Privacy Policy

Introduction

Boven (“we”, “us”, or “our”) operates boven.ai and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your data. By using our service you agree to the practices described here.

Information We Collect

• Email address. Collected when you create an account or sign in. Used to identify your account and communicate with you about your subscription and service updates.
• Audit data. URLs, domain names, and related metadata you submit when running GEO and SEO audits. This data is stored to display your results and audit history within your account.
• Payment information. Billing is handled entirely by Stripe. We do not store your card number or full payment details on our servers. We receive a customer ID and subscription status from Stripe to manage your plan.
• Usage data. Anonymised data such as pages visited, features used, and errors encountered, collected to improve the product. This may include IP address, browser type, and timestamps.

How We Use Your Information

We use the information we collect to provide and improve our service, process transactions, send transactional and account-related emails, respond to support requests, and comply with legal obligations. We do not sell your personal data to third parties.

Data Storage

Your data is stored in Supabase with servers located in the European Union (eu-west region). We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

Your GDPR Rights

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Access. Request a copy of the personal data we hold about you.
• Rectification. Ask us to correct inaccurate or incomplete data.
• Erasure. Request deletion of your personal data.
• Portability. Receive your data in a structured, machine-readable format.
• Objection. Object to processing based on legitimate interests.
• Restriction. Ask us to restrict processing in certain circumstances.

To exercise any of these rights, contact us at privacy@boven.ai.

Third-Party Services

We use the following third-party services that may process your data:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing and subscription management.
• Vercel — application hosting and edge delivery.
• Anthropic — AI model inference used to generate audit insights. Audit content may be sent to Anthropic’s API.

Each of these providers has its own privacy policy and data processing agreements. We only share the data with them that is necessary to deliver the service.

Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may prevent you from signing in or using parts of the service.

Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@boven.ai.