Last updated 11 October 2026.
This is a marketing site with no accounts and no login. I collect as little as I can, and I do not sell or rent anything I hold.
Three tools show me how the site is used. Vercel Analytics counts page views. PostHog records which pages you open and what you click, so I can see where people give up. Microsoft Clarity records how far a page is scrolled and where clicks land, and can replay a visit as a picture of the page being used. None of them is an advertising tool, none follows you to other sites, and none is told who you are.
PostHog and Clarity each store a cookie, so in the EU and the EEA the site asks before either one starts. Say no and neither runs. Elsewhere they start without asking, which the rules there allow, and you can switch them off at the bottom of this page at any time.
A small script also sends page views to my own contact system at hub.bonlabs.io. If you type your email into a form on this site, that visit is linked to your email there, so I know which pages you read before we spoke. It only accepts this site, and it does nothing if your browser sends Do Not Track.
The site is hosted by Vercel, which like any web host keeps short-lived server logs, including IP addresses, for security and reliability. I do not use those logs for marketing.
The planner at /build saves your answers so your plan has its own link you can come back to. What you type is stored in a database hosted by Supabase: your answers, and your name, company website and email if you give them. If you ask for the plan link by email, it is sent through Resend. Ask me and I delete the plan.
A free resource on this site can ask for your email, and a GitHub username if you want access to its code. That is stored in the same Supabase database, and I get one email saying you asked, so I can grant access by hand. Nothing else is sent to you unless you ask for it.
Every button that offers a call sends you to a booking page on this site, which hands you to Cal.com to pick a time. When you book, you give Cal.com your name, email address, the slot you picked and anything you type into the notes. That reaches me so I can prepare for the call, and it is handled under Cal.com's own privacy policy as well as this one. I do not record calls unless I ask first and you agree.
If you email me or connect on LinkedIn, I keep that correspondence so we can carry on the conversation. Nothing more.
Vercel for hosting, PostHog and Microsoft Clarity for seeing how the site is used, Cal.com for scheduling, Supabase for the database, and Resend for the few emails the site sends. PostHog runs on its European servers. Fonts are served from this domain rather than a font network, so visiting the site does not tell anyone else you were here. There are no advertising pixels and no data brokers.
Vercel, PostHog and Clarity hold what they record on their own standard schedules, and session recordings are the shortest-lived of them. Plans, requests, booking details and correspondence I keep while there is a live conversation or engagement, and for a reasonable period after for my own records. When anything stops being useful, I delete it.
You can ask me what I hold about you, ask me to correct it, or ask me to delete it, and I will. You can read the whole site without giving me anything, since nothing here is gated. Analytics can be switched off at the bottom of this page and switched back on the same way, and blocking it in your browser will not break anything.
For anything on this page, including a deletion request, reach me on LinkedIn or by booking a call. If any of this changes, I will update this page and the date at the top.
Bon Labs is a trading name of Zhang & You Holdings Pte. Ltd. (UEN: 202624254H), incorporated in Singapore.