Your privacy, protected.

1. Who we are

BONKT ("we", "us", "our") is an Australian-owned digital business card platform operated by Prospect Success Pty Ltd. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, for users in Thailand, the Personal Data Protection Act B.E. 2562 (PDPA).

BONKT is a product of Prospect Success Pty Ltd (ABN 65 646 487 005), Suite 2, Level 3, 13–15 Wentworth Avenue, Sydney NSW 2000, Australia. This is our registered office and postal address, not a walk-in office.

2. Information we collect

Information you give us
Your account details (name, email, password) and anything you choose to put on your card, such as your job title, phone number, social links, photos, videos, products, services and testimonials.

Contacts you collect
Details of people you connect with by NFC tap, QR scan, paper card scan, swapped details, messages sent from your card, your VOX assistant or manual entry, plus any notes or voice notes you add. You are responsible for having a lawful reason to store these contacts.

AI-processed information
Images you scan with the AI paper card scanner or receipt scanner, voice notes you record, the information you give your VOX assistant, and the text our AI features produce from them.

Visitors to your card
When someone views your card, we record the view, the device type and the approximate location from their IP address to power your analytics. If a visitor chats with your VOX assistant, we store the conversation and any details they choose to share, so they can be passed to you as a lead.

Payments
Payments are handled by Airwallex. We do not store your full card number.

Automatic information
Device information (IP address, browser, device model) and usage data that help us keep BONKT fast and secure. We do not track the precise GPS location of anyone who scans your card.

3. Public and private information

Your card is public by design. Anything you put on your card can be seen by anyone with your card link, QR code or NFC card. Cards are hidden from search engines, but please only add what you are happy to share.

Your account is private. Your login, billing details, collected contacts, notes, receipts and VOX conversations are private to you (and, on team plans, to your team administrators). Passwords are stored as one-way hashes that nobody, including us, can read.

4. How we use your information

• To create, host and display your card to the people you share it with.
• To run the features you use, including analytics, contacts, scanners, VOX, follow-up drafts, networking suggestions and integrations you connect.
• To process payments and send receipts, security alerts and important account messages.
• To send product news and tips, only if you have agreed. You can unsubscribe at any time.
• To keep BONKT secure, prevent misuse and meet our legal obligations.

Networking suggestions only use your own contacts and activity, are opt-in, and never share your contacts with other users.

5. AI features and your data

BONKT's AI features (the card builder, VOX assistant, scanners, voice notes, follow-up drafts and plain-English analytics) send the relevant information to AI models through OpenRouter, which routes each request to an AI model provider. VOX runs on ElevenLabs. Voice notes are transcribed by ElevenLabs speech-to-text, then tidied into a note by AI through OpenRouter.

• We only send what a feature needs, for example the image you scanned or the information you gave VOX.
• We choose AI providers that do not use your data to train their models.
• VOX only answers from your card and the information you approve. It cannot see your contacts, notes or receipts.
• AI can make mistakes. Please check anything important, such as prices VOX quotes or details read from a receipt.

6. Who we share it with

We never sell, rent or trade your personal information. We share it only with service providers who help us run BONKT, and only as needed:

• Payments: Airwallex
• Hosting: Hostinger (servers in Malaysia)
• Security and delivery network: Cloudflare
• AI features: OpenRouter and the AI model providers it routes to
• VOX assistant and voice note transcription: ElevenLabs
• Email updates: Hostinger Reach
• App notifications: Apple and Google push notification services
• Website analytics: Google Analytics and Google Tag Manager
• Integrations you connect: if you connect a CRM, Pabbly Connect, Zapier, Make or a webhook, we send your contacts to the destination you choose.

On team plans, your team administrator can see and manage the cards and contacts that belong to the team. We may also disclose information where the law requires it.

7. Storage outside Australia

Because of the providers above, your information may be stored or processed outside Australia, including in Malaysia (hosting), the United States and other countries where AI and technology providers operate, and Thailand, where part of our team works. We take reasonable steps to make sure overseas providers handle your information consistently with the Australian Privacy Principles and the Thai PDPA.

8. Keeping it safe

We use HTTPS encryption for all connections, network protection through Cloudflare, hashed passwords, access controls, and daily encrypted backups. No system is perfectly secure, but we work hard to protect your information and will notify you and the regulator if a data breach is likely to cause you serious harm, as the law requires.

9. How long we keep it

We keep your information while your account is active. If you cancel, we keep your data for 30 days in case you want to come back, then delete it, except where we must keep records for tax or legal reasons. Scanned receipt images may be deleted automatically after a set period shown in the app, so please export anything you need.

10. Your rights

You can ask to access, correct or delete your personal information, or for a copy of your data. You can also edit or delete most information yourself in your dashboard and export your contacts at any time. Users in Thailand also have the rights set out in the PDPA, including to object to or restrict processing.

If you are unhappy with how we have handled your information, contact us first. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in Thailand, the Personal Data Protection Committee.

11. Changes and contact

We may update this policy as BONKT grows. We will post the new version here and tell you about important changes.

Privacy contact: [email protected]

BONKT is a product of Prospect Success Pty Ltd (ABN 65 646 487 005), Suite 2, Level 3, 13–15 Wentworth Avenue, Sydney NSW 2000, Australia. This is our registered office and postal address, not a walk-in office.