Privacy

What we collect, and what happens to it.

Written to be read rather than to be impressive. It states what we actually do with your data, and nothing we cannot stand behind.

What this website collects

This site collects two kinds of information. First, standard technical data that any web server records — the page requested, the referring address, an approximate location derived from the network address, and the type of device and browser. This is used to understand which pages are useful and to keep the site working.

Second, whatever you choose to send through the contact form: your name, company, email address, country and message. We use it to answer you. We do not add you to a mailing list and we do not run an automated follow-up sequence.

We do not sell personal information and we do not share it with advertising networks.

Documents you send us

If you send a document for a sample evaluation or for processing, it is used to run the work you asked for and to return the result to you. It is not used to build or train models, it is not used as a marketing example, and it is not passed to third parties for those purposes.

We do not publish documents, excerpts or screenshots from client or evaluation material. If you need an agreement in place before a document moves, tell us and we will arrange that first.

Documents can be deleted on request. The specifics of retention, deletion and any sub-processors involved are set out in the engagement agreement rather than on this page.

Cookies and similar technologies

This site sets no advertising cookies and no third-party tracking cookies. It uses browser storage for two things only: a randomly generated visitor identifier and a session identifier, both stored locally in your browser, so that repeat visits are not counted as new visitors. Neither is sold, shared with advertising networks, or used to build a profile of you across other websites.

Traffic measurement is off until you accept it. When the consent banner appears, choosing Reject means nothing is recorded about your visit — the measurement code is not run at all. You can change your mind at any time by clearing this site's data in your browser, which makes the banner appear again.

If you send an enquiry through a form, the details you type are stored so that we can answer you. That is separate from traffic measurement and is described above.

Where processing happens

Processing location depends on the deployment shape you choose. A managed engagement and a private deployment have different answers, and which one applies to you is settled in the agreement.

We do not state a jurisdiction on this page because stating one that does not apply to your arrangement would be misleading. Tell us what your requirements are and we will answer for your specific case.

Where personal data is transferred across borders — for example because a sub-processor operates in another country — the transfer is covered by the safeguards named in the engagement agreement. We do not rely on a blanket statement on a web page for this, because the answer differs by engagement.

Why we are allowed to hold your data

Where the GDPR applies, we rely on two legal bases. For answering an enquiry you sent us, the basis is your consent, given when you tick the box on the form. For running work you have engaged us for, the basis is performance of that contract. Traffic measurement runs on your consent, given through the cookie banner.

You can withdraw consent at any time. Withdrawing it stops future processing; it does not make past processing unlawful.

How long we keep it

Enquiry details are kept for as long as needed to answer you and to keep a record of the conversation, and are deleted when they are no longer needed for that. Documents sent for evaluation or processing are kept for the duration of the work and deleted afterwards, unless a longer period is agreed in writing.

Traffic measurement data is not kept indefinitely: it is aggregated for reporting and the underlying records are discarded on a rolling basis. The exact retention period for a specific engagement is stated in the engagement agreement rather than on this page.

Your rights and how to use them

These are your data subject rights. You can ask what personal information we hold about you (access), ask for a copy in a portable format (portability), ask for it to be corrected (rectification), ask for it to be erased (erasure), ask us to restrict what we do with it (restriction), and object to processing. You can also withdraw consent at any time, and you will not be treated differently for doing so.

Use the contact form to make a request and mark it as a data request. We will respond in English. We will ask enough to confirm that the request is yours before acting on it, because releasing data to the wrong person would be a worse failure than a slower answer.

If you are in the EU or the UK and you are not satisfied with our response, you have the right to complain to your national data protection authority. We would rather you came to us first, but the right is yours either way.

California residents (CCPA / CPRA)

If you are a California resident, the CCPA and CPRA give you the right to know what personal information is collected, to request a copy of it, to request that it be deleted, to request that it be corrected, and to opt out of the sale or sharing of personal information.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is therefore nothing to opt out of — but the right stands, and if you ask us to confirm that in writing for your records we will.

We will not discriminate against you for exercising any of these rights: no different price, no different level of service, no denial of service.

Requests can be made by email to vip@bobaicom.cn or through the contact form marked as a data request. An authorised agent may make a request on your behalf; we will ask for proof of authorisation.

Status of this policy

This site is operated by Boyubo Information Technology Co., Ltd. (博屿博信息科技有限公司), registered in Shenzhen, China. Data requests can be sent to vip@bobaicom.cn.

If you need a version with additional entity details for a procurement or legal review, contact us and we will provide one.