Who we are
Bounty is a trade name of Santa Ana for Digital Marketing LLC. This policy describes how Bounty (“we”, “us”) handles personal information when you visit www.bounty.fm and related pages, apply for a campaign, use the partner portal, or view a report or ad sample we share with you. For visitors in the European Economic Area and the United Kingdom, Santa Ana for Digital Marketing LLC is the controller of the personal data described here.
What we collect
Information you give us
- Campaign applications. When you apply for a free campaign we collect your name, company, email, phone number, the podcast you name, your target chart, country and audience preferences, your answer to our budget question, and your acceptance of the trial terms. We save your answers as you move through the form, so we may keep what you entered even if you don't finish. We also record your browser's user-agent string with your application.
- Media kit requests. When you ask for our media kit we collect your name, email address and, if you give it, your show or company, along with your country (from your IP address) and your browser's user-agent string. We use them to let our team know who asked for the kit and to follow up about Bounty.
- Partner accounts. If you have a partner portal account, we store your email address, display name and company, and a securely hashed password through our authentication provider, plus the campaigns, proposals and reports associated with your account. Agencies can also add business details such as a logo, brand colour, website, contact email, address, phone number, legal name and VAT number.
- Messages. If you email us, we keep the message and your contact details.
Information collected automatically
- Server and security logs. Like most websites, our hosting provider records requests to our servers. For our public chart and show pages we also log, for abuse prevention, your IP address, the approximate country and network (ASN) it belongs to, your browser's user agent and client hints, the referring page, your language setting, and a TLS fingerprint of your connection.
- Cookies and local storage. We use a small number of essential cookies (for example to keep you signed in) and store your privacy choice in your browser. Visitor identification uses cookies set by our data partner. Details are in our Cookie Policy.
- Visitor identification data. See the next section.
Information from public sources
Our chart pages and campaigns use public information about podcasts: show names, hosts, descriptions, artwork, episodes and Apple Podcasts chart positions, which we collect from Apple's public feeds and directories and from chart-data providers. To build ads for a show, we transcribe and analyze its published episodes. This information can include the names and voices of hosts and guests.
Visitor identification
We use a visitor identification service, RB2B (operated with its data partner Retention.com), on our public marketing pages to learn which businesses, and in some cases which people, visit our site, so we can follow up with those who may be interested in Bounty.
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.
How we control it on our side:
- It runs only on our public marketing pages, not in the partner portal or on shared reports.
- If your browser appears to be in the EEA, the UK or Switzerland, it doesn't run unless you choose Accept in our cookie banner.
- If your browser sends a Global Privacy Control signal, it doesn't run.
- You can turn it off at any time with .
How we use information
- To review applications, run campaigns, and deliver reports and the partner portal.
- To build ad creative from a podcast's published content.
- To contact you about Bounty, including follow-up with businesses that visit our site.
- To secure the site, prevent abuse and automated scraping, and debug problems.
- To understand how the site is used and improve it.
- To comply with law and enforce our Terms of Service.
We don't sell application or account data to data brokers.
Legal bases (EEA and UK)
- Contract: to process your application, run campaigns, and provide the partner portal.
- Legitimate interests: to secure the site, prevent abuse, improve our services, and market to businesses, balanced against your rights.
- Consent: for visitor identification cookies, which you can withdraw at any time.
- Legal obligation: where the law requires us to keep or disclose information.
Who we share it with
We share personal information with service providers that help us run Bounty:
| Provider | What they do | Information involved |
|---|---|---|
| Vercel | Website hosting, content delivery and firewall | Request and log data, including IP address |
| Supabase | Database and sign-in | Applications, media kit requests, account and campaign data |
| Google (Gmail) | Sending our team email alerts about applications and media kit requests | Your name, email and what you submitted |
| RB2B and Retention.com | Visitor identification | Cookie identifiers, pages viewed, IP address and data they hold about you |
| OpenAI | Transcribing published podcast episodes | Episode audio |
| Anthropic | Picking highlights from transcripts for ad creative | Episode transcripts and show details |
| Google Fonts, jsDelivr, ImgBB | Fonts, chart scripts and images inside shared reports and proposals | Your browser's IP address when you open a shared report |
| Apple | Podcast directory, chart feeds and artwork images | Your browser loads show artwork from Apple's servers, which receive your IP address |
We may also disclose information to comply with law or legal process, to protect the rights and safety of Bounty, our customers or others, or as part of a merger, acquisition or sale of assets, in which case the information stays subject to this policy's protections.
California privacy rights
If you live in California, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and how we use it, to access and delete it, to correct it, and to opt out of its “sale” or “sharing” for cross-context behavioral advertising. We don't discriminate against you for using these rights.
In the past 12 months we have collected these categories: identifiers (name, email, phone, IP address, cookie IDs), commercial information (campaign interest and budget answers), internet activity (pages viewed, log data), approximate geolocation (country from IP), and professional information (company and role). Our use of visitor identification may be considered “selling” or “sharing” identifiers and internet activity. To opt out, use or turn on Global Privacy Control in your browser, which we honor. We don't knowingly sell or share the personal information of anyone under 16.
How long we keep it
- Applications, including unfinished ones: until you ask us to delete them, or until we no longer need them to evaluate or run a campaign with you.
- Media kit requests: until you ask us to delete them, or until we no longer need them to follow up with you.
- Partner accounts and campaign records: for the life of the account, then as needed for legal, tax and accounting purposes.
- Security logs: kept by our hosting provider for a limited period, generally days to weeks.
- Cookies: see the Cookie Policy for each cookie's lifetime.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. To make a request, email legal@bounty.fm. We may need to verify your identity before acting. If you're in the EEA or UK, you can also complain to your local data protection authority.
- Visitor identification: , or the RB2B GDPR opt-out linked above.
- Partner marketing: retention.com/optout.
- Emails from us: use the unsubscribe link in the email, or reply and ask.
International transfers
Our service providers process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for transfers out of the EEA and UK.
Security
We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls and password-protected sharing for reports. No method of transmission or storage is completely secure.
Children
Bounty is a business service and isn't directed to children. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we'll delete it.
Changes to this policy
We'll update this page when our practices change and revise the date at the top. If a change is significant, we'll give notice on the site or by email.
Contact us
Bounty
Email: legal@bounty.fm