Privacy Policy

Effective date: July 30, 2026
Last updated: July 30, 2026

This Privacy Policy explains how Becomes tech, LLC ("Becomes," "BCMS," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use BCMS Cloud, thebcms.com, app.thebcms.com, and related sites, APIs, demos, newsletters, and support channels (the "Services").

For EU/EEA/UK users, also read our GDPR page, which supplements this Policy. Our Terms of Use govern use of the Services.

1. Who is responsible

The data controller for the Services is Becomes tech, LLC, a Delaware limited liability company.

• Address: 1111b South Governors Avenue, Dover, DE 19904, United States
• Phone: +1 (302) 487-8938
• Privacy contact: legal@thebcms.com

We are a small US-based software company. We do not currently appoint a separate Data Protection Officer or EU/UK representative. If that changes, we will update this Policy.

2. Information we collect

Account and profile information

When you sign up or manage an account, we may collect name, email address, avatar image, OAuth identifiers (for example Google or GitHub), onboarding answers (role, project type, framework, how you heard about us), and account preferences.

Billing information

If you subscribe, Stripe processes payment details. We store related billing metadata such as Stripe customer and subscription identifiers, plan, seat counts, invoice timing, and payment-failure status. We do not store full card numbers on our servers.

Customer content

Content you create or upload in BCMS (entries, media, templates, settings, API keys, webhooks, functions, invitations, and similar project data) is processed to operate your workspace. You control that content.

Support and communications

If you contact us, subscribe to the newsletter, book a demo, apply for a role, or submit a security report, we collect the information you provide (often name, email, company, message, and attachments) and related conversation history.

Usage, device, and log data

We and our providers may collect IP address, browser and device information, pages viewed, feature usage, referral and UTM data, approximate location derived from IP, crash or error diagnostics, and timestamps.

Cookies and similar technologies

We use cookies, local storage, and similar technologies for authentication, security, preferences, analytics, and product improvement. See Section 7.

3. How we use information

We use personal information to:

• Provide, operate, secure, and improve the Services
• Create and manage accounts, projects, seats, and permissions
• Process trials, subscriptions, invoices, and refunds
• Send transactional messages (login, invites, billing, security)
• Send product updates or marketing if you subscribe or otherwise permit, with unsubscribe options
• Respond to support, sales, careers, and security inquiries
• Analyze usage to fix bugs and prioritize features
• Detect abuse, enforce our Terms, and comply with law
• Create aggregated or de-identified statistics that do not reasonably identify you

4. Legal bases (EEA/UK)

Where GDPR or UK GDPR applies, we rely on one or more of: contract performance, legitimate interests (such as securing and improving a B2B SaaS product, in a manner that does not override your rights), consent (for example certain marketing or non-essential cookies where required), and legal obligation. Details are in our GDPR page.

5. How we share information

We do not sell personal information for money. We share information with service providers that help us run the Services, as needed for those purposes, and as described below.

We may also share information with professional advisors, in connection with a merger or financing, or when required by law or to protect rights, safety, and security.

Infrastructure such as databases and cache systems we operate (for example MongoDB and Redis) stores Service data on our behalf.

6. International transfers

Becomes is based in the United States. Personal information is processed in the United States and may be processed in other countries where our providers operate. Privacy laws in those places may differ from the laws where you live.

Where required, we use appropriate safeguards for cross-border transfers (such as standard contractual clauses or equivalent mechanisms offered by our providers). Contact legal@thebcms.com if you need more information about transfers.

7. Cookies and tracking

We use essential cookies or storage needed for login, security, and core functionality. We also use analytics and product-measurement tools (including Google Analytics and PostHog) and may load support or scheduling embeds (such as Crisp or Calendly) that set their own cookies.

Where required by law, we will request consent before setting non-essential cookies. You can also control cookies through your browser settings. Blocking some cookies may affect how the Services work.

We do not operate a separate advertising network on thebcms.com. If we later use advertising pixels for paid ads, we will update this Policy and any required consent tools.

8. Retention

We keep personal information only as long as needed for the purposes above, including:

• Account data: while your account is active, then deleted or anonymized after account deletion, subject to residual backups
• Billing records: as needed for accounting, tax, and dispute resolution
• Customer Content: while the project exists, then deleted according to product deletion flows after cancel or account deletion
• Support and marketing records: for as long as needed to manage the relationship, then deleted or suppressed on request where required
• Logs and analytics: for operational periods that vary by system (for example short operational logs and longer analytics retention set in those tools)

Exact backup windows depend on our hosting and storage providers. Deleted data may remain in encrypted backups for a limited time before rotating out.

9. Security

We use reasonable technical and organizational measures appropriate to a small SaaS business, including access controls, encrypted transport (HTTPS), password hashing where passwords are used, and monitoring. No method of transmission or storage is completely secure. Please use strong authentication practices and protect your API keys.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, object to or restrict certain processing, withdraw consent, and lodge a complaint with a supervisory authority.

To exercise rights, email legal@thebcms.com. You can also delete your BCMS account in product settings (email confirmation required). We may need to verify your identity before fulfilling a request.

California and other US state privacy laws may provide additional rights if they apply to us. We do not sell personal information. If you believe a state privacy law applies to your request, include that in your email and we will respond as required.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child provided information, contact us and we will delete it.

12. Changes

We may update this Privacy Policy. We will post the revised version on this page and update the "Last updated" date. For material changes, we will provide additional notice when reasonably practicable.

13. Contact

Privacy questions or requests: legal@thebcms.com.

Becomes tech, LLC
1111b South Governors Avenue
Dover, DE 19904, United States
+1 (302) 487-8938