Privacy Policy

Bonzoa is a rewards platform. To credit points for a task and pay those points out, we have to handle some information about you. This page sets out exactly what that is. We have tried to describe it in plain language rather than legal boilerplate.

Information you give us

• Account details — your name, email address and a password. Passwords are stored as a one-way hash; nobody at Bonzoa can read your password.
• Sign-in provider details — if you sign in with Google or Facebook instead of a password, we receive an identifier for that account and, where you allow it, your name, email address and profile picture.
• Cashout details — the payment address or account identifier you enter when you request a cashout (for example a PayPal email address or a cryptocurrency wallet address), and a record of the request itself.
• Messages you send us — the contents of anything you submit through the contact form or by email.

Information we collect automatically

• Task activity — which tasks you start and which ones are confirmed, along with the points and timestamps. This is what your balance is built from.
• IP address — recorded when a task completion is reported to us and when you submit a cashout request. Reward networks require this for fraud prevention, and we keep it for the same reason.
• Approximate country — when you load a page, your IP address is sent to a third-party geolocation service to determine which country you are visiting from. We use this to show the correct country indicator on the site. We do not store a location history and we do not use it to build a profile of you.
• Usage data — pages viewed and general technical information such as browser type, collected through our analytics service where you have consented to it.

Why we use it

• To create your account and let you sign in.
• To attribute a completed task to the right account and credit the correct number of points.
• To process cashout requests and transfer payment to the details you supplied.
• To detect and prevent fraudulent activity, such as duplicate accounts or automated task completion.
• To answer your support enquiries.
• To meet legal and accounting obligations that apply to us.

Who we share it with

We do not sell your personal information. Information is shared only in the following situations:

• Reward networks. When you choose to start a task, the network that supplies it needs a way to recognise your session so that the completion can be reported back to us. That network receives a pseudonymous user identifier and, because the request comes from your device, your IP address. The network's own privacy policy governs what it does with that. Bonzoa never passes a network your email address, password or cashout details.
• Payment providers. When a cashout is approved, the payment details you supplied are passed to the provider that fulfils it.
• Service providers. Hosting, email delivery, analytics and geolocation services that operate parts of the platform on our behalf.
• Legal requirements. Where we are required by law or valid legal process to disclose information, or where disclosure is necessary to investigate fraud or protect the rights and safety of Bonzoa or its users.

Cookies and analytics

We use a small number of cookies. The essential ones keep you signed in and protect forms against cross-site request forgery; these cannot be switched off without breaking the site. Analytics cookies are only set after you accept them. The full list is on the Cookie Policy page.

How long we keep it

Account and task records are kept for as long as your account is open, because your balance and earning history depend on them. Cashout records are kept for a longer period afterwards where we are required to retain financial records. Contact form messages are kept until your enquiry is resolved and for a reasonable period afterwards. If you close your account, we delete or anonymise the information that is not required for those record-keeping obligations.

Your rights

Depending on where you live, you may have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to certain processing, or to receive it in a portable format. To make a request, email [email protected] from the address associated with your account. We will respond within the period required by applicable law.

Security

The site is served over HTTPS. Passwords are hashed, access to production systems is restricted, and cashout requests are reviewed before payment. No system is perfectly secure, so please use a unique password for Bonzoa and contact us immediately if you believe your account has been accessed by someone else.

Age

Bonzoa is not intended for children. You must be at least 18 years old to create an account@if ($minimumAge >= 18), and we do not knowingly collect information from anyone under that age@endif. If we learn that an account belongs to someone below the minimum age, we will close it and delete the associated information.

Changes to this policy

If this policy changes in a way that affects how your information is used, we will update the date at the top of this page and, where the change is significant, notify you through the site or by email.

Contact

Questions about this policy or about your information can be sent to [email protected] or through the contact form.