Privacy Policy

This Privacy Policy explains how Boundless Nexus Limited ("we", "us") collects, uses, shares and protects information when you use BOB AI at usebobai.com and its related apps, APIs and messaging channels (the "Service").

1. Information we collect

• Account information: name, email address, profile image, workspace and team membership, and sign-in/session records.
• Content you provide: chat messages, uploaded files and recordings, meeting transcripts and notes, settings and approvals.
• Connected services: data you authorise from services you connect, such as BoundlessPay, Google Calendar, Gmail, WhatsApp and calendar links.
• Payments: unit purchase and plan records. Card and wallet details are handled by BoundlessPay; we do not store full payment credentials.
• Technical data: IP address, device and browser information, and security/audit logs.

2. Google user data

If you connect a Google account, BOB AI requests only the permissions needed for the features you enable:

• Google Calendar (read-only): we read event times, titles, organiser and meeting links to detect upcoming Zoom, Google Meet or Teams meetings and, if you enable it, send the BOB note taker to them.
• Gmail: we read, and only when you explicitly approve, send or draft messages so BOB can summarise your inbox and help with replies.
• Basic profile: your email address and name to identify the connected account.

We use Google user data only to provide these user-facing features. We do not sell it, use it for advertising, or use it to train generalised AI models. Humans do not read it except with your consent, for security or abuse investigations, or where required by law. BOB AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use information

• To operate the Service, answer your requests and run features you enable.
• To process payments, grant units and keep accurate records.
• To secure accounts, prevent fraud and maintain audit trails.
• To send service notices such as low-balance alerts and meeting-notes-ready emails.

4. AI processing

Your prompts, files and recordings are sent to AI model providers solely to generate the response or transcript you asked for. They are not used by us to train models.

5. Sharing

We share information only with service providers that help us run the Service (hosting, AI processing, email, payments via BoundlessPay, meeting bots via Recall.ai, messaging and telephony providers), with members of your workspace according to its permissions, or when required by law. We never sell personal data.

6. Security and storage

Data is encrypted in transit. Connection tokens, calendar links and payment credentials are encrypted at rest. Access is tenant-isolated and deny-by-default, and sensitive actions are logged.

7. Retention and deletion

We keep data while your account is active or as needed to provide the Service and meet legal obligations. You can disconnect any connected service at any time in Connections, which stops access and deletes stored tokens. You can also revoke BOB AI's access at myaccount.google.com/permissions. To delete your account and data, contact us below.

8. Your rights

Depending on where you live (including under Nigeria's NDPA and the GDPR), you may request access, correction, deletion or export of your data, or object to certain processing.

9. Children

The Service is not intended for anyone under 18.

10. Changes

We will post updates here and change the "Last updated" date.

11. Contact

Boundless Nexus Limited — privacy@usebobai.com