Privacy Policy
This privacy policy explains how Bosqio handles personal data when you visit bosqio.com, read our content, or request access to the Bosqio pilot.
This notice covers the public marketing website and access-request form. The Bosqio app, customer workspaces, and data processing agreements may use separate privacy notices for product data.
Controller and contact
The controller for this website is Bosqio. For privacy questions or requests, contact us at contact@bosqio.com.
If you contact us, we use your message and contact details to answer your request and keep the necessary record of the exchange.
Data we process
When you visit the website, our hosting and security systems may process technical data such as IP address, request time, requested page, referrer, browser or device information, and error or security logs.
When you request access, we process the details you submit: name, email address, role, country, commodity, optional message, and the reference code generated for the request.
Purposes and legal bases
We process technical website data to deliver the site, keep it secure, diagnose errors, and prevent misuse. The legal basis is our legitimate interest in operating a secure public website under GDPR Art. 6(1)(f).
We process access-request data to respond to your request, evaluate pilot fit, and send service emails about the request. The legal basis is pre-contractual steps under GDPR Art. 6(1)(b) or, where applicable, our legitimate interest in managing pilot requests under GDPR Art. 6(1)(f).
Where we must keep records to meet legal obligations, the legal basis is GDPR Art. 6(1)(c).
Cookies and analytics
The public website does not currently use advertising cookies, third-party marketing trackers, or profiling analytics.
If we introduce optional analytics or tracking later, we will update this policy and request consent where required.
Service providers and recipients
We use service providers to host and deliver the website, protect it from abuse, and send or receive access-request emails. The access-request flow currently uses Resend for email delivery.
We share personal data only with providers who need it to perform these services, with the Bosqio team members who handle your request, or where disclosure is legally required. We do not sell personal data.
International transfers
We aim to use EU or EEA infrastructure for operational data where practical. Some service providers may process data outside the EU or EEA.
Where a transfer outside the EU or EEA is required, we rely on an adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses where required.
Retention
Technical logs are kept only for as long as needed for security, diagnostics, and operational purposes, unless a longer period is required to investigate misuse or comply with law.
Access-request data is kept while we process your request and for the period needed to manage pilot discussions, document the exchange, or meet legal obligations. When it is no longer needed, we delete or anonymize it.
Your rights
Depending on the situation, you may have the right to request access, rectification, deletion, restriction of processing, data portability, or objection to processing.
Where processing is based on consent, you may withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority.
Automated decisions
The public website does not use automated decision-making or profiling that produces legal or similarly significant effects.
Security
We use technical and organizational measures intended to protect personal data, including encrypted transport, access controls, data minimization, and operational monitoring.
No internet service can be guaranteed completely secure, but we design the website and request flow to limit the data collected and reduce exposure.
Updates
We may update this policy when the website, service providers, or legal requirements change. The latest version is published on this page with the update date above.