Privacy Policy

1.1 Account information

We may collect basic account information such as:

• Name
• Email address
• App or account identifiers

This information is used solely to provide access to our Services.

1.2 Connected advertising & analytics platform data

When you explicitly connect a third-party advertising or analytics platform to Bobos.ai (see Section 2), we collect, with your consent, the platform identifiers and read-only performance data needed to provide the requested analysis. We never collect your platform password, and we store the access token issued by the platform in encrypted form (see Section 7).

2.1 Meta / Facebook (Ads)

Using the Meta permissions ads_read and business_management, and only after you grant consent on Facebook’s authorization screen, we access:

• The list of ad accounts you can access — including those in a Business Manager you administer — so you can choose which account to connect (business_management, used only to enumerate accounts)
• Ad-account identifiers and settings (account id, name, currency, status)
• Aggregate ad-performance metrics such as spend, impressions, clicks, reach, and conversions (ads_read)

We do not use Meta data for advertising to third parties, we do not sell or transfer it, and we do not use it to train AI or machine-learning models.

2.2 Google (Analytics, Ads, Search Console) and LinkedIn (Ads)

With your consent we may similarly read analytics and advertising performance data from Google Analytics 4, Google Ads, Google Search Console, and LinkedIn Ads, using read-only scopes, solely to analyze performance and prepare recommendations for you.

3.1 Gmail data we access

With your explicit consent, we may access:

• Email message content
• Email headers (sender, recipient, subject, timestamps)
• Thread identifiers
• Inbox replies related to messages sent through the app

We do not access Gmail data beyond what is required to operate the app’s email features.

3.2 Why we access Gmail data (feature-specific)

Gmail data is accessed only to provide the following user-initiated features:

• Sending emails on your behalf
• Displaying sent messages and replies inside the app
• Allowing you to read inbox replies related to messages you sent
• Allowing you to reply to emails directly from within the app
• Managing email conversations associated with your account

We do not use Gmail data for advertising, profiling, or analytics.

5.1 Storage

• Connected-platform access tokens are stored encrypted at rest; connected-platform performance data may be cached on our secure servers solely to provide the Services
• Gmail data may be temporarily stored on our secure servers solely to enable app functionality
• Stored data belongs entirely to the user

5.2 Retention

• When you disconnect a platform or request deletion, we delete the stored access token and cached platform data within 30 days (see Section 6)
• Data that is not actively used will be deleted after 12 months
• We reserve the right to delete any stored data at any time to maintain system integrity or comply with legal obligations

6.1 Connected advertising & analytics platforms

To delete the data associated with a connected platform (including Meta/Facebook), use any of the following:

• Disconnect in Bobos.ai — remove the connection from your Bobos.ai connection hub, which deletes the stored access token and cached data
• Revoke at the provider— for Meta/Facebook: Settings & Privacy → Settings → Business Integrations → remove Bobos.ai; for Google: Google Account → Security → Third-party access
• Email us — send a request to nate@bobos.ai with the subject “Data Deletion Request”

Following any of these, we permanently delete the stored access token and cached platform data within 30 days.

6.2 Gmail

• You may delete your email data at any time from within the app
• You may revoke Gmail access at any time via your Google Account permissions
• Upon revocation, Gmail data is no longer accessed and stored data is deleted within a reasonable timeframe

9.1 Categories of personal information we collect

In the last 12 months we have collected the following categories of personal information, for the business purposes of providing and improving the Services, account administration, security, and communicating with you:

• Identifiers — name, email address, account identifiers
• Commercial information — services purchased or considered, billing records
• Professional or business information — company details you share with us so we can perform marketing services
• Internet or other electronic network activity — how you interact with our website, collected through analytics and advertising cookies when you have not opted out (see 9.2)

We do not collect sensitive personal information as defined by the CPRA, and we retain each category only as long as described in Section 5.

9.2 “Sale” and “sharing” — your right to opt out

We do not sell personal information for money. We use Google Analytics, Google Ads conversion measurement, and the LinkedIn Insight Tag (loaded via Google Tag Manager) to understand site usage and measure our advertising; the CCPA/CPRA may treat this kind of analytics/advertising cookie use as “sharing” or a “sale.” You can opt out at any time:

• Visit Your Privacy Choices — Do Not Sell or Share My Personal Information (also linked in the footer of every page) and select “Opt out”
• Enable the Global Privacy Control (GPC) signal in your browser — we honor it automatically as a valid opt-out, no other action needed

When you are opted out (by either method), analytics and advertising tags do not load for your browser at all — the tag container itself is never served. Google Analytics 4 does not log or store IP addresses.

9.3 Your other California rights

• Right to know/access — request the categories and specific pieces of personal information we hold about you
• Right to delete — request deletion of your personal information (see also Section 6)
• Right to correct — request correction of inaccurate personal information
• Right to non-discrimination — we will never discriminate against you for exercising any privacy right

To exercise these rights, email nate@bobos.ai with the subject “Privacy Request.” We will verify your request using the email address associated with your data and respond within the statutory window. You may also use an authorized agent to submit a request on your behalf.