Privacy Policy

1. Scope

This policy applies to bossa-ventures.com and to the consumer mobile and web applications that Bossa Ventures LLC develops and operates, including Petal: 75 Day Challenge. Each application is distributed under its own brand and may publish an application-specific privacy notice with additional detail. Where an application notice conflicts with this policy, the application notice governs for that application.

2. Data we collect

Data you give us

• Account data: name or display name, email address, password credentials, and the language and country you select.
• Subscription data: plan, billing period, purchase and renewal history. Card details are entered with our payment processors and are never stored on our systems.
• Support data: the content of messages you send us, including attachments.
• Content you create inside an application, where the application offers that feature.

Data collected automatically

• Device and technical data: device model, operating system version, application version, language, time zone, crash reports and diagnostic logs.
• Usage data: screens opened, features used, session length and other in-application events, in aggregated or pseudonymised form.
• Network data: IP address and approximate location derived from it, at country or region level.

Data from third parties

The Apple App Store and Google Play confirm purchases, renewals and refunds to us so that we can grant and revoke access to paid features. Advertising and analytics platforms may report aggregated campaign performance. We do not buy personal data from data brokers.

3. Why we use it

• To provide the applications, create and maintain your account and deliver the features you paid for. Legal basis: performance of a contract.
• To process subscriptions, renewals, refunds and chargebacks. Legal basis: performance of a contract and legal obligation.
• To provide customer support and respond to your requests. Legal basis: performance of a contract and legitimate interest.
• To keep the applications stable and secure, diagnose crashes and prevent fraud and abuse. Legal basis: legitimate interest.
• To measure and improve the applications and to plan new features. Legal basis: legitimate interest, or consent where required for non-essential analytics.
• To send service messages about your account, and marketing messages only where you have consented. Legal basis: performance of a contract, or consent.
• To comply with tax, accounting and other legal obligations. Legal basis: legal obligation.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

4. Who we share it with

We share personal data only with service providers acting on our instructions, and only what each needs to do its work:

• Cloud hosting, storage and database providers.
• Payment processors and the app store operators that handle in-app purchases.
• Analytics, crash reporting and error monitoring providers.
• Email delivery and customer support platforms.

Each provider is bound by a written agreement restricting use of the data to our instructions. We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a merger or sale of assets, in which case we will state so here in advance where the law allows.

5. International transfers

Bossa Ventures LLC operates from the United States and our applications are sold in international markets, so personal data may be processed in the United States and in other countries where our providers operate. For transfers from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses together with the additional safeguards required by them.

6. How long we keep it

• Account data: for as long as the account exists, then up to 30 days after deletion to allow recovery of an account closed by mistake.
• Subscription and transaction records: up to seven years, to satisfy tax and accounting obligations.
• Support correspondence: up to three years after the request is closed.
• Diagnostic logs and crash reports: up to 12 months.

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, and to withdraw consent you have given. Residents of California may also request disclosure of the categories of personal data collected and may not be discriminated against for exercising these rights.

To exercise any of these rights, write to privacy@bossa-ventures.com. We reply within 30 days. We may ask you to confirm your identity before acting on a request. If you believe we have handled your data improperly, you may also complain to your local data protection authority.

8. Security

We use encryption in transit and at rest, restrict access to production systems to the people who need it, require multi-factor authentication for administrative access, and keep audit logs. No system is perfectly secure, and we will notify you and the competent authorities of a personal data breach where the law requires it.

9. Children

Our applications are not directed at children under 13, or under the higher minimum age set by local law. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to privacy@bossa-ventures.com and we will delete it.

10. Cookies

This website and our web applications use cookies and similar technologies. See our Cookie Policy for what we set, why, and how to control it.

11. Changes to this policy

We will post any change on this page and update the effective date above. Where a change materially affects how we use your personal data, we will notify account holders by email or inside the application before it takes effect.

12. Contact

Privacy and data requests: privacy@bossa-ventures.com
Product and account support: support@bossa-ventures.com
Billing and refunds: billing@bossa-ventures.com
Legal and corporate: legal@bossa-ventures.com
Postal: Bossa Ventures LLC, 8200 NW 41st Street, 2nd Floor, Doral, FL 33166, United States