Privacy Policy

Introduction

Welcome to Data Consulting Platform ("the Platform"), operated by BOL Group LLC. This Privacy Policy explains what information we collect when you use the Platform, how we use it, and the choices you have.

Information We Collect

• Account information — your name, email address, account type (individual or business), and, if you give them, your business name, industry, company size, city, and team members' names and emails.
• Your password — handled by our sign-in provider, Supabase Auth. We never store your password itself.
• Files you upload — processed in memory to clean and analyze them, then discarded. We do not keep them, unless you choose managed storage (below).
• Managed storage (only if you opt in) — if you (or your consultant, for you) accept a preview and agree to the Storage Terms, the cleaned data you approved is stored so you can view it later.
• Usage records — for each download: the table's name, row count, processing time and amount charged. Never the data itself.
• Consultations — when you book a consultation, our scheduling provider (Cal.com) tells us the booking time and your name and email, so we know whether your free consultation has been used.
• Technical logs — basic server logs (IP address, request times) for security and debugging.

How We Use Your Information

• To create your account, sign you in, and give you the services on your plan.
• To let your consultant work on your account, if you asked for one.
• To bill you for what you use and manage your subscription.
• To schedule and keep track of consultations.
• To keep the Platform secure and improve it. We do not use your data for advertising.

Who Can See Your Data

• You and your team — everyone on a business account shares its plan and stored data.
• Your consultant — only if you asked for one or they created your account for you. A consultant can only open the clients assigned to them.
• No other client can ever see your data.

Data Sharing

We do not sell or rent your personal data. We share it only with the services that run the Platform:

• Supabase — database and sign-in (hosted on Amazon Web Services).
• Render — runs our server, where your files are processed.
• Vercel — hosts the website.
• Cal.com — consultation scheduling and, for paid sessions, payment under Cal.com's own terms.
• Stripe — subscription payments. Stripe handles all card data; we never store card details.

Data Retention

Account information is kept while your account is open. Uploaded files are not kept. Data in managed storage is kept until you delete it or close your account. Billing records may be kept longer where the law requires. When an account is deleted we keep only an anonymous count — the account type, how long it was open, whether it had a paid package, and the reason you picked, if any — with nothing that identifies you (no name, email, business or location).

How we protect it: email addresses and phone numbers in stored data are encrypted; each business sees only its own data, enforced by the database itself; sign-in allows at most three devices and signs out idle ones; and admins and consultants must use two-step sign-in. For healthcare businesses we keep an activity log of who opened, stored or downloaded their data (never the data itself), deleted with the account.

Your Choices

• Download your stored data as a CSV file at any time (Data Engineering → Stored for … → Download as CSV).
• Delete your stored data at any time, or ask us to close your account — see Data Deletion.
• Correct your account details by emailing us.

Changes to This Policy

We may update this policy. The date at the top shows the latest version.

Contact

Questions? Email us at thebolgroup.llc@gmail.com.