Who we are

Bosun is operated from Amritsar, Punjab, India. For anything in this policy, including a request to see or delete what we hold about you, write to hello@bosun.pro and a person will read it.

There are two quite different things this policy has to cover: this website, which collects a little, and the software we sell, which we do not have access to at all. They are dealt with separately below because conflating them is how privacy policies become misleading.

What this website collects

Only what you type into a form, plus the ordinary technical information any web server records.

  • Form submissions. Your name, email address, phone number if you give one, your business name and whatever you write in the message. Sent to our email inbox so we can reply.
  • Server logs. Your IP address, browser and the pages requested, recorded by the web server as standard. Used to diagnose faults and nothing else.
  • Nothing else. There is no account to create, no newsletter to subscribe to, no advertising pixel and no profile built about you.

Why we have it and how long we keep it

We use your enquiry to answer your enquiry. That is the whole purpose - the lawful basis is our legitimate interest in replying to somebody who asked us a question, or the steps taken before entering a contract if you are buying.

  • Enquiries that do not become customers: kept up to 24 months, then deleted
  • Customers: kept for as long as we support your installation, plus whatever tax law requires of the invoice
  • Server logs: kept for up to 90 days
  • We never sell, rent or share your details with anybody for marketing, at any price

Who else sees it

A small number of suppliers, each doing one job. They see what they need for that job and nothing more.

  • Our web host, which stores this website and its logs
  • Our email provider, which delivers and stores the message you sent
  • No analytics provider - this site currently loads no analytics script at all
  • Our payment provider, if you buy, which handles the transaction. We never see or store your card details

The software we sell holds nothing for us

This is the part most buyers are actually asking about. Bosun is installed on a server you control, and all of its data - your jobs, your people, your messages, your procedures - lives in a single database file on that machine.

We have no account on your installation, no login, no copy of your database and no telemetry reporting back to us. In data protection terms we are not a processor for that data, because none of it reaches us. The consequence is worth stating plainly in both directions: nobody at our end can read your business data, and nobody at our end can recover it for you either.

  • Your data stays on the server you chose, in the country you chose
  • Credentials you enter are encrypted before they are stored, with a key only your server holds
  • The product sends us no usage data - there is no analytics in it to switch off
  • One flow does leave your server: message text goes to the AI provider whose key you configured, under your own agreement with them
  • Backups are your responsibility. A script is supplied - see trust & security

If you are assessing this for a regulated setting, the page that answers those questions properly is trust & security, including the certifications we do not hold.

Your rights

You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, ask for a copy, or object to us holding it. Write to hello@bosun.pro and we will act within 30 days - usually the same week, because the amount we hold is small.

If you are in the United Kingdom or the European Economic Area, you also have the right to complain to your national data protection authority. We would rather you told us first so we can fix it, but that route is yours regardless.

Children

This is business software. The site is not directed at anybody under 18 and we do not knowingly collect anything from them.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. There is no mailing list to notify, so the date is the honest signal - if it has not moved, nothing has.