Privacy Policy

1. Information We Collect

We collect information necessary to provide, maintain, secure, and optimize the BoppoGo Growth Operating System. The category of data collected depends on your relationship with BoppoGo:

• Account Information: Name, business email, phone number, company name, billing details, and login credentials provided during account creation.
• Merchant Storefront & Operational Data: Product catalogues, inventory logs, order fulfillments, sales transactions, and customer relationships managed via our platform.
• Device & Usage Information: IP addresses, browser types, operating systems, referring URLs, device identifiers, and platform interaction telemetry.
• Channel Integration Data: Tokens and API telemetry from connected sales channels including WhatsApp, Amazon, Meta, and Google APIs.

2. How We Use Information

We process personal and operational data for legitimate business purposes, including:

• Operating, maintaining, and scaling the Growth Operating System.
• Powering order routing, inventory synchronization, and automated CRM notifications.
• Executing autonomous AI Workforce tasks on behalf of merchants.
• Ensuring platform security, fraud detection, and multi-tenant data isolation.
• Complying with legal, tax, regulatory, and financial obligations.

3. Data Protection & Security Controls

Data security is engineered directly into our infrastructure. All data in transit is encrypted using TLS 1.3, and data at rest is encrypted using AES-256 algorithms.

Merchant data is logically isolated across multi-tenant architecture with strict role-based access controls (RBAC) and SOC2-compliant logging.

4. AI Data Safeguards

BoppoGo AI Workforce tools process merchant inputs strictly to generate workflows and business automation. We do not use proprietary merchant business data or customer records to train public AI foundation models.

5. Data Retention & Deletion

We retain personal and business data only for as long as required to fulfill active merchant subscriptions and legal compliance. Upon account termination, merchants may export complete data records, after which data is securely purged in accordance with our retention schedules.

6. Your Data Rights

Depending on your jurisdiction (GDPR, CCPA, DPDP Act), you possess rights to:

• Access, rectify, or request deletion of your personal data.
• Restrict or object to processing activities.
• Export your data in a machine-readable format.
• Opt out of non-essential marketing communications.

7. Contact Us

For privacy inquiries, data subject access requests, or security disclosures, please contact our Data Protection Officer at: