Privacy Policy

BOUM IT LLC 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States Email : privacy@boum.it Website : www.boum.it
Last updated: April 13, 2026

1. About Us

Boum It LLC is a Wyoming limited liability company registered at 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States ("Company", "we", "us", "our").We design, develop, and distribute software products, tools, extensions, modules, SaaS applications, and custom technical solutions. We also provide professional services including management consulting, project management, software implementation and development, technical support, AI consulting and implementation advisory, and offshoring of support and operational services.

Note regarding EU/EEA users: BOUM IT LLC does not have a designated representative in the European Union or the United Kingdom. European users may contact us directly at privacy@boum.it for all privacy-related matters. This does not affect your rights under the GDPR or UK GDPR, which we are committed to respecting.

2. Scope

This Privacy Policy applies to all products and services operated by Boum It LLC, including:

• All Chrome extensions, web applications, SaaS tools, software modules, APIs, automations, and custom integrations developed and distributed by Boum It LLC
• Future SaaS products and licensed software made available by Boum It LLC
• AI implementation advisory, consulting, and related professional services
• Consulting, project management, implementation, development, support, and outsourcing engagements
• The boum.it website and any associated subdomains, landing pages, or client portals

By using any of our products or engaging any of our services, you acknowledge that you have read and understood this policy.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process personal data only where we have a valid legal basis under Article 6 of the GDPR:

Where we rely on legitimate interest, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interest at any time by contacting privacy@boum.it.

4. Information We Collect

4.1 Information You Provide Directly

• Full name, email address, phone number, company name, job title, and professional contact details
• Billing address and company registration information including VAT numbers where applicable
• Account credentials managed via third-party authentication providers — we do not store passwords
• Payment and billing information processed exclusively by third-party processors — we never store card numbers or banking details
• Project requirements, business specifications, technical documentation, and materials shared during service engagements
• Communications including emails, messages, meeting notes, and support requests
• Any other information you voluntarily provide in the context of a service or product relationship

4.2 Information Collected Automatically

• Usage data and interaction logs (features used, actions performed, frequency)
• Technical identifiers including authentication tokens, session identifiers, device type, and browser information
• Hostname or instance identifiers associated with third-party platforms you connect to our tools (e.g. your ERP or CRM domain)
• Aggregated usage counters for license enforcement and product analytics
• Standard server and access logs including IP address, timestamp, and pages visited

4.3 Information from Third-Party Authentication

When you authenticate via Google or other OAuth providers, we receive only the basic profile information you authorize — typically name and email. We do not receive access to your emails, files, contacts, calendar, or any other data beyond what is explicitly authorized.

4.4 Data Processed on Your Behalf

Certain products process data belonging to you or your end users — such as messages, records, or content from third-party platforms — solely to perform the requested function. Unless explicitly stated in the documentation for a specific product, this data is processed locally on your device or in transit and is not stored, read, or retained by Boum It LLC.

4.5 Professional Services Engagement Data

In the context of consulting, implementation, development, or support engagements, we may collect and process business data, technical data, and operational data belonging to you or your organization. Such data is processed exclusively to fulfill the contracted scope of work, subject to any confidentiality or Data Processing Agreement (DPA) in place.

4.6 AI Services

When you engage Boum It LLC for AI implementation advisory or consulting services, we may process information you share about your business processes, data infrastructure, and use cases in order to provide recommendations. We do not use your data to train AI models. Where our advisory services involve the use of third-party AI tools or platforms (e.g. OpenAI, Anthropic, or others), we will inform you of the relevant sub-processors involved.

5. How We Use Your Information

We use collected information to:

• Provide, operate, maintain, and improve our products and services
• Create and manage accounts, licenses, and subscriptions
• Process payments, manage invoicing, and enforce license terms
• Deliver consulting, implementation, development, and support services
• Manage project delivery, timelines, and client communications
• Send security notices, product updates, and administrative messages
• Analyze aggregated usage to improve our products (no individual behavioral profiling or automated decision-making affecting your rights)
• Comply with applicable legal and regulatory obligations
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Establish, exercise, or defend legal claims

We do not use your data for advertising, do not build profiles for resale, and do not sell your personal data under any circumstances.

6. Data Sharing

We do not sell personal data. We share data only in the following circumstances:

Service providers and sub-processors acting on our behalf under appropriate contractual obligations:

• Payment processors (Stripe, Inc. — United States)
• Cloud infrastructure and database providers (Cloudflare, Inc. — United States; Supabase — United States)
• Authentication providers (Google LLC — United States)
• Communication tools used in service delivery

Subcontractors — In the context of offshoring or outsourcing engagements, data may be shared with vetted subcontractors or team members operating under confidentiality obligations consistent with this policy.

Business transfers — In the event of a merger, acquisition, or asset sale, your data may transfer as part of that transaction. We will provide advance notice and describe any material policy changes.

Legal requirements — We may disclose data when required by applicable law, court order, or regulatory authority, or to protect the rights, property, or safety of Boum It LLC, our clients, or the public.

With your explicit consent — We may share data with third parties when you have expressly authorized us to do so.

Automated decision-making: We do not make decisions that produce significant legal or similarly significant effects on individuals through solely automated means. If this changes in future products, we will update this policy and provide appropriate notice.

7. International Data Transfers

Boum It LLC is based in the United States. Our infrastructure and sub-processors may store and process data in the United States or other countries outside the EEA.

For users in the European Economic Area, the United Kingdom, or Switzerland, we acknowledge that the United States does not provide an adequacy decision equivalent to the GDPR. Where required, we rely on the European Commission Standard Contractual Clauses (SCCs) or other appropriate safeguards to legitimize these transfers. You may request information about the transfer mechanisms applicable to your data by contacting privacy@boum.it.

No EU representative: Boum It LLC does not currently have a designated representative within the European Union as defined under Article 27 of the GDPR. You may contact us directly at privacy@boum.it for any GDPR-related requests.

8. Data Retention

We retain data only as long as necessary for the purposes described in this policy or as required by law:

Upon verified request, we will delete or anonymize your personal data, subject to overriding legal retention obligations.

9. Your Rights

For all users:

• Access — request a copy of the data we hold about you

• Correction — request correction of inaccurate or incomplete data

• Deletion — request erasure of your data

• Portability — receive your data in a structured, machine-readable format

• Withdraw consent — where processing is based on consent, withdraw it at any time

Additional rights for EEA / UK users (GDPR / UK GDPR):

• Right to object — object to processing based on legitimate interest or for direct marketing purposes

• Right to restriction — request that we temporarily limit processing in specific circumstances

• Right not to be subject to automated decision-making — we do not conduct such processing (see Section 5)

• Right to lodge a complaint with your national supervisory authority:

  • France: Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr

  • Belgium: Autorité de Protection des Données (APD) — www.autoriteprotectiondonnees.be

  • Other EU member states: Your local Data Protection Authority (DPA)

  • United Kingdom: Information Commissioner's Office (ICO) — www.ico.org.uk

To exercise any of your rights, contact us at privacy@boum.it. We will acknowledge your request within 5 business days and respond fully within 30 days (extendable by 2 additional months for complex requests, with notice). We may request proof of identity before processing your request.

10. Security

We implement appropriate technical and organizational security measures including:

• HTTPS/TLS encryption for all data in transit
• Token-based authentication with cryptographic signing (HMAC-SHA256)
• Row-level access controls on our databases
• No storage of passwords, card numbers, or unencrypted sensitive credentials
• Restricted access to production systems on a need-to-know basis
• Regular review of access controls and security practices

In the event of a personal data breach posing a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours where required by the GDPR, and notify affected individuals without undue delay where the breach is likely to result in high risk.

11. Cookies and Tracking

Our website may use cookies and similar technologies for functional purposes (session management, authentication) and analytics. Where required by applicable law (ePrivacy Directive, RGPD/GDPR), we will request your consent before placing non-essential cookies.

A cookie management interface will be provided on the website. You may withdraw consent at any time by adjusting your browser settings or using the cookie preference center.

12. Third-Party Platforms

Our products integrate with third-party platforms including Odoo, WhatsApp, Google Workspace, and others. Boum It LLC is independent of and not affiliated with these platforms. Their respective terms and privacy policies govern your use of their services. We are not responsible for their data practices.

13. Children's Privacy

Our products and services are directed exclusively at business professionals and are not intended for individuals under 16 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, contact privacy@boum.it and we will promptly delete such data.

14. Limitation of Liability

To the fullest extent permitted by applicable law, Boum It LLC and its members, managers, employees, contractors, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to the use of our products or services, including loss of data, revenue, or business opportunities.

Our total aggregate liability for any claim arising under this Privacy Policy shall not exceed the greater of (a) the total amount paid by you to Boum It LLC in the twelve (12) months preceding the claim, or (b) USD $100.

Nothing in this section limits liability that cannot be excluded under applicable mandatory law, including consumer protection laws applicable in France (Code de la consommation) or Belgium (Code de droit économique).

15. Governing Law and Dispute Resolution

This Privacy Policy is governed by the laws of the State of Wyoming, United States, without regard to conflict of law provisions. Any dispute shall be subject to the exclusive jurisdiction of the courts of Sheridan County, Wyoming, or resolved through binding arbitration at the election of Boum It LLC.

For EU/EEA users: Nothing in this section prevents you from exercising your rights before your local supervisory authority or courts as provided under the GDPR and applicable national law. Mandatory consumer protection provisions of your country of residence remain unaffected.

16. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by posting a prominent notice on our website or within the relevant product. Continued use of our products or services following notice constitutes acceptance of the updated policy.

17. Contact

BOUM IT LLC 30 N Gould St Ste R Sheridan, Wyoming 82801 United States

Email: privacy@boum.it Website: www.boum.it

EIN: pending — will be updated upon issuance.