Privacy Policy

1. Scope

This Privacy Policy applies to bossete.com and Bossete applications that process personal data, including—where enabled—bank account connection via third-party providers such as Plaid and payment processing via providers such as Stripe.

The public homepage is deliberately sparse: it does not set marketing cookies or run advertising trackers.

2. What we collect

• Site telemetry (minimal) — standard server and hosting logs (IP, user-agent, path, timestamps) needed to operate and secure the site.
• Contact you send us — email content you voluntarily send to security or legal addresses.
• Payments — payment processors handle card data; we receive payment status and amounts needed to deliver the service, not full card PAN storage on our systems when using hosted checkout.
• Banking connection data (when you use Link) — account identifiers, balances, and transactions returned by the bank-data provider under your authorisation. We do not receive your online banking password through Plaid Link when you complete Link as designed.

3. Consent

Yes — we obtain consent for collection, processing, and storage of personal data in scopes that require it.

• Plaid Link / bank data — you explicitly start the connection, select your institution, and complete the provider’s authorisation experience. That action is your consent to retrieve the data classes the Link product discloses for the selected products.
• Payments — submitting a payment form constitutes consent to process the transaction through the payment processor.
• Marketing cookies — the public landing does not deploy third-party advertising trackers; if that changes, we will update this policy and use an appropriate consent mechanism where required by law.

4. How we use data

• Operate and secure Bossete services;
• Provide features you request (including bank-data features you enable);
• Process payments you initiate;
• Investigate abuse, fraud, or security incidents;
• Meet legal obligations.

We do not sell personal data.

5. Sharing

We share personal data only with:

• Processors necessary to run the product (hosting, CDN, payments, bank data aggregation such as Plaid, email delivery if enabled);
• Authorities when required by law;
• Professional advisors under confidentiality when required for compliance or dispute resolution.

6. Cookies

The public homepage states that it sets no cookies and runs no trackers. Authenticated applications may use cookies or similar storage for session security. Essential cookies are not used for advertising.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, and to object or port data. To exercise rights, email legal@bossete.com. See also our Data Retention & Deletion policy.

8. Contact

Privacy requests: legal@bossete.com
Security incidents: security@bossete.com
Controller: Bossete — Harumi Miyagi, Principal Operator.