BossForce.ai

Privacy Policy

Last updated: 10 June 2026

This Privacy Policy explains how BossForce.ai ("BossForce", "we", "us", or "our") collects, uses, and protects your personal data when you use the BossForce.ai website and application (the "Service").

By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Who we are

The Service is operated by the independent developer of BossForce.ai, acting as data controller. BossForce.ai is not yet registered as a legal entity; the registered name and address will be published here once incorporation is complete. For any privacy-related questions you can contact us at [email protected].

2. Data we collect

We collect the following categories of data:

  • Account data. When you sign in, we collect your email address and, if you use Google sign-in, your name and the basic profile information your Google account makes available to us.
  • Content you provide. Instructions, messages, files, and other input you give to your AI agents, as well as the output they generate for you.
  • Usage data. Information about how you interact with the Service, such as pages visited, features used, approximate device and browser information, and timestamps.
  • Cookies and local storage. Technical identifiers and preferences (for example, your selected language and your last sign-in method) stored on your device. See section 7.

We do not intentionally collect special categories of data (such as health or biometric data). Please do not submit such data to the Service.

3. How we use your data

We use your data to:

  • provide, operate, and maintain the Service;
  • authenticate you and keep your account secure;
  • run the AI agents and features you request;
  • communicate with you about your account, including sign-in links and service notices;
  • improve and develop the Service;
  • comply with legal obligations and enforce our terms.

4. Legal bases for processing

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service), our legitimate interests (to secure and improve the Service), your consent (where required, for example for certain communications), and compliance with legal obligations.

5. AI processing and third-party providers

The Service uses third-party providers to deliver its features, including:

  • AI model providers that process the content you submit in order to generate responses;
  • cloud hosting and infrastructure providers;
  • authentication providers (for example, Google sign-in);
  • email delivery providers (for sign-in links and notifications).

These providers act as our processors or independent controllers and may process your data only as needed to provide their services to us. We take steps to ensure they offer appropriate safeguards. Content you submit to AI agents may be transmitted to AI model providers for processing.

Integrations you connect

The Service lets you connect third-party integrations ("tools") so your agents can act in those services on your behalf. When you connect one, you authorize BossForce to access that service using the credentials or OAuth permissions you grant, limited to what that integration needs. We use this access only to perform the actions you request, and you can disconnect an integration at any time.

Google user data. When you connect a Google integration (for example, Google Sheets), we request only the scopes needed for the features you use — Google Sheets (.../auth/spreadsheets) to read and write the spreadsheets you ask your agent to work with, and Google Drive files (.../auth/drive.file) limited to the specific files you open or that the Service creates on your behalf, not your entire Drive. We do not use Google user data for advertising or to train generalized AI/ML models, and we store the OAuth refresh token securely. You can revoke access at any time in your Google Account (myaccount.google.com/permissions). BossForce's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Sharing your data

We do not sell your personal data. We share data only:

  • with the service providers described in section 5;
  • if required by law, regulation, or valid legal process;
  • to protect the rights, safety, and security of BossForce, our users, or the public;
  • in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. Cookies and local storage

We use cookies and browser local storage that are necessary for the Service to function (for example, to keep you signed in, remember your language, and remember your last sign-in method). We may also use limited analytics to understand usage. You can control cookies through your browser settings, but disabling necessary cookies may affect how the Service works.

8. Data retention

We keep your personal data for as long as your account is active and as long as needed to provide the Service. We may retain certain data for longer where required to comply with legal obligations, resolve disputes, or enforce our agreements. When data is no longer needed, we delete or anonymize it.

9. Security

We use technical and organizational measures designed to protect your data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

Your data may be processed in countries other than the one where you live. Where we transfer personal data outside your region, we rely on appropriate safeguards (such as standard contractual clauses) where required by applicable law.

11. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • delete your data;
  • restrict or object to certain processing;
  • request a portable copy of your data;
  • withdraw consent where processing is based on consent.

To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

12. Children

The Service is not intended for individuals under the age of 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.

14. Contact

If you have questions about this Policy or your personal data, contact us at [email protected].