authorization tokens for staff sessions.
Public report
Unlisted, random link; the submitted name and company appear in the report, while the email address stays hidden.
Contact & withdrawal
Email data@bonnector.com for privacy requests or to withdraw consent.
Cookies and service logs
This version does not use non-essential advertising or analytics cookies. Staff areas use an essential, HTTP-only session cookie after Google sign-in; the public self-scan does not require a staff session. Security and hosting services may process technical request logs needed to operate and protect the application.
