Privacy Policy

1. Scope

This Privacy Policy applies to bossete.com and Bossete applications that process personal data, including—where enabled—bank account connection via third-party bank-data providers and payment processing via third-party payment processors.

The public homepage is deliberately sparse: it does not set marketing cookies or run advertising trackers.

2. What we collect

• Site telemetry (minimal) — standard server and hosting logs (IP, user-agent, path, timestamps) needed to operate and secure the site.
• Contact you send us — email content you voluntarily send to security or legal addresses.
• Conversation requests and NDA acceptance records — if you request a conversation at bossete.com/inquire, we store the details you submit (name, email, organization, purpose) together with acceptance evidence for the non-disclosure agreement: timestamp, network address, client user-agent, and a cryptographic fingerprint of the agreement version you accepted. This record exists to evidence the agreement and is retained for as long as the agreement and applicable law require.
• Payments — payment processors handle card data; we receive payment status and amounts needed to deliver the service, not full card PAN storage on our systems when using hosted checkout.
• Banking connection data (when you use a bank Link flow) — account identifiers, balances, and transactions returned by the bank-data provider under your authorisation. We do not receive your online banking password through the provider’s Link flow when you complete it as designed.

3. Consent

Yes — we obtain consent for collection, processing, and storage of personal data in scopes that require it.

• Bank Link / bank data — you explicitly start the connection, select your institution, and complete the provider’s authorisation experience. That action is your consent to retrieve the data classes the Link product discloses for the selected products.
• Payments — submitting a payment form constitutes consent to process the transaction through the payment processor.
• Marketing cookies — the public landing does not deploy third-party advertising trackers; if that changes, we will update this policy and use an appropriate consent mechanism where required by law.

4. How we use data

• Operate and secure Bossete services;
• Provide features you request (including bank-data features you enable);
• Process payments you initiate;
• Investigate abuse, fraud, or security incidents;
• Meet legal obligations.

We do not sell personal data.

5. Sharing

We share personal data only with:

• Processors necessary to run the product (hosting, CDN, payments, bank data aggregation, email delivery if enabled);
• Authorities when required by law;
• Professional advisors under confidentiality when required for compliance or dispute resolution.

6. Cookies

The public homepage states that it sets no cookies and runs no trackers. Authenticated applications may use cookies or similar storage for session security. Essential cookies are not used for advertising.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, and to object or port data. To exercise rights, email legal@bossete.com. See also our Data Retention & Deletion policy.

8. Contact

Privacy requests: legal@bossete.com
Security incidents: security@bossete.com
Controller: Bossete — Harumi Miyagi, Principal Operator.