This Privacy Policy explains how Bailey (“Bailey”, “we”) handles personal data. Bailey is an early access service operated by the independent creator behind Bailey and is not yet incorporated as a company. This policy covers two different relationships: the data we process about you, our user, and the data your published sites collect about their visitors, which Bailey processes on your behalf.
1. Who is responsible
For data about our users (accounts, support), Bailey is the data controller. You can reach us at privacy@trybailey.app. Once Bailey is incorporated, the controller’s company name and registered address will be published here.
For data that your site collects from its visitors, you are the controller and Bailey is your processor: we store and serve that data under your instructions and never use it for our own purposes.
2. Data we process about you (our user)
| What | Why | Legal basis |
|---|---|---|
| Account identity (email, name, organization) | Create and secure your account, provide the Service | Performance of our contract |
| Ownership & governance records (which projects are yours, roles, audit log) | Enforce isolation, show you who did what | Contract; our legitimate interest in a secure, auditable platform |
| Support messages | Answer you | Legitimate interest in helping our users |
3. Data your sites collect (you are the controller)
Bailey’s data plane is governed by design. When a page you publish collects personal data, the platform requires, before it will go live, a declared purpose, legal basis, retention period and, where the page is public, a notice. This is enforced by Bailey, not left to good intentions:
- Bounded to you. What a site collects is fenced to your project. One project can never read another’s data, enforced at both the kernel and the policy layer.
- Insert-only. A public page can add an entry (a sign-up, a message) but cannot read the list back. Only you can, from your control room or via your assistant.
- Retention is real. Entries past their declared shelf life delete themselves.
- Erasure in one click. You can erase a single person
everywhere, or wipe a dataset entirely, from the dashboard, the CLI
(
bailey erase), or by asking your assistant. - Counted, not tracked. Visitor analytics are cookieless and do not identify anyone (see our Cookie Policy).
As the controller for this data, you are responsible for having a lawful basis and for honouring your visitors’ requests. Bailey gives you the tools to do so and acts only on your instructions.
4. Who we share data with
We do not sell personal data. We use a small number of vetted processors to run the Service: for authentication and the control-plane database, for transactional email, and for hosting (cloud infrastructure located in the European Union). Each is bound by a data processing agreement and acts only on our instructions. A current list is available on request at privacy@trybailey.app.
5. International transfers
Where data is processed outside the European Economic Area, we rely on an adequacy decision or on Standard Contractual Clauses with appropriate safeguards.
6. How long we keep data
We keep account data for as long as your account is active, and for a limited period afterwards where the law requires it. Data your sites collect is kept for the retention you declared, then deleted automatically. When you delete your account, we delete or anonymize your data within a reasonable period, save where the law requires us to keep it.
7. Your rights
Under the GDPR and similar laws, you have the right to access, rectify, erase, restrict and port your personal data, and to object to certain processing. To exercise them for data Bailey controls, write to privacy@trybailey.app. If a request concerns data collected by a specific site, it is that site’s owner who acts as controller; we will help route it. You may also lodge a complaint with your supervisory authority (in France, the CNIL).
8. Security
We protect data with per-project isolation, server-side identity stamping, short-lived serve-time tokens, encryption in transit, rate limiting and an audit trail. No system is perfectly secure, but security is a first-class part of how Bailey is built.
9. Changes
We may update this policy as the Service evolves. Material changes will be announced in the app or by email. The “last updated” date above always reflects the current version.
10. Contact
For any privacy question, or to reach our data protection contact, email privacy@trybailey.app.