Privacy Policy

Effective date: April 3, 2026  ·  BUENA VISTA VISION, INC.

BossOS Pro ("BossOS Pro," "we," "our," or "us") is operated by Buena Vista Vision, Inc. This Privacy Policy explains how we collect, use, and protect information about you when you use our products — including EventDesk (eventdesk.bossospro.com) — collectively referred to as the "Services."

1. Information We Collect

We collect information you provide directly:

• Account information: name, email address, organization or brokerage name, and phone number when you create an account.
• Business data: transaction details, event information, contact lists, checklists, notes, documents, and other operational data you enter into our Services.
• Billing information: payment details are collected and processed directly by Stripe. We do not store credit card numbers.

We also collect limited technical data automatically:

• IP address (used for rate limiting and security only)
• Browser and device type
• Pages visited and features used (usage patterns, not content)

2. Google User Data

If you choose to connect your Gmail account, we access your Google user data as follows:

• Scope requested: gmail.readonly — read-only access to your Gmail messages.
• What we read: We scan recent email messages to detect business-relevant signals (e.g., transaction updates, event confirmations, deadline changes). We read email metadata (sender, subject, date) and message content solely for classification purposes.
• How we use it: Emails are classified by our AI to surface actionable insights in your dashboard — such as deal updates, RSVP confirmations, or deadline alerts. Classification results are stored as structured signal data in your account.
• What we store: We store email metadata (sender, subject, date, message ID) and our AI-generated classification labels. We do not store full email bodies long-term. Email content is processed in-memory during scans and discarded after classification.
• What we do NOT do:
  • We do not send, modify, or delete your emails
  • We do not share your email data with any third party other than our AI provider (for classification only, and they do not use API inputs for training)
  • We do not use your email data for advertising, market research, or any purpose unrelated to the Services you use
  • We do not sell your Google user data to anyone
• Revoking access: You can disconnect Gmail at any time from your account settings. You can also revoke access from your Google Account permissions page. When you disconnect, we stop scanning and delete stored email metadata within 30 days.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

• To provide, operate, and improve the Services
• To send OTP authentication codes and account-related emails
• To send digest notifications, deadline alerts, and RSVP updates (if enabled)
• To generate AI-powered content, email drafts, action items, and coaching using your business data
• To process payments and manage your subscription
• To enforce our Terms of Service and prevent abuse

4. Third-Party Service Providers

We share data with a limited number of service providers solely to operate the Services:

• Cloud infrastructure & database hosting — stores your account and business data
• Payment processor — handles payment processing and subscription management
• Email delivery — sends transactional emails (authentication codes, digests, alerts)
• AI provider — powers content generation, email classification, and coaching features. Your business data is sent to our AI provider's API to generate output. Our AI provider does not use API inputs to train models.
• Google — Gmail API for email scanning (read-only, only when you connect your account)

We do not sell your data to any third party. We do not use your data for advertising.

5. Data Retention

We retain your account and business data for as long as your account is active. If you close your account or request deletion, we will delete your data within 30 days, except where retention is required by law. Gmail-derived metadata is deleted within 30 days of disconnecting your Gmail account or closing your account.

6. Cookies and Session Storage

BossOS Pro uses browser session storage (not persistent cookies) to maintain your login session. We do not use tracking cookies or third-party advertising cookies.

7. Security

We implement industry-standard security measures:

• Access codes and tokens are stored using one-way cryptographic hashes — never in plain text
• All data is transmitted over HTTPS
• OAuth tokens are encrypted at rest
• Database credentials are used server-side only, never exposed to the browser
• API endpoints are rate-limited to prevent abuse

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@bossospro.com. We will respond within 30 days.

California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion. We do not sell personal information as defined by the CCPA.

9. Children's Privacy

BossOS Pro is intended for business use by adults 18 and older. We do not knowingly collect data from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before material changes take effect. Continued use of the Services after changes constitutes acceptance.

11. Contact

Questions about this policy? Email us at hello@bossospro.com.

Buena Vista Vision, Inc.
hello@bossospro.com

---

See also: Terms of Service · Product-specific policies: EventDesk Privacy