Legal
Privacy Policy
Effective date: April 2, 2026
BWORLDS ("we", "our", "us") is operated by Vulk Corp. This Privacy Policy explains what information we collect when you use bworlds.co and app.bworlds.co (collectively, the "Service"), how we use it, and your rights over it. By using the Service you agree to the practices described here.
1. Information We Collect
Account information
When you sign up we collect your email address and any profile information you provide (name, avatar). We use Supabase for authentication — your credentials are stored and managed by Supabase on your behalf.
App and scan data
When you connect an app to BWORLDS and run readiness scans, we process metadata about your app (URL, configuration, scan results). We do not store your end users' personal data — we only inspect structural and configuration signals.
Payment information
Subscription and payment data is processed by Stripe. We receive transaction summaries (plan, status, renewal date) but never your full card details — those are held exclusively by Stripe.
Usage data
We collect standard usage telemetry: pages visited, features used, token consumption, and session timestamps. This data is used to improve the Service and diagnose issues.
Error and performance data
We use Sentry to capture application errors and Langfuse to trace AI-powered features. These tools may capture request payloads — we configure them to minimise sensitive data capture.
2. How We Use Your Information
- Provide, operate, and improve the Service
- Process payments and manage your subscription
- Send transactional and product notifications (via Knock)
- Diagnose and fix errors
- Prevent fraud and enforce our Terms of Service
- Comply with legal obligations
We do not sell your personal data. We do not use your data to train AI models.
3. Third-Party Services
We share data with the following processors to operate the Service:
| Processor | Purpose |
|---|---|
| Supabase | Authentication, database |
| Stripe | Payments and subscriptions |
| Vercel | Hosting and edge delivery |
| Sentry | Error monitoring |
| Langfuse | AI feature tracing |
| Knock | User notifications |
Each processor operates under its own privacy policy and data processing agreement. We only share the minimum data necessary for the processor to perform its function.
4. Cookies and Tracking
We use cookies and similar technologies to maintain your session, remember preferences, and measure usage via Vercel Analytics and Google Tag Manager. You can disable cookies in your browser settings; some features of the Service may not function correctly without them.
5. Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. Scan results are retained for 90 days by default. Billing records are retained for 7 years to meet accounting obligations. You may request deletion of your account and associated data at any time by contacting us.
6. Your Rights
Depending on your location, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and personal data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
To exercise any of these rights, email us at privacy@bworlds.co. We will respond within 30 days.
7. Security
We implement industry-standard security measures including encrypted connections (TLS), access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
8. Children
The Service is not directed to anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email or via the Service before material changes take effect. Continued use after the effective date constitutes acceptance of the updated policy.
10. Contact
Questions about this policy or your data: privacy@bworlds.co
Vulk Corp
BWORLDS
contact@bworlds.co