Privacy Policy

Last updated: May 29, 2026

Ado, Inc. d.b.a. Bamboo ("Bamboo", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, company name, and password when you create an account
• Profile Information: Job title, phone number, and other professional details you choose to provide
• Payment Information: Billing address and payment method details (processed by our payment providers)
• Communications: Information you provide when you contact us for support or send us communications
• Preferences: Your settings, preferences, and configurations within the Services
• Agent Configuration: The identities, business context, knowledge, skills, and routines you provide when building and configuring agents

1.2 Information from Connected Platforms

When you connect advertising and marketing platforms to Bamboo, we collect data from those platforms on your behalf, including:

• Advertising campaign performance data
• Ad spend and budget information
• Audience and targeting data
• Conversion and attribution data
• Account and campaign identifiers

This data is collected as a processor on your behalf and is governed by our Data Processing Agreement.

1.3 Information Collected Automatically

When you access the Services, we automatically collect:

• Log Data: IP address, browser type, operating system, referring URLs, pages viewed, and access times
• Device Information: Device type, unique device identifiers, and mobile network information
• Usage Data: Features used, actions taken, and interaction patterns within the Services
• Agent Activity Data: Prompts, conversations, approvals, tool calls, traces, execution metadata, and operational logs generated through your use of workflows and agents
• Cookies and Similar Technologies: Information collected through cookies, pixels, and similar tracking technologies

1.4 Information from Downloadable Software

If you use our downloadable software, such as our command-line tools (the "CLI"), it may read from and write to files and directories you designate on your own systems. The software transmits to the Services only the data needed to operate the connections and agents you configure, and you control which files and directories it can access.

2. How We Use Your Information

We use the information we collect to:

• Provide the Services: Deliver, maintain, and improve the features and functionality of Bamboo
• Process Transactions: Manage your account, process payments, and fulfill orders
• Communicate: Send you technical notices, updates, security alerts, and administrative messages
• Support: Respond to your inquiries and provide customer support
• Personalize: Customize your experience and provide content and features relevant to you
• Analyze: Monitor and analyze usage patterns to improve the Services
• Protect: Detect, prevent, and address fraud, security issues, and technical problems
• Legal Compliance: Comply with legal obligations and enforce our terms and policies

3. AI-Powered Features

Bamboo uses artificial intelligence to provide insights, recommendations, and analysis. When you use AI-powered features:

• Your data may be processed by third-party AI providers, accessed through credentials supplied by Bamboo, by you, or by a Connected Platform
• Where Bamboo provides the access, we use our own API credentials and the provider is contractually prohibited from using your data for model training
• Bamboo is not the provider of the underlying foundation models
• All such processing is performed solely to deliver the Services to you

Some agent tasks run in isolated, ephemeral compute environments ("sandboxes"). Data processed in a sandbox is used only to perform the requested task and is not retained beyond the session, except as written back to your authorized storage.

For more details, see our Data Processing Agreement.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers and Subprocessors

We share information with third-party vendors who perform services on our behalf, including:

• Cloud hosting and infrastructure (Vercel, Supabase, Google Cloud Platform)
• Version-controlled storage of knowledge and business context (GitHub)
• AI model providers (Anthropic, via OpenRouter)
• Payment processing (Stripe)
• Product analytics and feature flags (PostHog)
• LLM observability and tracing (Langfuse)

Third-party platforms you connect using your own credentials (such as your advertising accounts or Slack workspace) are connected platforms rather than our service providers — see Section 4.2.

Our current Subprocessors are listed at withbamboo.com/legal/subprocessors.

4.2 Connected Platforms

When you connect third-party platforms, data sources, or tools to Bamboo using your own credentials, we exchange data with them as necessary to provide the Services at your direction. Your use of these platforms is subject to their respective terms and privacy policies, and they are not Bamboo subprocessors.

4.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government inquiries.

4.4 Business Transfers

If Bamboo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

4.5 With Your Consent

We may share information for other purposes with your consent or at your direction.

5. Data Retention

We retain information for the period necessary to fulfill the purposes described in this Privacy Policy, generally as follows by category:

We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you request deletion of your data, we will delete it within thirty (30) days, except for data we are required to retain. See our Data Deletion Policy for more information.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments
• Employee confidentiality agreements

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You can access and download your data through your account settings or by contacting us.

7.2 Correction

You can update or correct your account information at any time through your account settings.

7.3 Deletion

You can request deletion of your data by submitting a request at withbamboo.com/legal/data-deletion.

7.4 Marketing Communications

You can opt out of marketing communications by clicking "unsubscribe" in any marketing email or by contacting us.

7.5 Cookies

Most browsers allow you to control cookies through their settings. Note that disabling cookies may affect the functionality of the Services.

8. California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the CPRA (the "CCPA").

8.1 What We Collect, and Why

• Categories of personal information: identifiers (such as name and email), professional information, commercial information, internet/usage activity, and the contents of Customer Data you provide. We do not intentionally collect sensitive personal information beyond account credentials.
• Sources: you, your use of the Services, and Connected Platforms you authorize.
• Business purposes: to provide, secure, and improve the Services, as described in Section 2.
• Categories of recipients: our subprocessors and service providers (see our Subprocessors page), and others as described in Section 4.

8.2 Your Rights

• Right to Know / Access: request the categories and specific pieces of personal information we have collected about you.
• Right to Correct: request correction of inaccurate personal information.
• Right to Delete: request deletion of your personal information.
• Right to Opt Out of Sale/Sharing: we do not sell or share personal information as those terms are defined under the CCPA.
• Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information beyond what is necessary to provide the Services.
• Non-Discrimination: we will not discriminate against you for exercising your rights.

8.3 How to Exercise Your Rights

Submit a request at data-requests@withbamboo.com or through withbamboo.com/legal/data-deletion. We will verify your request against information associated with your account. You may use an authorized agent to submit a request on your behalf with proof of authorization. If we decline a request, you may appeal by replying to our response.

9. International Users

Bamboo is based in the United States and primarily processes data in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

10. Children's Privacy

The Services are not intended for individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it promptly.

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Understand how you use the Services
• Provide personalized content and features
• Analyze and improve the Services
• Deliver relevant advertising (if applicable)

Types of Cookies We Use:

You can manage cookie preferences through your browser settings.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Ado, Inc. d.b.a. Bamboo
Email: legal@withbamboo.com

You may also submit inquiries through our feedback form or support channels.