Privacy Notice

Who operates this website

This website is operated by bnd, the builder of the Human Data Rail. bnd is currently completing its formal company registration. The registered legal name, company number, registered address, and jurisdiction will be published on this page as soon as those details are finalised.

For any question about this notice, and for any request concerning your personal information, write to khaled@bnd.one. That address reaches the founder directly.

What we collect, and when

This is an informational website. It has no accounts, no sign-up, and no user profiles. Personal information reaches us in exactly two situations: when you submit one of the three inquiry forms (the data-owner inquiry, the AI-organisation requirement, or the general contact form), and when you complete the Data Reservoir Diagnostic and choose to share the result with us.

The inquiry forms ask for the details needed to respond to you and nothing else.

• Your name and work email address
• Your organisation, role, and industry
• A high-level description of your processes or requirements
• Your preferred contact method
• For the diagnostic: organisation type, industry, process descriptions, approximate volume, and contact details

What you must not submit

The forms and the diagnostic are for high-level descriptions only. Every form on this site carries a prominent warning, and it applies here too: do not submit personal data about other people, confidential business information, medical or financial records, client or employee data, or any material subject to regulatory restrictions.

Nothing on this website is a channel for transferring actual data assets. Discovery conversations about data always begin with descriptions, never with the material itself.

What we deliberately do not collect

There is no analytics software on this site, no tracking pixels, no advertising, and no non-essential cookies. The site does not build profiles of visitors and does not observe how you browse.

There is no user database. If you never submit a form, the site holds nothing about you at all.

How your submission travels

When you submit a form, the content is validated on our server and then forwarded as an email to the founder at khaled@bnd.one. When an email delivery service is configured, that service is Resend, acting solely as a delivery pipe for the message.

If no email delivery service is configured, the site takes a different route: it prepares a pre-filled email in your own mail client, and you decide whether to send it. In that case nothing is stored on our servers at all; the message travels from your mailbox to ours like any ordinary email.

Server logs, rate limiting, and abuse prevention

To prevent abuse of the forms, the server keeps minimal, short-lived records for rate limiting. These are keys derived from IP addresses, held in memory only. They are not written to a database, not linked to your submission content, and disappear when they expire or the server process restarts.

The hosting platform, Vercel, may keep standard technical logs as part of operating the infrastructure, under its own terms.

The Ask bnd feature

The site includes an optional question-and-answer feature called Ask bnd. If you use it, your question may be processed by a third-party AI provider (Anthropic or OpenAI) through their API, strictly to generate the answer. Answers are grounded in an approved knowledge base about bnd; the provider is used only as the engine that composes the reply.

bnd does not store your questions and does not use them for training. Your question is sent to the provider only to generate the answer, and its handling by the provider is governed by that provider's API data-use terms. If you prefer not to have a question processed this way, simply email it to khaled@bnd.one instead.

Who receives your information

Your information is never sold, rented, or shared for marketing. It is never used to train AI models. The only parties that touch it are the services required to run this site.

• Vercel: hosts the website and processes traffic to serve it
• Resend: delivers form submissions by email, only when configured
• Anthropic or OpenAI: process Ask bnd questions through their API, solely to generate answers

Information used during a commercial opportunity

When an inquiry progresses beyond this website into a real commercial discussion, bnd may process further information to run the engagement: names and professional contact details, organisation and role information, correspondence, descriptions of potential data reservoirs, notes from discovery conversations, buyer requirements, due-diligence information, authority and permission information, confidentiality and contractual records, meeting notes, transaction administration, invoice and payment records, and incident, dispute, expiry, and renewal records.

The personal information attached to a commercial discussion is different from the underlying organisational data being considered for licensing. Public website forms remain for high-level descriptions only, and actual data must not be sent through the public diagnostic or general inquiry forms. Where deeper inspection is agreed, it must occur through a separate authorised process governed by appropriate confidentiality, access, and transaction terms.

Commercial-opportunity information may be received by authorised bnd personnel, professional advisers, service providers required to operate the engagement, the relevant supplier, qualified prospective buyers, and regulators, courts, or authorities where legally required. Disclosure to potential buyers is controlled and proportionate: bnd does not automatically reveal a supplier's identity, confidential details, or raw material before the supplier approves that disclosure.

Retention periods and the precise lawful basis for commercial-engagement records will be published once the operating entity is registered and advised; they are stated in the relevant engagement agreements in the meantime.

Why we are allowed to process this information

We process what you send us for one purpose: to understand and respond to your inquiry. In legal terms, that processing rests on the steps you ask us to take by contacting us, and on our legitimate interest in operating, protecting, and answering correspondence sent to this site. Where any future processing relies on your consent, we will say so at the point of collection, and you may withdraw that consent at any time. bnd's registered legal entity and jurisdiction will be published here when registration is finalised, and this section will then name the applicable law precisely.

Retention and your rights

Inquiry emails are kept in the founder's mailbox for as long as needed to handle the inquiry, and are deleted on request. There is no separate copy in any database, because no such database exists.

You can ask at any time for access to the information we hold about you, for correction of anything inaccurate, for deletion, to object to processing, or to withdraw consent you previously gave. Send any of these requests to khaled@bnd.one. The Data Rights page on this site describes the process in more detail, including response timing. Depending on where you live, you may also have the right to complain to a supervisory authority in your jurisdiction.

Changes to this notice

If this website begins collecting anything beyond what is described here, this notice will be updated first and the date at the top will change. Material changes will be stated plainly, not buried.

Questions about anything in this notice: khaled@bnd.one.