Bolbase
Request early access

Legal

Privacy Policy

Last updated: October 1, 2026

This policy explains what personal information Bolbase ("Bolbase", "we", "us") collects when you use bolbase.com and the Bolbase platform (together, the "Service"), how we use it, and the choices you have.

1. Information we collect

  • Contact form messages. Your name, email address, company (if you give it), the topic you choose and your message. We store the message and forward it by email to our support inbox so our team can reply.
  • Account information. When you sign in with Google or Microsoft, that provider sends us your account identifier, email address and name. We ask only for basic sign-in permissions (OpenID, email and profile). We never see or store your Google or Microsoft password.
  • Passkeys. When you add a passkey, we store a credential ID, a public key and a usage counter. Your fingerprint, face scan, device PIN and private key stay on your device and are never sent to us.
  • Electronic signatures. When you sign a document through a Bolbase signing link, we record your name, the email address the link was sent to, your signature (drawn or typed), the time, your IP address and device information, and a fingerprint of the document, as evidence of the signature. The signed document is shared with the company that asked you to sign.
  • Sign-in records. When your account was created and when you last signed in.
  • Technical data. Our network provider and our servers process technical information such as IP address, browser type and request times to deliver the Service and protect it from abuse.
  • Shipment data and documents. When platform features become available to your account, we will process the shipment details and documents that you or the partners you work with add, only to provide the Service.

2. How we use information

  • To answer messages you send us and contact you about Bolbase, including early access.
  • To create and secure your account and sign you in.
  • To operate, maintain, improve and protect the Service.
  • To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use it for advertising.

3. Information from Google

Bolbase's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the information we receive from Google (account identifier, email address and name) only to sign you in and identify your account.

4. Cookies

We use only cookies that the Service needs to work:

  • session: keeps you signed in during a visit and protects forms against cross-site request forgery.
  • remember_token: keeps you signed in for up to 30 days. It is deleted when you sign out.

Our network provider, Cloudflare, may set its own security cookies to tell people and bots apart. We do not use analytics, advertising or third-party tracking cookies.

5. How we share information

  • Service providers that help us run the Service: Cloudflare (network delivery and security), our email provider (to deliver contact form messages to our inbox), and Google or Microsoft when you choose to sign in with them.
  • People you share with. When sharing features are available, documents and shipment details you choose to share will be visible to the people you share them with.
  • Legal reasons. When required by law, or to protect the rights, property or safety of Bolbase, our users or others.
  • Business transfers. If Bolbase is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will tell you before your information becomes subject to a different privacy policy.

6. How long we keep information

  • Contact form messages: for as long as we need them to handle your enquiry and any follow-up, or until you ask us to delete them.
  • Account information: for as long as your account exists. When you ask us to delete your account, we delete its data within 30 days, except where we must keep it by law.
  • Technical logs: for a limited period, for security and troubleshooting.

7. Your choices and rights

You can ask us to access, correct, export or delete your personal information, or object to how we use it, by emailing [email protected]. You can add or remove sign-in methods at any time from your account page. Depending on where you live (for example in the European Economic Area, the United Kingdom or California), you may have additional rights, including the right to complain to your local data protection authority. We respond to requests within 30 days.

8. Security

All connections to the Service are encrypted with HTTPS. Sign-in is passwordless, so there are no Bolbase passwords to steal or reuse. Access to our systems is limited to people who need it to run the Service. No system is perfectly secure, so please contact us right away if you believe your account has been misused.

9. International processing

We and our service providers may process information in countries other than the one you live in, including where our servers and providers are located. When we do, we take steps to protect it as described in this policy.

10. Children

The Service is a business tool and is not directed to children. We do not knowingly collect information from anyone under 16.

11. Changes to this policy

We may update this policy as the Service develops. We will change the "Last updated" date above and, for significant changes, tell you on the site or by email before they take effect.

12. Contact

Questions or requests about privacy: [email protected].