Privacy policy
This Privacy Statement describes how Spooky processes your information and explains the choices available to you with respect to your information.
It's important to us that you're able to clearly understand how we process your information and what rights you have under privacy and data protection laws.
If you have any questions or concerns about how Spooky processes your information or about this Privacy Statement, you can email us any time at privacy@bossai.ai.
Our Relationship with You
In situations where our users are subject to our Subscriber Terms, Terms of Service, or other Agreement to use Spooky’s services, Spooky is the processor/service provider (a provider that processes personal data on behalf of or at the direction of a controller, or other similar designation under the law) and our customer (usually a company or organization) is the controller/business (the entity that decides how and why information is processed) of the information provided to Spooky via their use of Spooky Services. In all other cases, Spooky is the controller of the information.
For example, if you create an account with
your corporate email address, your company is the controller of your Spooky domain and the information stored in it.
a free email domain (like gmail.com) or personal email account, Spooky is the controller.
Spooky Services can be used by companies or by individual users:
If you’re using Spooky (including but not limited to the BossAI SaaS service) through your company, educational institution, or with your company email address, your company or educational institution’s own Spooky Service administrator is responsible for the accounts associated with that company or institution and can: restrict, suspend, or terminate your access to or ability to use the services, access information about you, access or retain information stored with us (including your workspace content and log data about your use of Spooky Services), and restrict your ability to edit, restrict, modify, or delete information associated with your use of our products and services.
Information We Process
Spooky processes information we receive directly from you, automatically collected when you use Spooky or visit one of our websites, and collected by Spooky from third parties. However, please note that this Privacy Statement does not apply to the processing of your information by third parties through your use of any third-party integrations available via our services. Please visit those third-party websites directly for more information on their privacy and data protection practices.
Information Spooky Receives Directly From You
Information needed to create an account
This includes information that is needed for Spooky to create an account for you and manage your ability to log in and out of Spooky (including but not limited to BossAI):
Identifiers, including first and last name and email address
Your password for Spooky/BossAI(hashed) - unique, long, and strong, please
Information related to a third-party authentication identity provider, (e.g., Google Authenticator
If you upgrade your account to a paid account, Spooky may collect:
Billing information, including name, address, and telephone number
Financial information, including as credit card information or bank account information collected by our payment processors (e.g. Stripe) on our behalf
Information about your chosen Spooky/BossAI plan
Information you provide to us through your use of Spooky Services (inc. BossAI)
Information you provide in projects, initiatives, forms, uploaded files, attachments chats, milestones and other features of Spooky.
Information from emails you forward to email addresses @bossai.ai
Profile photo and other information you provide to describe yourself, which we only collect if you do choose to provide it
Video and audio recordings, and transcripts of those recordings, if you use video messaging
Professional or employment information, which may include your title or role at your company if you elect to provide this information
Any other information you choose to provide while using Spooky that identifies or can be reasonably associated with you
Other information you may provide to us when you interact with Spooky in other ways
If you directly interact with Spooky staff, such as our sales, business research, customer success or operations groups, Spooky may process the following information voluntarily provided by you:
Your requests, questions, and responses to us via forms, or email, or other means
Information you provide in connection with Spooky research studies, if you choose to participate
Information to verify your identity
Geographic information, such as region and country
Social media information
Your date of birth
Biometric information associated with call recordings, with your consent in accordance with applicable law
Information automatically processed when you visit our websites or use our mobile or desktop app
Information related to your use of Spooky/BossAI and our websites
We may also collect the following:
Metadata and inference information related to your use of Spooky Services, our websites, and third-party integrations to better understand the way you work in Spooky. We may log the actions you take as you use Spooky/BossAI, including but not limited, to the number of Spooky/BossAI projects and initiatives you work in, the number of insights you generate and that you view, the number and type of files you upload and view, the number and length of chat messages you engage in, when you delete or archive a project, the features and embedded content you interact with, and what, if any, third-party integrations you use.
Internet network activity, cookies, and similar tracking technologies, including data our servers automatically record, including your web request, IP address, browser type and settings, referring/exit pages and URLs, number of clicks, date and time stamp information, language preferences, and other such information.
Information collected as a result of participation in alpha and beta testing, such as error reports or feedback provided by you
Information about how you interact with our marketing websites, like bossai.ai, such as where you click, how long you visit a page, your scrolling, mouse hovers, and other data to help us better understand your experience and provide you with the best user experience
Device information and activity when you use Spooky Services via a mobile device, including the type of device you are using, device IDs, operating system version, and mobile network information to ensure that we are serving you the correct version of our application
Derived device geolocation information, including approximate geographic location inferred from an IP address
Information Spooky Receives from Other Sources
Sometimes Spooky receives your information from third parties (other individuals, marketing services, third-party integrations), which may include
Information processed from third-party integrations you set up with Spooky. For example, a third-party integration may give us access to information stored in that third party that Spooky will process to facilitate the integration
Name, email, and business contact information
Information about you provided to us from other individuals or users of Spooky
How We Use Your Information
Spooky uses your information to operate our products and services, communicate with you, process transactions when you change Spooky plans, for security and fraud prevention, and to comply with the law. Specifically, we may process your information to:
Provide services to you and operate our business
Maintain, provide, and improve our products and services
Suggest Spooky/BossAI Help Center articles that may be relevant to you
Help us better understand user interests and needs, and customize Spooky for you
Analyze and research how you interact with our websites and applications
Protect Spooky and you, for example:
Securing our systems and products against fraud or unauthorized activity
Identifying, troubleshooting, and fixing bugs and errors
Complying with global laws and regulations
Investigate in good faith alleged violations of our Terms of Service
Comply in good faith with a valid legal subpoena, request, or other lawful process that we determine is necessary to respond to
If you use Spooky as part of an organization, company, or academic institution, Spooky will process your information as required by our contract with your organization or academic institution. Those contractual terms may differ from, and, in the event of a conflict, take precedence over, the uses described in this Privacy Statement.
In addition, we use information about your use of Spooky, account information (which may include your email address and name), and information related to third-party integrations to:
Communicate with you:
About Spooky Services by phone, text, email, or chat
To provide important notices and updates, product changes, and other necessary notices such as security and fraud alerts
To market Spooky services to you. via email, phone, and mail. You have the ability to unsubscribe from promotional marketing communications at any time
Advertise Spooky to you
Facilitate reporting and analyze performance of the Spooky platform or features available in Spooky
Provide webinars or public presentations
Demonstrate Spooky/BossAI or provide you access to a demo Spooky Service instance
Process your information at your direction
Provide cross-device management of your account. For example, we may locate or try to locate the same unique users across multiple browsers or devices (such as smartphones or tablets), or work with service providers that do this, in order to save your preferences across devices and analyze usage of our products and services. If you wish to opt out of Google’s ability to locate you across devices in this way, you may install the Google Analytics Opt-out Browser Add-on by clicking here.
Provide you with support and get your feedback
Respond to your requests for information
Help identify and troubleshoot any issues with your account and answer your questions
Resolve support requests
Provide you with reports about usage
Survey your opinions through surveys, research studies, and questionnaires
Combined Information
Unless otherwise prohibited by law, we may combine the information that we collect through your use of our products and services with information that we receive from other sources, both online and offline, and use that combined information as set out above.
Aggregated and de-identified data
We may aggregate and/or de-identify information related to your use of Spooky Service (for example, how many projects or initiatives you created) so that such information can no longer be linked to you or your device. We may use such aggregated and de-identified data for any purpose, including but not limited to, research and marketing purposes and may also disclose such data to any third parties, including advertisers, promotional partners, sponsors, event promoters, and/or others.
Artificial Intelligence and Machine Learning
Many features in Spooky Service (including BossAI) are powered by artificial intelligence (AI) and machine learning.
We use metadata related to your domain’s use of our Service to train machine learning models. Depending on the model and the feature, these machine learning models power features, both in your domain and other Spooky domains.
We leverage third-party LLM service providers. Our third-party LLM service providers do not use customer data to train their models.
Spooky may use AI technologies, including bots on our websites and in our product, to communicate with you, respond to your comments and questions, and provide information about our products and services.
How We Disclose Your Information
We need to disclose the information we collect about you to make our products and services run smoothly and to operate our business under the following conditions:
Service providers and subprocessors. We may provide access or disclose your information to select third parties that use the information on our behalf to assist in providing Spooky’s services, website, and features. These third parties provide a variety of services to us, including without limitation sales, marketing, provision of content and features, artificial intelligence enabled functionality, advertising, analytics, research, data storage, security, fraud prevention, and other services.
Advertising partners. We may also provide information collected when you visit an Spooky website (which may include email addresses) to service providers, who may “match” this information in de-identified form to cookies (or mobile ad identifiers) and other proprietary IDs, in order to provide you with more relevant Spooky ads when you visit other websites. Our advertising partners may also use cookies and similar technologies on our website to display more relevant advertising about Spooky on other websites that you visit.
Because you ask us to disclose. We may disclose your information to third parties when you ask us to do so. This includes when you connect Spooky with other tools via our available integrations.
Consistent with your settings within our products and services. Please note that the information you submit through and post to the Spooky Service may be viewable by other users in your workspace, team, division, or organization, depending on the specific settings you have selected and if an organization has been created for your domain.
Affiliates and subsidiaries. We may disclose the information we collect within the Spooky family of companies to provide Spooky’s services to you.
Business transfers. If the ownership of all or substantially all of our business changes, or all or some of our assets are sold as part of a bankruptcy or other proceeding, we may transfer your information to the new owner so that the services can continue to operate. In such case, your information would remain subject to the promises and commitments contained in this Privacy Statement until the acquiring party updates it. If such transfer is subject to additional mandatory restrictions under applicable laws or agreements, Spooky will comply with those restrictions.
Compliance with legal obligations. To comply in good faith with a valid legal subpoena, request, or other lawful process that meets our requirements, we will notify individuals or customers of that request unless: we are prohibited from doing so by law or court order; or there are exceptional circumstances, such as an emergency involving the risk of bodily injury or death to a person or group of people or potential harm to minors.
Your company’s own Spooky Service/BossAI account administrator (if you have one). If you’re using Spooky Service in connection with an organization, academic institution, or company domain, your company’s own Spooky/BossAI account administrator can export data associated with the domain they manage if they have a subscription plan that allows them to do so.
Public Forums. Our public forums, such as the Spooky community forum, make it possible for you to upload and post comments or feedback publicly with other users. Any information that you submit through such public forums is not confidential and Spooky may use it for any purpose (including in testimonials or other Spooky marketing materials). Any information you post openly in these ways will be available to the public at large and potentially accessible through third-party search engines. Such information can be read, collected and/or used by other users and could be used to send you unsolicited messages.
We use and disclose the categories of information we collect from and about you consistent with the various business purposes we discuss throughout this Privacy Statement. We do not disclose your information to third parties for their own direct marketing purposes.
Protection, Storage, Transfer and Retention of Your Information
Security
Spooky takes technical and organizational measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. However, no method of transmission over the Internet and no means of electronic or physical storage is absolutely secure, so we cannot ensure or warrant the security of that information. We are constantly updating and improving our safeguards.
Storage
When you use Spooky Services (including BossAI), some information about you will be stored in the United States.
Transfer of your information out of EEA, UK, Switzerland, and Japan
When you use our products and services, information about you will be transferred to the United States where the majority of Spooky’s data processing occurs. We may also transfer information that we collect about you to third party processors across borders from your country or jurisdiction to other countries or jurisdictions around the world.
Data Retention
We will retain your information for the period necessary to fulfill the purposes outlined in this Privacy Statement, to make our products and services available to you, or as instructed by you, unless a longer retention period is required or permitted by law.
Other Important Information
Use by children under 16
If you are under the age of 16, you may not have a Spooky/BossAI account or use Spooky’s products or services. We do not knowingly process any information from, or direct any of our products or services to, children under the age of 16.
Marketing Practices and Choices
If you receive email from us, we may use certain analytics tools, such as clear GIFs that capture data about your interaction with the email, which may include the date and time when you opened our email and whether you clicked on any links or banners within our emails. This data allows us to gauge the effectiveness of our communications and marketing campaigns.
You may instruct us not to use your contact information to contact you by email, postal mail, or phone regarding products, services, promotions, and special events that might appeal to your interests by contacting us via privacy@bossai.ai. In promotional marketing commercial email messages, you can also opt out by following the instructions located at the bottom of such emails or contact us at privacy@bossai.ai.
Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Statement or as required by applicable law. For example, you may not opt out of certain transactional, operational, or service-related emails, including those reflecting our relationship or transactions with you.
Legal Bases for Processing Your Information
The laws in some jurisdictions require us to inform you of our legal bases for processing your information. Our legal bases for collecting and using your information described above will depend on the particular type of information and the specific context in which we collect it. However, some examples of legal bases for processing that we rely on:
Where use of your information is necessary to perform our obligations under a contract with you (for example, to comply with the Terms of Service which you accept by using Spooky’s services or to fulfill the terms of a contract signed with companies)
Where use of your information is necessary for our legitimate interests or the legitimate interests of others (for example, to provide security, operate our products and services, prevent fraud, analyze use of and improve our products and services, and for similar purposes)
Where use of your information is necessary to comply with a legal obligation (for example, to comply with our legal obligations to collect and store tax or invoice information for a certain period of time)
Where we have your consent to process data in a certain way
Your Privacy Rights
Your Privacy Rights
Regardless of what country you’re located in, we respect your ability to know, access, correct, export, restrict the processing of, and delete your information, and have extended those rights globally. We will not discriminate against you for exercising your privacy rights.
Information about your rights
Upon your request, and subject to applicable legal exceptions, we will:
provide access to and/or a copy of certain information we hold about you
provide you with information about categories of information we collect or disclose about you, the categories of sources of such information, the business or commercial purpose for collecting your information, and the categories of third parties to which we disclose your information. For your convenience and so you don’t have to request it, we’ve included that information in this Privacy Statement.
prevent the processing of your information for promotional purposes (including any direct marketing processing based on profiling)
update information which is out of date or incorrect
delete certain information which we have about you
restrict the way that we process and disclose some of your information
transfer your information to a third party provider of services
revoke your consent for the processing of your information
If you request these rights, we will need to verify your identity and may need to verify your relationship with Spooky (for example, if you’re an administrator of a Spooky/BossAI organization, division, or workspace and you’re making a request on behalf of another individual) for security and to prevent fraud. You may be able to designate an authorized agent to make requests on your behalf. In order for an authorized agent to be verified, the authorized agent must present signed, written permission to make such requests or a power of attorney. We may also contact you to verify your identity before processing the authorized agent’s request.
We may take additional steps to verify that you are authorized to make the request. If you are an end user of Spooky’s services and not a direct customer of Spooky (for example, your company uses Spooky/BossAI and you’re an employee or authorized representative of that company), you should direct requests relating to your information to the administrator of your company’s Spooky/BossAI account. We will redirect you to your administrator or notify the administrator directly.
Please note, however, that certain information may be exempt from such requests in some circumstances (for example, if we need to keep processing your information for our legitimate interests or to comply with a legal obligation). Depending on applicable law, you may have the right to appeal our decision to deny your request. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you.
Right to manage cookies preferences and opt out of targeted advertising
We may provide information about your device and online browsing activities to third-party advertising providers for targeted online advertising purposes, so that we can provide you with more relevant and tailored ads regarding our services.
If you would like to opt out of our online disclosure of your information through cookie and pixel technology, send us email at privacy@bossai.ai.
Privacy Information for California Residents
Categories of information collected and disclosed
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), and we want to provide you with the following additional information about the purpose for which we use each category of personal information we collect (as defined by CCPA), the categories of third parties to which we disclose personal information for a business purpose or for cross-context behavioral advertising, which includes our use of third-party analytics services and online advertising services. These may result in the disclosure of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information).
Specifically, your contact information (including email) or internet network and device information (including cookie data and IP address) may be disclosed to online advertising and analytics partners.
Your choices regarding online advertising and related activities
You have the right to opt out of the disclosure of your personal information for purposes of online cross-context behavioral advertising and related activities and can inform us of your desire at privacy@bossai.ai.
Other CCPA rights
We do not offer any financial incentives in exchange for your personal information. If we ever do, we will provide you with additional disclosures regarding those incentives at the time they are offered.
The CCPA also allows you to limit the use or disclosure of your sensitive personal information (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for business purposes for which you cannot opt out under the CCPA.
California “Shine the Light” disclosure
The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the disclosure of certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes, or in the alternative, that we provide a cost-free means for consumers to opt out of any such disclosure. We do not currently disclose your personal information to third parties for their own direct marketing purposes.
Nevada rights
Under Nevada law, certain Nevada consumers may opt out of the sale of information about you. We do not sell your data in accordance with Nevada Senate Bill 220. However, if you are a Nevada resident you may submit a request to opt out of any potential future sales under Nevada law by notifying us at privacy@bossai.ai. Please note, if needed, we may take reasonable steps to verify your identity and the authenticity of the request.
Changes To Our Privacy Statement
We will update this Privacy Statement to make sure it accurately reflects our data collection and use practices, our amazing features, advances in technology, or as applicable laws require. We will comply with applicable legal requirements regarding providing you with notice and/or consent when we make such changes, depending on the type of change made. We also provide information about how our Privacy Statement has changed over time below.
Contact Us and Privacy Questions
Spooky is located at 1514 Walnut Drive, Palo Alto, CA, 94303. If you wish to contact us or if you have any questions about or complaints in relation to this notice, please contact us at privacy@bossai.ai.