Privacy Policy
Last updated 3 October 2026 · Managed service and guided browsing
1. Who is responsible for your information
NeighborhoodConnect Ltd, trading as BonusRoute, is responsible for the customer information described here. We are registered in England and Wales, company number 17051993, at 128 City Road, London, EC1V 2NX, United Kingdom. For privacy questions, use the messages in your private customer dashboard through your onboarding email, or write to that address.
2. Information you provide
We collect your email and name for account access and bookings, and the phone number and contact preferences you provide. Onboarding records whether you are a UK adult, your current and previous bonus banks, spare account count, available funding and plans for major borrowing. We also store agreement acceptance, your reviewed plan, checklist progress, messages, reported bonus amounts, supervisor checks and fee records. Do not put bank passwords, security codes, account numbers or identity documents in messages. The web onboarding form does not request them.
3. Why we use it
We use the details needed to arrange your requested call, prepare and deliver your service, keep your plan current and answer questions. This supports steps you request before an agreement and performance of that agreement. Access checks, request limits and staff audit records help protect accounts and investigate misuse, which are our legitimate interests. We record your choice and consent for optional WhatsApp contact; you can change that preference or tell your supervisor to stop. Choosing WhatsApp does not mean automated WhatsApp messaging is available. Optional Meta ad measurement uses separate marketing consent. If you allow it, we record permitted ad-click and browser identifiers and campaign labels, and measure verified account access, a confirmed call and completed registration. We do not send banking answers, eligibility, balances, bonus or transaction amounts to Meta. Rejecting marketing does not affect the service.
4. Where web account records are stored
Your saved web details are sent to the application server. They are not only stored in your browser. Authenticated access limits customers to their own account; authorised supervisors can review customer cases. Production storage is designed to use Google Firebase Firestore when explicitly configured. Local development previews instead persist test records in a private file on the developer's computer, outside the code repository; they do not automatically copy that file to production. Use invented details for a local preview.
5. Booking, email and website providers
BonusRoute handles the name, email and scheduling details entered into its booking form. Connected Google Calendars supply supervisor availability and hold booking events when calendar sync is enabled. Supervisors authorise access to their own calendar individually. When calling inside BonusRoute is enabled, Daily processes display names, opaque participant identifiers, connection/device information and the audio, video or screen sharing needed for your private call. Recording and automatic transcription are disabled for these embedded calls; external backup meeting providers have their own settings and privacy notices. If you choose to connect an account through Plaid, we receive the selected account details and transactions needed to review potential bonus credits. This read access does not authorise payments. Separately, when fee payment is enabled and you choose to pay, Plaid processes your confirmed first and last name, email, the fee amount and an opaque customer and payment reference. You review and approve the one-off payment in the bank’s own flow. BonusRoute stores provider identifiers, amounts, status and matched incoming-payment evidence from its Revolut business account to confirm receipt. We do not receive your bank password or create an automatic-payment mandate. Resend receives the recipient address and content of service emails when delivery is enabled. Otherwise email remains in a private preview outbox. Website hosting processes ordinary connection information, including IP addresses, and this site requests fonts from Google Fonts. Opening a bank or meeting link also involves that provider's own privacy notice. When enabled and you consent, Meta receives ad-click/browser identifiers, browser information, hashed email and an account identifier, and those limited service events through its Pixel or Conversions API. Hashing supports matching and does not make data anonymous. Meta processes information under its own privacy policy at facebook.com/privacy/policy and may process it internationally. Live provider setup, processing locations and any international-transfer arrangements must be confirmed before production use; this notice does not claim UK-only hosting or completed provider agreements.
6. Sign-in cookies and access records
Your private access email contains a single-use link that expires after 20 minutes. A necessary session cookie keeps you signed in for up to 14 days; signing out ends that session. The server stores hashed token and session identifiers, security limits and staff-action records. Access links remain in the private email outbox so they can be delivered or inspected in local development. Expiry ends access but does not automatically erase the underlying records. A necessary privacy-choice cookie remembers your decision for 90 days. Only after marketing consent do we set a separate consent identifier and use permitted Meta identifiers such as _fbp and _fbc. You can withdraw through Privacy choices on any page; this stops future measurement and clears the Meta browser cookies we control. It cannot recall events already sent or stop a delivery already in flight.
7. Optional guided browsing and form assistance
Where available, you may separately consent to a browser hosted by Kernel during your appointment. Websites you open, information you enter, cookies and browser state are processed in that cloud browser, not only on your device. The bank may process entries before you submit a form. Your private workspace saves cookies and browser state so you can continue during a later appointment. It expires after 30 days without use and is removed by the scheduled cleanup process; expired workspaces cannot be reopened. You can request deletion from the call page, including outside a call. Closing a session saves its state; deleting a workspace closes its session first, then removes the saved profile once closure is confirmed. We do not enable browser telemetry. The interactive link is issued only to your original signed-in customer session; your supervisor can check session status or request closure and sees the screen only if you share it. Cloud-browser processing may take place outside the UK. BonusRoute stores consent, appointment and sign-in bindings, provider identifiers and expiry/closure records. If you choose form assistance, we separately store your basic name, contact, address and date-of-birth details for 30 days after you save them. This profile is accessible only through your customer login, not supervisor case views. A preview shows which details can fill the current bank form. Only the fields you select are sent for filling. Previews expire after five minutes and are removed by scheduled cleanup; successful fill requests consume them immediately. You can edit or delete your saved details separately from your browser workspace. A request already being processed cannot always be recalled. Deleting either does not remove information received by a bank. If you previously installed the separate Chrome extension, details saved there remain in your local Chrome profile until you delete them there; downloaded files must be removed separately.
8. Retention and your choices
Service account records currently persist until manually removed; the service does not have an automatic account-deletion schedule. Marketing consent, attribution and conversion records expire after 90 days and are removed in bounded batches when the scheduled marketing job runs. Expired consent cannot authorize tracking even if cleanup has not run. This marketing cleanup does not delete service, banking or fee records. Meta applies its own retention rules to data already received. Decisions about keeping records need to consider active support, fee questions, security investigations and applicable record-keeping obligations. You can request access, correction, deletion, restriction or a portable copy, subject to the rights and exceptions that apply. Some information is needed to provide a personalised plan; you can decline the service instead. Your supervisor reviews plans and receipt reports; the software does not itself decide bank approval or whether a bank owes a bonus.
9. Objections and complaints
You may object to uses based on our legitimate interests and withdraw optional contact consent. Send your request through your private customer messages or to our registered office. Requests are handled manually; closing a tab, signing out or deleting the extension does not delete your web account. You can also complain to the Information Commissioner's Office at ico.org.uk. Your statutory data-protection rights are not limited by this notice.
For information about your rights or raising a concern, visit the Information Commissioner’s Office.