Privacy Policy

1. Controller

OCEAN AMBER LTD, Kantaras 9, Orea Building, Apt 103, 6056 Larnaca, Cyprus. Email: hello@bojoo.io.

2. What data we process

• Account data: name, email address, password (stored only in encrypted form), role in the workspace.
• Billing data: company, contact person, address, VAT number, email for invoices.
• Payment data: amount, payment reference and sender name of a bank transfer, as reported to us by our bank.
• Usage data: your jobs with their inputs, uploaded files, generated results, costs and credit bookings; also when you agreed to the terms.
• Technical data: IP address and time of requests in server logs, a session cookie for signing in.

3. Purposes and legal bases

• Providing Bojoo, running jobs, managing credit, issuing invoices: performance of a contract (Art. 6(1)(b) GDPR).
• Accounting and retention of invoices: legal obligation (Art. 6(1)(c) GDPR).
• Security, abuse prevention, troubleshooting: legitimate interest (Art. 6(1)(f) GDPR).

4. Recipients

• AI model providers: your inputs and uploaded files are sent to the providers of the respective models to create the results. Some of them are located outside the EU.
• Hosting and storage: our servers are operated by a data centre provider in the EU. Files are kept by a storage service that also uses locations outside the EU.
• Bank: Revolut Bank UAB (Lithuania) for receiving payments.
• Accounting: our accountants in Cyprus for invoices and tax returns.

Where data is transferred to a country outside the EU, this is based on appropriate safeguards such as standard contractual clauses or, where necessary to carry out your job, on Art. 49(1)(b) GDPR.

5. Retention

We keep account and usage data for as long as your workspace exists and delete it within a reasonable period afterwards. We keep invoices and accounting records for as long as tax law requires, usually six years in Cyprus. Server logs are deleted after a short time.

6. Cookies

Bojoo only sets a technically necessary session cookie for signing in. There are no advertising or analytics cookies.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, write to hello@bojoo.io. You can also lodge a complaint with a data protection authority, in Cyprus with the Commissioner for Personal Data Protection in Nicosia.

8. Website and contact form

Our website bojoo.io is delivered via Cloudflare. This produces server logs with the IP address and time of the request, which are deleted after a short time. The website sets no cookies.

If you request access through the contact form, we transmit your name, company, email address and message to our server and receive them as an email. We use these details only to answer your request and, where applicable, to set up your workspace (Art. 6(1)(b) GDPR). If no contract is concluded, we delete the request after twelve months at the latest.