Privacy Policy

1. Data we may collect

We may collect:

• contact information provided by users, such as name, email address, company, and message content;
• technical website data such as IP address, browser information, device information, and basic usage logs;
• workspace and operational metadata required to operate BOSAI workflows;
• approval, readback, and audit evidence generated by governed workflows;
• LinkedIn organization page, post, comment, activity, and related metadata only when explicitly authorized by the customer and required for the enabled BOSAI Social Operator workflow.

2. How we use data

We use data to:

• operate and improve BOSAI services;
• provide governed workflow execution;
• perform preflight checks, human approval capture, readback, and audit logging;
• maintain operational security;
• respond to customer requests;
• comply with legal, contractual, and platform obligations.

3. LinkedIn API data

When BOSAI uses LinkedIn APIs, the data is used only for the authorized workflow and authorized LinkedIn organization page or account.

BOSAI does not use LinkedIn API data for spam, scraping, unauthorized outreach, automated invitations, mass engagement, or hidden profiling.

BOSAI does not use personal data obtained through LinkedIn Community Management APIs for advertising or sales targeting.

Every real LinkedIn action must be scoped, reviewed, explicitly approved by a human operator, executed once, read back, and logged.

4. Legal bases

Depending on the context, processing may be based on:

• contract or pre-contractual steps;
• legitimate interest in operating and securing the service;
• user consent where required;
• legal obligations.

5. Data sharing

We do not sell personal data.

We may use service providers for hosting, infrastructure, analytics, email, audit storage, and operational databases. These providers are used only where necessary to operate BOSAI.

6. Data retention

We keep data only as long as necessary for the relevant purpose, including service operation, auditability, legal obligations, and customer workspace retention policies.

Audit evidence is retained according to the customer’s governance and retention requirements, unless deletion is required by law, contract, or platform policy.

7. Data deletion

BOSAI can delete data obtained through LinkedIn APIs when required by LinkedIn, the customer, or applicable law.

Deletion may include operational records, cached API data, audit evidence, and workspace-level stored data, subject to legal and audit retention constraints.

8. Security

BOSAI applies data minimization and operational security principles.

Secrets, tokens, API keys, and credentials are not stored in public registers or client-facing proof files.

9. User rights

Depending on applicable law, users may request access, correction, deletion, restriction, portability, or objection to processing of their personal data.

10. Contact

For privacy requests, contact:

contact@syncguard.fr

11. Changes

We may update this Privacy Policy from time to time. The latest version will be available on this page.