Privacy Policy

Last updated: April 8, 2026

This Privacy Policy describes how BSF LLC ("we," "our," or "us") collects, uses, stores, and shares your information when you use ReNood. By using the Service you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide Directly

Account information: name, email address, phone number
Payment information: processed by third-party payment processors — we store only the last four digits of your card and expiration date for display purposes only
Profile information: account preferences and settings
Support communications: messages you send to our team

1.2 Information Collected Through Service Features

Email content: if you opt into email scanning, content of emails processed to identify subscriptions and receipts — raw email content is not stored
Uploaded documents: credit card statements or other documents you upload (planned feature)
Subscription data: subscription names, amounts, billing dates extracted from processed content
Card type information: credit card issuer and card name for benefit matching (planned feature)

1.3 Information We Collect Automatically

Device and usage information: device type, operating system, browser type, app version, IP address
Usage data: features used, pages visited, time spent, actions taken, frequency and duration of activities
Log data: access times, error logs, and security-related events
Approximate location: derived from IP address for fraud detection and regulatory compliance purposes

1.4 Information from Third-Party Sources

If you log in using Google or Apple sign-in, we receive basic account information such as name and email address as authorized by you through that platform
We may use publicly available information about your contact details to assist with support or to detect fraud or security concerns

2. How We Use Your Information

Provide, operate, and maintain the Service
Process and display subscription information within your Tribe
Send service-related notifications and alerts
Process payments and manage subscriptions
Respond to support requests and verify your identity when you contact us
Detect, prevent, and investigate fraud, security incidents, and other illegal activity
Improve and develop new features and analyze usage patterns
Comply with legal obligations
Enforce our Terms and Conditions
Create de-identified, anonymized, or aggregated data for analytics and research

3. Artificial Intelligence Processing

Your data including email content, uploaded documents, and subscription information may be processed by third-party artificial intelligence services. Current and anticipated AI processors:

Anthropic (Claude AI) — anthropic.com
OpenAI — openai.com
Google AI — ai.google

IMPORTANT: Under the terms of our API agreements with these providers, your data submitted through our integration is NOT used to train their AI models. Your information is processed solely to provide the Service and is not retained by these providers beyond the immediate processing task.

We contractually require these providers to protect your data. However, your data is subject to their privacy policies when processed by their systems. We are not responsible for their independent practices beyond our contractual obligations.

4. Credit Card Statement Processing (Planned Feature)

We extract only: merchant name, transaction amount, and transaction date
We do NOT extract or store full card numbers, CVV codes, Social Security numbers, or complete account numbers
Raw statement files are deleted within 48 hours of processing
Extracted subscription data is retained in accordance with our Data Retention Policy

5. How We Share Your Information

We do not sell your personal information. We do not share personal information with third parties for their marketing purposes.

Within your Tribe: subscription split amounts and participation status are shared with your Tribe members as necessary to provide the Service — full financial details are never shared
Service providers: vendors who assist in operating the Service including AI processors, payment processors, and cloud hosting providers — all are contractually obligated to protect your data
Social login providers: if you use Google or Apple sign-in, limited data is exchanged with those platforms as part of authentication
Legal compliance: when required by law, court order, subpoena, warrant, or governmental authority
Safety and fraud prevention: to protect the rights, property, or safety of BSF LLC, our users, or the public
Business transfer: in connection with a merger, acquisition, or sale of assets — you will be notified and your data will remain subject to the privacy practices in effect at the time
Aggregated non-personal data: we may share anonymized, aggregated data that cannot reasonably be used to identify you with third parties for research, analytics, or service improvement purposes
No SMS data sharing: your SMS opt-in information and consent will not be shared with any third parties for marketing purposes

6. Anonymized Subscription Intelligence Data — Business Asset Disclosure

IMPORTANT: Please read this section carefully. It describes a specific category of data that BSF LLC collects, retains, and may use for business purposes including a future company sale or acquisition.

In addition to personal information described above, BSF LLC collects, processes, and retains anonymized and aggregated subscription intelligence data derived from user activity on the Service. This data is stripped of all personally identifying information before retention and cannot reasonably be used to identify any individual user.

This anonymized subscription intelligence data includes:

Subscription pricing data — the prices users actually pay for subscription services, including promotional rates, price increases over time, and regional pricing variations
Subscription category data — categories of subscription services used, frequency of billing, and billing patterns across the user base
Card usage patterns — which categories of credit cards are used for which categories of subscription services, and whether card-specific benefits are claimed or left unclaimed — no individual card numbers or account identifiers are included
Price change trends — historical records of when and by how much specific subscription services have increased or decreased pricing
Subscription lifecycle data — anonymized patterns of when users add, modify, or cancel subscriptions
Geographic and demographic segment data — aggregated subscription trends by region and age bracket with no individual identification

How this data is created and protected:

All anonymized intelligence data is created by stripping personal identifiers from extracted subscription transaction data before it enters our intelligence database
The anonymization process is irreversible — anonymized data cannot be re-linked to individual users
Anonymized data is stored separately from personal user data with independent access controls
This data does not constitute personal information under applicable privacy laws including CCPA

How BSF LLC may use this anonymized data:

Internal analytics and product development — understanding subscription market trends to improve Service features
Business intelligence reporting — understanding how subscription pricing changes affect user behavior
Partnership and licensing arrangements — sharing aggregated subscription market intelligence with financial services companies, credit card issuers, payment processors, research organizations, or other business partners
Company valuation and investor reporting — this anonymized dataset is a core business asset of BSF LLC
Company sale or acquisition — in the event BSF LLC is sold, merged with, or acquired by another company, this anonymized subscription intelligence dataset will transfer to the acquiring entity as a primary business asset. Because this data does not contain personal information, it is not subject to the same deletion rights as personal data and will not be deleted upon a user's request to delete their personal information.

What this means for you:

Your personal information — your name, email, account details, and identified transaction records — is never included in this anonymized dataset and is subject to all deletion and privacy rights described in this Policy
The anonymized intelligence data derived from your activity may be retained and used by BSF LLC indefinitely and may transfer in a company sale even after you delete your personal account
You cannot request deletion of anonymized data because it contains no information that identifies you
This practice is consistent with how major subscription management and personal finance applications operate and is disclosed here in the interest of full transparency

7. Cookies and Tracking Technologies

The ReNood website and application use the following types of tracking technologies:

Required/Functional Cookies: essential for the Service to operate — these enable secure login, session management, and basic functionality. These cannot be disabled.
Analytics Cookies: help us understand how users interact with the Service — including which features are used, how often, and for how long. Used to improve the Service.
Security Cookies: help detect and prevent fraud and unauthorized access

You may disable non-essential cookies through your browser settings. Disabling cookies may affect your experience and certain features may not function properly. Required cookies cannot be turned off without stopping use of the Service.

Do Not Track: If your browser sends a Do Not Track signal, we honor it where technically feasible and will not use your data for behavioral tracking or personalized advertising purposes.

8. Data Security

We implement the following security measures:

Encryption of data in transit using TLS 1.2 or higher
Encryption of sensitive data at rest using AES-256
Role-based access controls limiting employee access to user data
All access to sensitive user data is logged and auditable
Regular security testing and vulnerability assessments

No security system is perfect. We cannot guarantee absolute security and you provide information at your own risk. You are responsible for the security of your information when using unencrypted, public, or otherwise unsecured networks. In the event of a data breach, we will notify affected users as required by applicable law.

9. Data Retention

See our separate Data Retention Policy for complete details. Key periods:

Account data: retained for account lifetime plus 30 days after deletion
Raw uploaded statements: deleted within 48 hours of processing
Extracted subscription data: retained for account lifetime
Payment records: retained 7 years as required by law
Log files: retained 90 days
Support communications: retained 2 years

10. Account Deactivation vs. Deletion

When you close your account you have two options:

Deactivation: your data and settings are preserved for 90 days — you can reactivate by contacting support@bsfworks.com. After 90 days of inactivity following deactivation, your account is permanently deleted.
Permanent deletion: all personal data in your account is permanently removed within 30 days. This action cannot be reversed. You will receive email confirmation when deletion is complete.

Note: even after you delete your account, split history and transaction records shared with your Tribe may remain visible to other Tribe members in anonymized form as part of their records — your personal identifying information will not appear. This is similar to how deleting an email account does not delete the email from the recipient's account.

11. Your Rights

Access: request a copy of all personal information we hold about you
Correction: request correction of inaccurate personal information
Deletion: request deletion of your personal information — we will comply within 30 days subject to legal retention requirements
Portability: request your data in a portable format
Opt-out of non-essential communications: manage notification preferences in account settings
No retaliation: BSF LLC will not discriminate against or retaliate against any user for exercising privacy rights under applicable law

To exercise any of these rights contact support@bsfworks.com. We will respond within 30 days.

12. California Privacy Rights (CCPA)

California residents have the following additional rights:

Right to know: what personal information we collect, use, share, and whether we sell it
Right to delete: request deletion of your personal information
Right to correct: request correction of inaccurate information
Right to opt-out of sale: we do not sell personal information — there is nothing to opt out of
Right to non-discrimination: we will not discriminate against you for exercising CCPA rights

To submit a California privacy request email support@bsfworks.com with subject line "CCPA Request."

13. State Privacy Rights — All States

In addition to California, the following states have enacted comprehensive privacy laws that may provide you with additional rights: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Residents of these states may have rights to access, correct, delete, and port their personal data and to opt out of certain processing activities. To exercise any state privacy rights contact support@bsfworks.com identifying your state of residence. We will respond in accordance with applicable law.

14. International Data Processing

BSF LLC operates in the United States. Your data may be processed in the United States and in other countries where our service providers and AI processors operate. Some of these jurisdictions may not provide the same level of data protection as your home jurisdiction. By using the Service and providing information to us, you agree and consent to the transfer, storage, and processing of your personal information in countries other than your home country. Regardless of location, we apply technical, organizational, and contractual safeguards to protect your personal data.

15. Children's Privacy — Users 13 and Older

The Service is available to users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you become aware that your child under 13 has provided us with personal information without your consent, please contact us immediately at support@bsfworks.com and we will delete that information within 30 days.

For users aged 13 to 17 ("Minors"):

Use of the Service by Minors requires parental or guardian consent
By allowing a Minor to use the Service, the parent or guardian agrees to these Terms and this Privacy Policy on the Minor's behalf
Parents and guardians are responsible for supervising their Minor's use of the Service
BSF LLC recommends that parents review and discuss the Privacy Policy with their Minor before allowing use of the Service
Parents or guardians may contact us at support@bsfworks.com to review, correct, or delete their Minor's personal information
We do not knowingly collect more personal information from Minors than is reasonably necessary to provide the Service
We do not share Minors' personal information with third parties for marketing purposes

BSF LLC relies in good faith on the age and consent information provided by users. If a user under 13 provides false age information, BSF LLC bears no liability and the parent or guardian assumes full responsibility.

16. Call and Chat Recording

Support communications including phone calls and chat sessions may be recorded for quality assurance, fraud detection, troubleshooting, and complaint resolution purposes. If you do not wish to have a support interaction recorded, please request an alternative communication method such as email.

17. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of third parties. Review the privacy policies of any third-party services you use.

18. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated by email or through the Service. Continued use after the effective date constitutes acceptance. Contact support@bsfworks.com with any questions.

19. Contact Us

Email: support@bsfworks.com
Address: 30 N Gould St, Ste R, Sheridan, WY 82801, USA
Registered Agent: Wyoming Registered Agent Services LLC, 32 N Gould St, Sheridan, WY 82801