Privacy Policy

BOSS NOW AI ("Business Operating System Simplified Now", "we", "us") provides the software and hosting behind your business at bossnowai.com. This policy explains what we collect, where it lives, who can see it, and how you get it back.

The short version: your clients are yours. We hold their information so your system can work, we do not use it for anything else, and we do not sell it to anyone.

1. Two kinds of information

Your account information. The details you give us to run your subscription:

• Your name, email address, business name and billing contact.
• Payment details, handled by our payment processor. We never see or store your full card number.
• Basic technical information about how the system is used, so we can keep it running and fix what breaks.

Your clients' information. Everything you put into your system: contacts, inquiries, intake and consent forms, session notes, messages, payments, courses and files.

2. Your clients' information belongs to you

For your clients' information you are the data controller and we are the processor. We hold it and process it only on your instructions, only to run the system you are paying for. We do not use it to train models, we do not sell it, and we do not look at it except when you ask us to, or when we have to in order to fix a fault you reported.

You are responsible for having the right consent from your own clients to collect and hold their information. Informed consent forms in the system exist to help you do that properly.

3. Where it lives

• Your system runs on a discreet, secure server in Amsterdam, the Netherlands, chosen deliberately because the privacy of the people you work with is the foundation of this work rather than an add-on.
• Each account has its own isolated database. Your records are never mixed with another business's records.
• Traffic between your browser and your system is encrypted in transit.
• Credentials and connection keys are encrypted at rest.
• Backups are written hourly and daily to private, access-controlled storage.

4. Signal and Proton Mail

If you connect Signal or Proton Mail, messages you choose to bring into the system are stored on the relevant client's record so that your client's history is in one place. Signal and Proton keep their own independent policies for messages in transit and on their own servers; those are governed by their terms, not ours.

5. Who else touches it

We use a small number of service providers to operate the business. They are bound to use the information only to provide that service to us:

• Cloud hosting and storage for the system, its databases and its backups.
• A payment processor for subscriptions and card payments.
• Email delivery providers, for the emails your business sends.
• Our own support tools, when you contact us for help.

We may also disclose information where we are legally required to, or where it is necessary to protect someone from serious harm. We will tell you if that happens, unless we are legally prevented from doing so.

We do not sell personal information, and we do not share it for advertising.

6. Cookies

We use the cookies needed to keep you signed in and to keep the system secure. We do not use advertising cookies on this website, and we do not run third-party tracking pixels on your member area.

7. How long we keep it

• While your account is active, for as long as you need it.
• After you cancel, your system stays available in read-only form for 30 days so you can export everything.
• After that it is removed from active systems, and from backups within 90 days.
• Billing records are kept longer where tax law requires it.

8. Your rights, and your clients' rights

You can ask for a copy of your information, ask us to correct it, or ask us to delete it. You can export your data and your code yourself at any time, without asking us. If one of your clients makes a request to you, you can use those same export and delete tools, and we will help if you need us to.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to processing and to complain to your local data protection authority.

9. Children

This system is built for adult professional use. It is not intended for anyone under 18, and we do not knowingly collect information from children.

10. Changes

If we change this policy in a way that matters, we will tell you by email before it takes effect. The date at the top always shows the current version.

11. Contact

Questions about privacy, or a request about your information: [email protected].