Privacy policy

1. Controller and data collected

Emprendimiento Jesus Petit 3, commercially Boelabs, operates Boberth from Venezuela. We process account and organization data; prompts, outputs, files, audio, transcripts, projects, memories, facets, and tool inputs; device, IP, user-agent, usage, and security logs; and subscription or payment-reconciliation data.

2. Purposes

We use data to provide and personalize Boberth, execute tools, maintain conversations, support users, measure performance, prevent abuse and fraud, comply with law, and improve Boberth and its AI systems.

3. AI processing and training by default

Boberth sends the content needed to the assigned AI provider to produce an output. We may also process prompts, outputs, and files for quality evaluation, safety, training, tuning, and model improvement.

Content is eligible for improvement and training by default, for both registered users and guests. An organization owner or administrator can turn off Improve the model. Turning it off marks that organization's identifiable existing and new conversations as ineligible for our training processes. Turning it back on affects new conversations; previously excluded conversations are not retroactively enabled.

Guests have no account preference and their content remains eligible. Opting out does not prevent processing required to answer, secure the service, investigate abuse, or comply with law. It cannot withdraw material already de-identified and irreversibly incorporated into an evaluation or training run started earlier.

4. Providers and transfers

We share only what is necessary with AI, search, voice, infrastructure, database, storage, email, operational analytics, job, and payment providers. Some operate outside Venezuela. User-connected tools send data to the selected third party under that party's terms. We do not sell personal data for advertising.

5. Retention

• Registered account and conversation data: while active, until deletion, subject to valid legal or security exceptions.
• Identifiable guest conversations: up to 90 days after last activity.
• Security, fraud, billing, and receipt records: for as long as needed to investigate incidents and meet applicable legal, accounting, or tax duties. We do not publish a fixed period that the system cannot yet guarantee consistently.
• Backups: deletion applies to active systems first. Data may remain temporarily in access-restricted backups until those backups rotate or need to be restored.
• Aggregated or de-identified data and material irreversibly incorporated into training or evaluation may be kept longer.

6. Controls and requests

You can update profile data, delete conversations, disable memory or training for an organization, and delete an account in settings. You may request access, correction, updating, or deletion at [email protected]. We may verify identity and will apply legitimate legal exceptions. Guests should provide the conversation identifier and enough information to locate it.

7. Security, cookies, minors, and changes

We use access controls, encryption in transit, credential protection, abuse limits, and environment separation. No system is infallible. Essential cookies and local storage maintain sessions, language, security, and interface continuity. Boberth is not directed to children under 13 or a higher local minimum age. We may update this policy and will identify the new date and announce material changes.