Privacy policy

This page explains what information Bane keeps about you, why we keep it, who helps us run the service, and the rights you have over your information under UK data protection law (the UK GDPR and the Data Protection Act 2018). Last updated 6 July 2026.

Who we are

Bane is run by the site operator. For anything to do with your information, use our contact form. For the account and billing information described below, the site operator is the data controller.

What we keep, and why

  • Your account: your email address and your plan. We need these to provide the service you signed up for (our lawful basis is performance of a contract).
  • Your robots: the page addresses you watch, the columns you chose, the schedule, and where the results go. Again, this is how we provide the service (contract).
  • Run history: a short history of recent runs so you can see what happened. Older entries are trimmed automatically (contract, and our legitimate interest in helping you troubleshoot).
  • Shop connections: if you connect a shop, the access token is stored encrypted and used only to do what your robot asks (contract).
  • Billing records: Stripe handles payment, so we never see your card details. We keep records of what you were charged because tax law requires it (legal obligation).
  • Service logs: standard technical logs used to keep the service secure and working (our legitimate interest in running a safe, reliable service).

The lists your robots collect

You choose what your robots collect and where it goes. For that collected material, you are the controller and we act on your instructions: we fetch it, tidy it, and deliver it to the destination you picked. We do not read it for any other reason, we do not sell it, and we do not use it to build anything of our own. If your robots collect information about people, you are responsible for having a lawful reason to collect and use it (see the acceptable use section of our terms).

What we do not do

We do not sell your information. We do not show adverts. We do not share your information with anyone except the service providers listed below, and then only so they can help us run Bane.

Who helps us run Bane (sub-processors)

  • Google Cloud / Firebase: hosts the service and stores your account, robots and run history.
  • Stripe: takes payment and stores your card details. We never see them.
  • Anthropic: helps Banebot understand the instructions you type when you set up a robot. Only the text of your instruction and the page you point it at are sent, only at setup time, never on scheduled runs.
  • Apify: routes the "rising searches" trend lookups so they are not rate-limited. Your account details are not sent, only the search terms being looked up.
  • Google Workspace (Gmail): if you choose email delivery, your list is sent to you through our email provider.
  • Your own connected services: if you send results to your shop, a Google Sheet, or a web address, the results go to that service under your own account and its own terms.

Some of these providers process data outside the UK (for example in the United States). Where they do, transfers are covered by UK-approved safeguards such as adequacy decisions or the international data transfer addendum to the standard contractual clauses.

Cookies

Bane does not set advertising or analytics cookies. To keep you signed in, the service stores a sign-in token in your browser (strictly necessary, so no consent banner is needed). If you pay for a plan, Stripe sets its own cookies on its checkout pages; see Stripe's cookie policy for details.

How long we keep things

Your account, robots and connections are kept while your account is open. Run history is trimmed automatically so only recent runs remain. Delete a robot and it, along with its history, is removed. When your account is closed, we delete your account information within 30 days, except billing records, which we must keep for six years to satisfy UK tax law, and logs needed to investigate abuse.

Your rights

Under UK data protection law you can ask us to: give you a copy of your information (access), correct it, delete it (erasure), restrict or object to how we use it, or give it to you in a portable format. To use any of these rights, including closing your account and having your information erased, use our contact form and write in from the email address on your account. We will act within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ico.org.uk).

Changes to this policy

If we change this policy in a way that matters, we will update this page and the date at the top. Significant changes will be flagged inside the app or by email.