Privacy Policy

Last updated: December 8, 2025

1. Introduction

BOFFO ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial document processing platform.

2. Information We Collect

We collect information that you provide directly to us:

  • Account information (name, email address)
  • Financial documents you upload (bank statements, portfolio reports)
  • Email account access (when you connect Gmail/Outlook for email ingestion)
  • Usage data and preferences

3. How We Use Your Information

We use your information to:

  • Process and extract data from your financial documents
  • Provide portfolio analytics and reporting
  • Fetch relevant emails from connected accounts (only from senders you specify)
  • Improve our extraction algorithms and service quality
  • Communicate with you about your account

4. Email Access (Gmail/Outlook)

When you connect your email account:

  • We only access emails from senders you explicitly approve (e.g., bank statements)
  • We download PDF/Excel attachments for processing
  • We do not read, store, or process personal email content
  • We do not send emails on your behalf
  • You can disconnect your email account at any time

5. Data Security

We implement industry-standard security measures including encryption at rest and in transit, secure token storage, and row-level security to ensure your data is isolated and protected. OAuth tokens are encrypted using Fernet symmetric encryption.

6. Data Retention

We retain your data for as long as your account is active. You can request deletion of your data at any time by contacting us. Upon account deletion, all your documents, extracted data, and connected email accounts will be permanently removed.

7. Third-Party Services

We use the following third-party services:

  • Google OAuth for Gmail authentication
  • Microsoft OAuth for Outlook authentication
  • Supabase for secure database storage
  • Anthropic Claude for AI-powered document extraction

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Disconnect email accounts
  • Export your data

9. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@boffofinance.com