1. Scope & Applicability

This Privacy Policy sets forth the data governance framework of Bonfire Base Studio ("Bonfire Base Studio," "we," or "our") and applies to all products, platforms, and services operated under the Bonfire Base Studio name — including Discord bots, custom-engineered applications, AI-powered tools, web-based platforms, and any ancillary services. By accessing or using any Bonfire Base Studio service, you consent to the collection, processing, and handling of your information as described herein. This policy is established and enforced in alignment with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and internationally recognized data protection principles.

2. Information We Collect

Bonfire Base Studio collects only the data strictly necessary for service delivery, security enforcement, and operational continuity. The categories of data we collect are as follows:

• Platform Identifiers & Interaction Data. Discord user IDs, server identifiers, command invocation records, and interaction timestamps collected automatically during bot usage.
• Scheduling & Consultation Data. Name, email address, meeting subject, preferred date and time, and related correspondence submitted through our appointment and proposal systems.
• Identity Verification. Email addresses verified via one-time passcode (OTP) prior to proposal submissions, appointment bookings, or payment processing — used exclusively to authenticate the requesting party and prevent fraudulent activity.
• Authentication & Review Data. When you authenticate via Google to submit a public review, we collect and retain your display name, email address, and public profile avatar to attribute your review.
• Payment Verification Data. Transaction reference numbers and sender name details submitted during invoice settlement. This data is classified as temporary and is subject to our 24-hour purge protocol. Bonfire Base Studio does not collect, store, or process credit card numbers, bank account credentials, or any automated financial instrument data.
• Website Analytics. Aggregated behavioral data including page views, session duration, and interaction patterns collected through Google Analytics, Microsoft Clarity, and Microsoft Advertising for service improvement and market analysis.

Bonfire Base Studio does not collect personally identifiable information beyond what is operationally required to fulfill the services you have requested.

3. Purpose of Data Processing & AI Transparency

All collected data is processed solely for the following operational purposes:

• Identity Verification & Fraud Prevention. OTP-based email verification ensures that proposals, bookings, and payment verifications originate from verified individuals, preventing automated abuse and fraudulent submissions.
• Service Delivery & Communication. Verified contact information enables Bonfire Base Studio to issue invoices, deliver meeting credentials, transmit project files, and provide status updates throughout active engagements.
• Platform Operations. Processing bot commands, managing appointment pipelines through the Ember Bot automation system, and maintaining service uptime and reliability.
• AI-Powered Multimodal Processing. When you interact with Bonfire Base Studio AI assistants — including text-based prompts, voice or text-to-speech features, image generation, image analysis, or video processing — all submitted content (text, audio, images, and video) is processed ephemerally in real-time solely to generate your requested output. Your inputs are never used to train, fine-tune, or improve third-party AI foundation models. All multimodal data is subject to our 24-hour purge protocol and is never sold, licensed, or brokered to any third party.
• Regulatory Compliance. Enforcing our Terms of Service, preventing platform abuse, and maintaining compliance with applicable Philippine data protection regulations.

Bonfire Base Studio may utilize aggregated, anonymized usage metrics for internal statistical analysis and service improvement. Such anonymized data cannot be traced back to any individual user.

4. Data Sharing & Third-Party Disclosure

Bonfire Base Studio does not sell, trade, license, or disclose personal data to third parties for advertising, marketing, or commercial purposes under any circumstances. Your data may be shared with vetted infrastructure providers — including Google Workspace, Zoom, Cloudflare, and Upstash — strictly to the extent necessary to facilitate the services you have requested. All third-party providers are subject to their own privacy policies and data protection obligations.

5. Cookies, Tracking Technologies, & Bot Protection

Bonfire Base Studio web properties may deploy cookies, local storage, and comparable tracking mechanisms for essential site functionality, user preference retention, and behavioral analytics. We utilize Google Analytics and Microsoft Clarity to analyze usage patterns, generate heatmaps, and record anonymized session interactions for the purpose of improving our products and services. Cloudflare Turnstile is deployed on form-based interfaces to distinguish human users from automated bots. You may manage or disable cookies through your browser settings; however, disabling cookies may limit certain site functionality.

6. Data Security & 24-Hour Retention Protocol

Bonfire Base Studio employs session-based identifiers, encrypted access tokens, and industry-standard security measures to safeguard your information against unauthorized access, alteration, disclosure, or destruction. We enforce a strict minimal-retention protocol: all temporary verification records, OTP session logs, payment submission artifacts, and AI processing inputs are retained for a maximum of 24 hours, after which they are systematically and permanently purged from all Bonfire Base Studio infrastructure. No method of electronic transmission or digital storage can guarantee absolute security; however, Bonfire Base Studio continuously evaluates and strengthens its security posture to protect your data to the highest practicable standard.

7. Data Subject Rights (RA 10173 Compliance)

In accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and recognized international data protection standards, you are entitled to the following rights regarding your personal data held by Bonfire Base Studio:

• The right to be informed of how your data is collected, processed, and retained.
• The right to access a copy of the personal data Bonfire Base Studio holds about you.
• The right to request correction of inaccurate or outdated personal information.
• The right to request the immediate deletion or erasure of your personal data.
• The right to withdraw your consent to data processing at any time.

Data subject requests may be submitted through our official contact channels and will be addressed within a reasonable timeframe in accordance with applicable law.

8. Age Restriction

Bonfire Base Studio services are not directed at individuals under the age of thirteen (13). We do not knowingly solicit or collect personal data from minors. If Bonfire Base Studio becomes aware that personal data has been collected from an individual under thirteen (13) years of age without verifiable parental or guardian consent, that data will be promptly deleted from all systems.

9. Policy Amendments

Bonfire Base Studio reserves the right to revise this Privacy Policy at any time to reflect changes in our operational practices, regulatory requirements, or legal obligations. Material amendments will be communicated through the official Bonfire Base Studio website, Discord community channels, or direct notification where applicable. Continued use of Bonfire Base Studio services following the publication of any such amendment constitutes your acceptance of the revised policy.

10. Contact

For inquiries, data access requests, or concerns regarding this Privacy Policy, contact Bonfire Base Studio directly at support@base69.studio.