Privacy Policy
BAMBAM LLC ("BAMBAM," "we," "us," or "our") operates bambam.surf and the BAMBAM surf alert service (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
By using the Service or subscribing to alerts via WhatsApp, SMS, or Telegram, you agree to this Privacy Policy.
1. Who we are
BAMBAM LLC is the data controller for the personal information described in this policy. You can reach us at contact@bambam.surf.
2. Information we collect
Information you give us
- Contact identifiers: phone number (for WhatsApp or SMS alerts), Telegram username or chat ID, email address if you contact us.
- Surf preferences: breaks you subscribe to, alert thresholds, notification preferences.
- Account information: any name or handle you choose to associate with your subscription.
Information collected automatically
- Usage data: when you receive an alert, when you reply, message delivery and read receipts where available.
- Technical data: Cloudflare (our hosting provider) may log IP address, browser type, and pages viewed for security and abuse prevention.
Information from messaging platforms
When you opt in via WhatsApp, SMS, or Telegram, the platform shares limited information with us so we can deliver messages — including your phone number or platform user ID, message status, and any content you send to us in reply.
3. How we use your information
- To send you the surf alerts you've subscribed to.
- To match real-time conditions against your preferences.
- To respond to your messages and support requests.
- To improve forecast accuracy (using aggregated, non-identifying patterns).
- To prevent abuse and comply with legal obligations.
We do not sell your personal information.
4. How we share your information
We share personal information only with the service providers that operate the Service on our behalf:
- Twilio Inc. — delivers WhatsApp and SMS messages. Privacy Notice.
- Meta Platforms, Inc. (WhatsApp) — operates the WhatsApp Business Platform. Privacy Policy.
- Telegram FZ-LLC — operates Telegram. Privacy Policy.
- Cloudflare, Inc. — hosting, DNS, and security for our website and backend.
We may also disclose information if required by law, to enforce our terms, or to protect rights, safety, or property.
5. Data retention
We keep your contact information and preferences while you have an active subscription, plus a reasonable period for record-keeping and legal compliance. Message delivery logs are typically retained up to 12 months. You can request earlier deletion at any time.
6. Security
We use reasonable technical and organizational measures including encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure; contact us if you suspect an issue.
7. International users
BAMBAM is operated from the United States. By using the Service from outside the U.S. you consent to your information being transferred to and processed in the U.S.
8. Your choices and rights
- Stop receiving alerts at any time — see Messaging Terms.
- Request a copy of the personal information we hold about you.
- Request correction or deletion of your personal information.
- Withdraw consent for any optional processing.
To exercise any of these rights, email contact@bambam.surf. We respond within 30 days. CCPA, GDPR, and similar rights are honored where applicable.
9. Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
10. Changes
We may update this Policy. The "Last updated" date at the top will change. Material changes will be communicated through the Service or to active subscribers.
11. Contact
BAMBAM LLC · contact@bambam.surf