Legal
Privacy Policy
Last updated: 2026-09-08
The Traditional Chinese version of this document is the authoritative text. Other language versions are for reference only; in case of any discrepancy, the Traditional Chinese version prevails.
Bonfire is a collaboration and team-building platform operated by HunterXtop Digital Technology Co., Ltd. (頂尖獵人數位科技股份有限公司) ("we", "us"). This Privacy Policy explains what data we collect from you, why we collect it, who processes it on our behalf, and how you can manage your own data.
If you do not agree with this policy, please do not use Bonfire. By continuing to use it, you confirm that you understand and accept what this policy says.
1. Who we are
This service is operated by HunterXtop Digital Technology Co., Ltd. (頂尖獵人數位科技股份有限公司). Bonfire and HunterXtop are two products of the same company, but they are separate account systems: unless you link them yourself, data does not move between them.
For questions about personal data, please write to hello@bonfire.tw.
2. What data we collect
We only collect what is necessary to provide the service. Mainly the following:
- Account data: email address, encrypted password, display name, avatar image, and the role you chose (initiator / participant).
- What you write yourself: your profile, skills and the kind of collaboration you are looking for, the sparks (projects) and events you create, applications, tasks, comments, agreement drafts and revenue-split terms, and the images and attachments you upload.
- Collaboration records: the applications you send or receive, records of becoming a member, and the hash and timestamp of agreements. These are the core of the platform's "leave evidence of the collaboration" feature.
- Technical and usage records: audit records of logins and important actions (for example creating a spark, submitting an application), technical messages when an error occurs, and basic connection information sent by your browser or app.
- Device identifiers for push notifications: collected only if you use the mobile app and allow notifications.
- If you choose to sign in with LINE: we receive your LINE user ID, display name, profile picture and email address (you can choose not to provide the email on LINE's consent screen).
- If you choose to link a HunterXtop account: we receive a snapshot of the trust information you have already made public on HunterXtop (for example ratings, number of completed jobs, skill tags).
3. How we use this data
We use your data only for the following purposes:
- Providing the service itself: signing in, creating sparks, submitting applications, managing the workspace and agreement records.
- Showing the information a collaboration needs — for example letting the initiator of a spark see an applicant's profile.
- Sending emails directly related to the service, such as a new application, an application result, or a password reset.
- Keeping the service safe and stable: detecting anomalies, debugging, and preventing abuse and spam.
- Generating suggestions when you use an AI-assisted feature (see the next section).
4. How AI features handle your content
Bonfire has a few AI-assisted features: helping you tidy up a spark description, suggesting roles and skill tags, recommending people who might fit, and drafting reference text for an agreement.
When you use these features, the text you type or select at that moment is sent through Vercel AI Gateway to a model provider (Anthropic Claude, with OpenAI as fallback) for processing, and the result is returned to you.
What the AI produces is a suggestion. The decision is yours. The AI does not submit applications for you, does not conclude agreements for you, and does not decide who you work with.
We do not give your data to model providers for training their models.
5. Where we keep the data, and who processes it for us
We use the following third-party services to operate Bonfire. Each has its own privacy policy and security measures, and we engage them only to the extent necessary to provide Bonfire:
- Vercel: hosting for the website and the API.
- Neon: database hosting, holding the account and content data described above.
- Cloudflare: R2 stores the images and files you upload; Web Analytics measures site traffic (see the next section).
- Resend: sending service-related email.
- Sentry: collecting error reports so we can fix problems.
- Vercel AI Gateway, Anthropic, OpenAI: processing the text of a single request, only when you use an AI-assisted feature.
6. Site traffic measurement
We use Cloudflare Web Analytics to measure how the site is used: how many people visit, which pages they look at, and where they came from.
We chose this tool because it is relatively respectful of privacy: it does not use cookies, does not leave an identifier on your device, does not build a cross-site profile of you, and does not identify who you are. What we receive is aggregated, anonymous numbers, not individual browsing records.
We have not installed Google Analytics, advertising pixels, or any cross-site ad tracking.
7. What other people can see
Please note: Bonfire is fundamentally a place for people to find each other, so some data is meant to be seen by others.
- The sparks and events you publish — including the description, cover image, and the roles and skills you are looking for — are visible to anyone.
- Your public profile (name, avatar, bio, skills, and the HunterXtop trust information you chose to link) is visible to other users.
- The content of an application you submit is visible only to the initiator of that spark.
- Tasks, comments and attachments in the workspace are visible only to members of that spark.
- Your email address and password are never shown to other users.
8. Signing in with LINE
You may choose to sign in to Bonfire with LINE. When you do, we obtain your LINE user ID, display name, profile picture and email address from LINE.
The email address is used to create your account and to send notifications the platform needs to work: registration results, someone applying to your spark, an agreement waiting to be signed, a password reset. We do not use it to send marketing.
You can choose not to provide your email on LINE's consent screen. You can still use Bonfire without it, but we will ask you to fill in an email address on the site — without one you will not receive those notifications, and you will not be able to sign agreements or reset your password.
We do not obtain your LINE friend list or your chats, and we never post or send messages from your LINE account.
You can unlink LINE at any time in settings. Before you do, please make sure you still have another way to sign in.
9. Linking HunterXtop
Linking a HunterXtop account is entirely optional. Once linked, we store a snapshot of the trust information you have already made public on HunterXtop and show it on your Bonfire profile, so the people you work with have more to go on.
You can unlink at any time; after that the snapshot is no longer shown on Bonfire.
10. Cookies and similar technologies
We only use cookies necessary to run the service. We do not place advertising trackers:
- Login credential: keeps you signed in.
- Language preference: remembers the interface language you chose.
- Site password gate: while Bonfire is not yet fully open, remembers that you have passed the password page.
- Traffic measurement (Cloudflare Web Analytics) does not use cookies, so it is not in this list.
11. How long we keep it
While your account exists, we keep your data so the service can work. Once you delete your account from the account settings page, we immediately delete everything that identifies you: name, email address, avatar, bio, sign-in links, and push device identifiers.
Because of the nature of collaboration evidence, agreement records, revenue amounts and their hashes that have already been established are kept in de-identified form and shown on the site as "a deleted user" — otherwise the records held by other participants would be broken. After deletion, your original email address can be used to register again.
Error logs and audit logs are kept only for as long as necessary.
12. Your rights
Under the Personal Data Protection Act of the Republic of China (Taiwan), you may request to inquire about, review, obtain a copy of, supplement or correct your personal data, and you may request that we stop collecting, processing or using it, or delete it.
Most of it you can change yourself on the settings and profile pages. For anything else, write to hello@bonfire.tw and we will reply within a reasonable time.
13. Minors
Bonfire is not designed for children. If you are under eighteen, please use it with the consent of your legal guardian. If we find that we have collected a minor's data without such consent, we will delete it on our own initiative.
14. Updates to this policy
We may update this policy as the service changes. Where there is a significant change we will announce it on the site or notify you by email. The date shown at the top of this page is the last updated date.
Questions
If you have questions about this document or your personal data, email us and we will reply within a reasonable time.
hello@bonfire.tw