Data Security and Privacy FAQs

Overview

This article answers common questions about how BombBomb handles your data, secures your videos, and supports your privacy rights.

Who this applies to: All Users 

Plan requirement: Core, Core + Copilot, Enterprise


Frequently Asked Questions

How does BombBomb protect my data? BombBomb uses industry-standard security practices to protect your content and personal information, including encryption of all data at rest (AES-256) and in transit (TLS 1.2+), applied to databases, backups, and file storage. Only authorized personnel can access user data, and access is controlled through role-based permissions. BombBomb's infrastructure is SOC 2 Type II certified.

Does BombBomb share or sell my personal information? BombBomb may share personal information in certain circumstances, including with trusted third-party service providers who perform services on BombBomb's behalf, and with third-party providers for advertising-related purposes. BombBomb does not sell the personal information of users under 16 years of age. For a complete and current description of how BombBomb shares personal information, review the BombBomb Privacy Policy.

Where is my data stored? All user data and video content are stored on servers located in the United States, in secure, SOC 2 Type II-compliant data centers operated by trusted cloud providers.

Can I delete my videos? Yes. You can delete any video from your Workspace at any time. Once deleted, the video is permanently removed and cannot be recovered.

Can I request that all of my data be deleted? Yes. To request deletion of all data associated with your account, email the BombBomb Compliance Team at forgetme@bombbomb.com. BombBomb will complete the deletion within 30 days of confirmation. Note that deleted data may persist in backup copies for a short period before permanent removal. For more information, see the BombBomb Privacy Policy.

Is BombBomb compliant with data protection regulations? Yes. BombBomb adheres to applicable data privacy laws and frameworks, including GDPR, CCPA, the EU-U.S. Data Privacy Framework, and CAN-SPAM. For full details on BombBomb's compliance commitments and your rights as a user, see the BombBomb Privacy Policy.

How do I report a security concern or suspected account compromise? If you believe your BombBomb account has been compromised, or if you have concerns about data handling or security, submit a report using the BombBomb Abuse Prevention and Reporting Form.