Privacy Policy
1. About Us
Boum IT LLC is a Wyoming limited liability company ("Company", "we", "us", "our") registered at 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States.
We design, develop, and distribute software products, tools, extensions, modules, web applications, and custom technical solutions. We also provide a broad range of professional services including management consulting, project management, software implementation, software development, AI consulting and implementation advisory, technical support, and offshoring or nearshoring of support and operational services.
Note regarding EU/EEA users: Boum IT LLC does not have a designated representative in the European Union or the United Kingdom. European users may contact us directly at privacy@boum.it for all privacy-related matters. This does not affect your rights under the GDPR or UK GDPR, which we are committed to respecting.
For privacy-related inquiries: privacy@boum.it
2. Scope
This Privacy Policy applies to all products and services operated by Boum IT LLC, including but not limited to:
- All Chrome extensions, web applications, SaaS tools, software modules, APIs, automations, and custom integrations developed and distributed by Boum IT LLC
- Future SaaS products and licensed software made available by Boum IT LLC
- AI implementation advisory, consulting, and related professional services
- Consulting, project management, software implementation, development, support, and outsourcing engagements
- The boum.it website and any associated subdomains, landing pages, or client portals
By using any of our products or engaging any of our services, you acknowledge that you have read and understood this policy.
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process personal data only where we have a valid legal basis under Article 6 of the GDPR:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and license management | Performance of a contract (Art. 6.1.b) |
| Payment processing and invoicing | Performance of a contract + Legal obligation (Art. 6.1.b, 6.1.c) |
| Delivering consulting and professional services | Performance of a contract (Art. 6.1.b) |
| Sending product updates and service communications | Legitimate interest (Art. 6.1.f) |
| Security monitoring and fraud prevention | Legitimate interest (Art. 6.1.f) |
| Legal compliance and record keeping | Legal obligation (Art. 6.1.c) |
| Analytics and product improvement | Legitimate interest (Art. 6.1.f) |
| Marketing communications (where applicable) | Consent (Art. 6.1.a) |
Where we rely on legitimate interest, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interest at any time by contacting privacy@boum.it.
4. Information We Collect
The specific data we collect depends on the product or service you use.
4.1 Software Products and Extensions
When you use our software products (including Chrome extensions and SaaS tools), we may collect:
- Account data: Name, email address, and authentication credentials (via Google Sign-In or direct registration)
- License and subscription data: Subscription plan, billing status, and usage tier
- Usage metadata: Feature usage patterns, session counts, and error logs — used solely for product improvement and support
- Technical data: Browser version, operating system, and extension version — collected only for compatibility and support purposes
What we do not collect via our browser extensions:
- Message content of any kind (WhatsApp messages, Odoo records, emails)
- Odoo data, CRM records, or contact details from your Odoo instance
- WhatsApp conversation content
- Credentials or passwords of any third-party platform
All sync data, mappings, templates, and local preferences are stored locally in your browser using Chrome's built-in storage (chrome.storage) and never transmitted to our servers.
4.2 Professional Services
When you engage our consulting, implementation, or support services, we may collect:
- Contact information: Name, professional email, phone number, company name, and role
- Project data: Information you share with us in the context of service delivery (business requirements, technical specifications, process documentation)
- Communication records: Emails, meeting notes, and project correspondence
- Billing information: Invoicing details processed by our payment providers
4.3 Website
When you visit boum.it or associated pages, we may collect:
- Analytics data: Pages visited, referral source, session duration — collected in aggregated, anonymized form
- Contact form submissions: Name, email, and message content when you contact us voluntarily
- Cookie data: See Section 8 below
5. How We Use Your Data
We use the data we collect exclusively for the following purposes:
- Providing, maintaining, and improving our products and services
- Managing your account, license, and subscription
- Processing payments and issuing invoices
- Delivering consulting, implementation, and support services
- Communicating with you about your account, orders, or service engagements
- Sending product updates, release notes, and service communications
- Ensuring security, detecting fraud, and preventing abuse
- Complying with legal obligations
- Improving our products based on aggregated, anonymized usage analytics
We do not sell your personal data. We do not use your data for advertising purposes. We do not share your data with third parties except as described in Section 6.
6. Data Sharing and Third Parties
We share personal data only in the following circumstances:
6.1 Service Providers (Sub-processors)
We use the following third-party services to operate our products:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription management | USA |
| Supabase | Database and authentication infrastructure | USA / EU |
| Cloudflare | API gateway, CDN, and security | USA / Global |
| Google (OAuth) | Authentication (email and name only) | USA / Global |
All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service.
6.2 Legal Requirements
We may disclose personal data if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of users.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the acquiring entity. We will notify affected users prior to any such transfer.
We do not share personal data with any other third parties without your explicit prior consent.
7. Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
7.1 Rights under GDPR (EU/EEA/UK users)
- Right of access (Art. 15): Request a copy of the personal data we hold about you
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
- Right to restriction (Art. 18): Request that we limit processing of your data in certain circumstances
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to object (Art. 21): Object to processing based on legitimate interest or for direct marketing purposes
- Right to withdraw consent (Art. 7.3): Withdraw consent at any time where processing is based on consent
- Right to lodge a complaint: File a complaint with your national data protection authority
7.2 Rights under applicable US state laws
Users in certain US states (including California under CCPA/CPRA) may have additional rights, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information).
7.3 Exercising Your Rights
To exercise any of the above rights, contact us at privacy@boum.it. We will respond within 30 days. For EEA users, we will respond within the timeframes required by the GDPR (typically within one calendar month, with a possible extension of two additional months for complex requests).
We may ask you to verify your identity before processing your request.
8. Cookies
Our website may use cookies and similar tracking technologies for the following purposes:
- Strictly necessary cookies: Required for the website to function (session management, security tokens)
- Analytics cookies: Used to understand how visitors use our website (aggregated and anonymized data only)
- Preference cookies: Used to remember your settings and preferences
We do not use advertising or tracking cookies. You can control cookie settings through your browser or through our cookie consent manager where applicable. Disabling cookies may affect certain website functionality.
9. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Account and license data | Duration of the contract + 3 years |
| Payment and invoicing records | 7 years (legal obligation) |
| Consulting project data | Duration of engagement + 5 years |
| Support and communication records | 3 years from last interaction |
| Usage analytics (anonymized) | Up to 24 months |
| Website contact form submissions | 12 months |
After the applicable retention period, data is securely deleted or anonymized.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
- Encryption of data in transit (TLS/HTTPS) and at rest where applicable
- Access controls and role-based permissions for internal team members
- Use of reputable, security-certified infrastructure providers
- Regular review of our security practices
No method of data transmission or storage is 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities as required by applicable law.
11. Third-Party Platforms and Integrations
Our products are designed to integrate with third-party platforms such as Odoo, WhatsApp, and Google Workspace. Boum IT LLC is independent of and not affiliated with these platforms. Their respective terms of service and privacy policies govern your use of their services. We are not responsible for the privacy practices of third-party platforms.
Legal Notice: WhatsApp™ is a trademark of WhatsApp LLC. Odoo is a trademark of Odoo S.A. Boum IT LLC and its products have no affiliation with WhatsApp LLC, Meta Inc., or Odoo S.A.
12. Children's Privacy
Our products and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, contact privacy@boum.it and we will promptly delete it.
13. International Data Transfers
Boum IT LLC is incorporated in Wyoming, United States. Our infrastructure may store and process data in the United States or other countries. If you are located in the EEA, the United Kingdom, or another jurisdiction with data transfer restrictions, be aware that data may be transferred to countries that do not provide the same level of data protection as your home jurisdiction.
Where required by law, we rely on appropriate safeguards for such transfers, including Standard Contractual Clauses (SCCs) adopted by the European Commission.
14. Limitation of Liability
To the maximum extent permitted by applicable law, Boum IT LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of our products or services, including any loss of data, revenue, or business opportunities. Our total liability for any claim arising under this policy shall not exceed the amount paid by you to Boum IT LLC in the twelve months preceding the claim.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website or within the relevant product. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our products or services after any changes constitutes acceptance of the updated policy.
16. Contact
Boum IT LLC 30 N Gould St Ste R, Sheridan, Wyoming 82801 United States
📧 privacy@boum.it 🌐 www.boum.it
For GDPR-related requests, please include "GDPR Request" in the subject line of your email. We will respond within the legally required timeframe.