Privacy Policy

Bimmy (getbimmy.com) is provided by Drumtix Ltd (“Drumtix,” “we,” “us”), a company registered in England and Wales (company number 17267084, registered office at Suite Ra01, 195-197 Wood Street, London, England, E17 3NU). This policy explains what personal data we collect through Bimmy, how we use it, who we share it with, and the choices and rights you have. It applies to everyone who uses Bimmy, including through a connected Facebook, Instagram, TikTok, or YouTube account.

Information we collect

Account and organization information

Collected via our authentication provider (Clerk) when you sign up: your name, email address, and your role within your organization.

Content you create

Business and brand details, content ideas, planning-board cards, generated briefs, calendar posts, captions, hashtags, notes, and any images or video you upload to plan or publish content.

Connected social media platform data

When you connect a Facebook Page, Instagram professional account, TikTok account, or YouTube channel, we request only the access needed to publish and manage content on your behalf. We never see or store your platform password — access is granted through each platform's own login screen, and the resulting access tokens are encrypted at rest.

• Facebook Pages — your Page's name, ID, and access token; your Page's basic info (pages_show_list); engagement metrics and insights (pages_read_engagement, read_insights); the ability to publish posts, photos, and videos (pages_manage_posts, pages_manage_engagement); and, only if you use the Community inbox, the ability to read and reply to your Page's comments and messages (pages_manage_engagement, pages_messaging).
• Instagram (via Meta's Business Login for Instagram) — your Instagram professional account's basic profile info (instagram_business_basic); the ability to publish content (instagram_business_content_publish); and, only if you use the Community inbox, the ability to read and reply to comments and DMs (instagram_business_manage_comments, instagram_business_manage_messages) and view insights (instagram_business_manage_insights).
• TikTok: your basic profile info (user.info.basic); your follower, following, likes and video counts (user.info.stats); your public videos (video.list); and the ability to publish videos directly to your profile (video.publish) or send them to your drafts (video.upload).
• YouTube — the ability to upload videos to your channel only (youtube.upload). We cannot read, modify, or delete your existing videos, view your subscribers, or access any other Google account data.

Payment information

If your organization subscribes to a paid plan, billing is handled entirely by Stripe. We store your subscription status and Stripe customer/subscription identifiers, but never your full card number — Stripe processes and stores payment details directly.

Log and device information

Standard server logs (IP address, browser type, timestamps) generated by our hosting provider for security and debugging. Bimmy does not use third-party advertising or analytics trackers — the only cookie we set is the session cookie required to keep you signed in.

How we use your information

• To provide the service — storing your content, rendering your calendar and planning board, and publishing the posts you schedule to the platforms you connect.
• To power the Inspiration library's automated analysis: when you save a TikTok or Instagram link, we send its public metadata to Anthropic's Claude API to generate notes on hook style, pacing, and format.
• To send you service communications (e.g. billing receipts, connection issues) via Resend.
• To provide customer support.
• To maintain security and prevent abuse.

How we share your information

We don't sell or rent your personal data. We share it only:

• With the platforms you connect (Meta/Facebook, Instagram, TikTok, Google/YouTube), solely to publish, manage, and analyze the content you direct us to publish — this use complies with each platform's own developer terms, including Meta's Platform Terms and Developer Policies, TikTok's Developer Terms, and YouTube's API Services Terms of Service.
• With service providers who process data on our behalf, under contract, strictly to operate Bimmy: Clerk (authentication), Neon (database hosting), Vercel (application hosting and media storage), Stripe (payment processing), Resend (transactional email), Inngest (background job processing), and Anthropic (Inspiration library analysis only).
• If required by law, or to protect the rights, property, or safety of Drumtix, our users, or others.

International transfers

Bimmy and the service providers listed above operate infrastructure in the United States and other countries outside the UK. Where personal data is transferred outside the UK/EEA, we rely on the provider's Standard Contractual Clauses or equivalent safeguards.

Data retention and deletion

We retain your data for as long as your organization's account is active. If you disconnect a platform, we immediately revoke that platform's access token and stop using it, though a record of posts already scheduled or published stays in your history. If you delete your account or organization, we delete your data — or anonymize it where we're required to keep records for legal or accounting reasons, such as Stripe invoices — within 30 days. See our Data Deletion page for how to request deletion, including deletion of data obtained via a connected Facebook, Instagram or TikTok account.

Your rights

Depending on where you're located, you may have the right to access, correct, delete, restrict, or receive a copy of the personal data we hold about you, and to object to certain processing. To exercise any of these rights, contact us at support@getbimmy.com. If you're in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).

Security

We use industry-standard measures — including encryption of stored platform access tokens, encrypted connections (TLS) for data in transit, and organization-level access controls — to protect your data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

Children's privacy

Bimmy is not directed at, and we do not knowingly collect personal data from, anyone under 16.

Changes to this policy

We'll update the date at the top of this page whenever we make changes, and notify you by email or in-app notice if a change is material.

Contact

Questions about this policy, or requests relating to your personal data, can be sent to support@getbimmy.com. Drumtix Ltd is the data controller for the personal data described in this policy.