Privacy Policy
About Us
Boumit LLC is a Wyoming limited liability company registered at 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States (EIN: 32-0853948).
We design, develop, and distribute software products and tools, including the Odoo WhatsApp Bridge Chrome extension and associated SaaS infrastructure. We also provide professional services including management consulting, ERP implementation, software development, AI advisory, technical support, and operational outsourcing.
This Privacy Policy covers all activities of Boumit LLC, including both our software products (accessible via bridge.boum.it and associated subdomains) and our professional services (accessible via boum.it).
Scope
This Privacy Policy applies to all products and services operated by Boumit LLC, including:
- The Odoo WhatsApp Bridge Chrome extension and associated cloud infrastructure (bridge.boum.it)
- Future SaaS products and licensed software developed by Boumit LLC
- Professional services: consulting, ERP implementation, software development, AI advisory, technical support, and outsourcing
- The boum.it website and all associated subdomains and client portals
By using any of our products or engaging any of our services, you acknowledge that you have read and understood this policy.
Legal Basis for Processing (GDPR)
For users in the EEA, UK, and Switzerland, we process personal data only where we have a valid legal basis under Article 6 of the GDPR:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and license management | Performance of a contract (Art. 6.1.b) |
| Payment processing and invoicing | Contract + Legal obligation (6.1.b, 6.1.c) |
| Delivering consulting and professional services | Performance of a contract (Art. 6.1.b) |
| Sending product updates and service communications | Legitimate interest (Art. 6.1.f) |
| Security monitoring and fraud prevention | Legitimate interest (Art. 6.1.f) |
| Legal compliance and record keeping | Legal obligation (Art. 6.1.c) |
| Analytics and product improvement | Legitimate interest (Art. 6.1.f) |
| Marketing communications | Consent (Art. 6.1.a) |
Where we rely on legitimate interest, we have assessed that our interests are not overridden by your rights and freedoms. You may object at any time by contacting privacy@boum.it.
Information We Collect
4.1 Software Products, including the WA Bridge Chrome extension
When you use our software products (including the Odoo–WhatsApp Bridge Chrome extension, also called “WA Bridge” or the “boum.it extension”, available at bridge.boum.it), we may collect:
- Account data: name, email address, and profile photo (via Google Sign-In), or credentials used for direct registration
- Connection data: the address and name of the Odoo database(s) you connect the product to
- Usage counters: for example, the number of messages sent or saved per day (a count, never the messages themselves), used for free-trial limits, plan limits, and support
- License and subscription data: plan, billing status, usage tier, and Stripe customer and subscription identifiers (card details are handled by Stripe only and never reach Boumit LLC)
- Usage metadata: feature usage patterns, session counts, error logs — used solely for product improvement and support
- Technical data: browser version, operating system, extension version — collected only for compatibility and support purposes
For the WA Bridge Chrome extension specifically:
| Data | Where it is stored | Why |
|---|---|---|
| Email address, name and profile photo of your Google account (when you click “Continue with Google”) | Supabase (EU, Paris) | Identify your account and your subscription |
| Address and name of the Odoo database(s) you use | Supabase (EU, Paris) | Usage statistics, support |
| Number of messages sent and saved per day (a counter, not the messages) | Supabase (EU, Paris) | Free trial, plan limits, usage statistics |
| Stripe customer and subscription identifiers | Supabase and Stripe | Billing |
| Payment details (card) | Stripe only — never seen by Boumit LLC | Payment |
| Phone numbers you enter for a record, links between chats and Odoo records, known Odoo databases | Your browser's storage (Chrome, synced with your Google account) | Make the extension work |
4.2 Google User Data
When you sign in with Google ("Continue with Google"), we receive only your basic profile: email address, name, and profile photo. We use this information solely to create and identify your account and to link it to your subscription. We do not access your Gmail, Google Drive, contacts, or any other Google data.
Boumit LLC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not transfer it to third parties except to the service providers listed in Section 6 as necessary to operate the product.
4.3 Professional Services, Support and Maintenance
When you engage our consulting, implementation, support, or maintenance services, we may collect:
- Contact information: name, professional email, phone number, company name, and role
- Project data: business requirements, technical specifications, and process documentation shared in the context of service delivery
- Communication records: emails, meeting notes, and project correspondence
- Billing information: invoicing details processed by our payment providers
- System access data: where you grant us access to your systems (for example, an Odoo instance) to deliver support or maintenance, we process the data those systems contain only as needed to deliver the service, as a processor under the Data Processing Agreement
4.4 Website
When you visit boum.it, bridge.boum.it, or associated pages:
- Analytics data: pages visited, referral source, session duration — collected in aggregated, anonymized form
- Contact form submissions: name, email, and message content when you contact us voluntarily
- Cookie data: see Section 8
How We Use Your Data
We use the data we collect exclusively for the following purposes:
- Providing, maintaining, and improving our products and services
- Managing your account, license, and subscription
- Processing payments and issuing invoices
- Delivering consulting, implementation, and support services
- Communicating with you about your account or service engagements
- Sending product updates, release notes, and service communications
- Ensuring security, detecting fraud, and preventing abuse
- Complying with legal obligations
- Improving our products based on aggregated, anonymized analytics
We do not sell your personal data. We do not use your data for advertising purposes. We do not share your data with third parties except as described in Section 6.
Data Sharing and Third Parties
6.1 Service Providers
We use the following third-party services to operate our products and services:
| Provider | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing and subscription management | USA |
| Supabase | Database and authentication infrastructure | EU (Paris) |
| Cloudflare, Inc. | API gateway, CDN, and security | USA / Global |
| Google LLC | Authentication (OAuth), productivity | USA / Global |
| Notion Labs, Inc. | Project management and documentation | USA |
| Odoo S.A. | ERP platform (where used in delivery) | Belgium / USA |
All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service.
6.2 Legal Requirements
We may disclose personal data if required by law, court order, or governmental authority, or when necessary to protect our rights, prevent fraud, or ensure user safety.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of our business, personal data may be transferred to the acquiring entity. We will notify affected users prior to any such transfer.
We do not share personal data with any other third parties without your explicit prior consent.
Your Rights
7.1 Rights under GDPR (EU / EEA / UK users)
- Right of access (Art. 15): request a copy of data we hold about you
- Right to rectification (Art. 16): request correction of inaccurate data
- Right to erasure (Art. 17): request deletion of your personal data
- Right to restriction (Art. 18): request limited processing in certain circumstances
- Right to data portability (Art. 20): receive your data in a structured, machine-readable format
- Right to object (Art. 21): object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent (Art. 7.3): withdraw consent at any time where processing is consent-based
- Right to lodge a complaint: file a complaint with your national data protection authority
7.2 Rights under US State Laws
Users in certain US states (including California under CCPA/CPRA) may have additional rights, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.
7.3 Exercising Your Rights
Contact us at privacy@boum.it. We will respond within 30 days. For EEA users, we will respond within the timeframes required by the GDPR (one calendar month, with possible extension of two additional months for complex requests). We may ask you to verify your identity.
Cookies
Our websites may use cookies and similar technologies for:
- Strictly necessary cookies: required for the website to function (session management, security tokens)
- Analytics cookies: aggregated and anonymized data to understand how visitors use our website
- Preference cookies: to remember your settings and preferences
We do not use advertising or tracking cookies. You can control cookie settings through your browser or our cookie consent manager where applicable. Disabling cookies may affect certain website functionality.
Data Retention
We retain personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Account and license data | Duration of contract + 3 years |
| Payment and invoicing records | 7 years (legal obligation) |
| Consulting project data | Duration of engagement + 5 years |
| Support and communication records | 3 years from last interaction |
| Usage analytics (anonymized) | Up to 24 months |
| Website contact form submissions | 12 months |
After the applicable retention period, data is securely deleted or anonymized.
Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- Encryption in transit (TLS/HTTPS) and at rest where applicable
- Access controls and role-based permissions
- Authentication via cryptographically signed tokens
- No storage of passwords or payment credentials on our servers
- Use of reputable, security-certified infrastructure providers
No method of transmission or storage is 100% secure. In the event of a personal data breach posing a risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities as required by applicable law.
Third-Party Platforms and Integrations
Our products integrate with third-party platforms including Odoo, WhatsApp, and Google Workspace. Boumit LLC is independent of and not affiliated with these platforms. Their terms of service and privacy policies govern your use of their services. We are not responsible for the privacy practices of third-party platforms.
Legal Notice: WhatsApp™ is a trademark of WhatsApp LLC. Odoo is a trademark of Odoo S.A. Boumit LLC has no affiliation with WhatsApp LLC, Meta Inc., or Odoo S.A.
Children's Privacy
Our products and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, contact privacy@boum.it and we will promptly delete it.
International Data Transfers
Boumit LLC is incorporated in Wyoming, United States. Our infrastructure may store and process data in the United States or other countries. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, data may be transferred to countries that do not provide the same level of protection as your home jurisdiction.
Where required by law, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) adopted by the European Commission.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website or within the relevant product. The "Last updated" date reflects the most recent revision. Continued use of our products or services after changes constitutes acceptance of the updated policy.
Contact
For any questions regarding this Privacy Policy or to exercise your rights:
Boumit LLC
30 N Gould St Ste R
Sheridan, Wyoming 82801
United States
Email: privacy@boum.it
Website: www.boum.it
EIN: 32-0853948
For GDPR-related requests, include "GDPR Request" in the subject line.