Privacy Policy

Bojit collects information you provide directly, including your name, email address, business details, and customer information you enter into the platform. We also collect usage data to improve our services.

We use your information to provide and improve our services, including quoting, job management, invoicing, and customer relationship features. We also use it to find and fix problems and to decide what to improve next.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction. All data is encrypted in transit and at rest using industry-standard protocols.

Authorised Bojit staff may access account data only to provide support or keep the service secure. Access is read-only, every access is recorded, and it is never used for anything else. Nothing is changed and your customers aren't contacted.

For UK and EU users, we comply with GDPR requirements. You have the right to access, correct, or delete your personal data. Contact us to exercise these rights.

See our full GDPR Compliance page for detailed information.

We retain your data for as long as your account is active or as needed to provide services. If you request deletion, we will remove your data within 30 days, except where retention is required by law.

We use these processors: Stripe (payments), Resend (email delivery), Lovable Cloud, built on Supabase (hosting, database, authentication and file storage), Cloudflare (application hosting and bot protection), and Crisp (support chat). With your consent we also use Google Analytics, provided by Google, to understand visits to our public website pages. It loads only after you accept optional cookies, never runs in the signed-in app or on customer quote and invoice links, uses no advertising features, and stops, with its cookies removed, if you withdraw consent.

When you use Bojit AI, your request and the relevant customer or job details are processed by our AI gateway provider (Lovable) and the model providers it calls: OpenAI for drafting and answers, and Google for voice transcription, only to produce the response. This information is not used to train AI models, and the model providers are configured not to retain it.

Live chat (Crisp IM SAS). Crisp acts as a processor for our customer support chat. Categories of data: the messages you send, any contact details you supply in chat, and technical data such as IP address, browser and session information. Purpose: providing and following up the support conversation you request. We load the chat on our website only after you accept optional cookies, or when you ask to start a chat; inside the Bojit app it opens only from Help & support. Our lawful basis for handling the conversation is our legitimate interest in answering support enquiries, and performance of our contract with you where you are an account holder. The chatbox runs in Crisp's Total Privacy Mode, so a chat session begins only when you open the chat. Chat data is retained in line with our retention practice in section 5 and Crisp's own retention settings. Processing may involve transfers outside the UK/EEA under the safeguards offered by the provider. Your data-subject rights in section 4 apply to chat data, and our Cookies Policy describes the chat cookies in detail.

To exercise any right in relation to chat data, contact support@bojit.app.

When a business uses customer messaging, messages are stored with the job. A quote link stops giving access 90 days after an unaccepted quote expires, or 90 days after the job is completed. Businesses can turn messaging off for a job, and the customer receives email notifications of replies.

When a business emails you an invoice through Bojit, we send it on that business's behalf using the name and email address the business holds for you. If the invoice passes its due date without the business marking it as paid, Bojit automatically sends you one reminder email with a link to the same invoice. It is sent in the business's name, replies go to the business where it has given us a contact email, and no further reminder is sent for that invoice.

The business decides who it invoices and is responsible for that information; Bojit processes it only to deliver the invoice and the reminder. If you have paid, believe an invoice is wrong, or do not want to be contacted, please speak to the business that sent it. You can also contact us at support@bojit.app and we will pass your request on.

When a business signs up, Bojit's team receives an internal email with the account holder's name, email address and business name, on the basis of our legitimate interests in running and supporting the service.

Your payment card details are never stored on Bojit servers. All payment processing is handled by PCI DSS-compliant third-party payment processors using industry-standard encryption.

We only store transaction references and billing status necessary to manage your subscription. For details on refunds and cancellations, see our Refund & Cancellation Policy.

We use the cookies and browser storage needed to keep you signed in and protect the service. Live chat and Google Analytics are optional: analytics loads only if you accept optional cookies, and live chat only if you accept them or ask for a chat. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

The data controller for information processed by Bojit is James Tweed. Bojit is currently operated as an individual project, not yet incorporated as a company. For questions about this Privacy Policy or to exercise your data protection rights, contact james@bojit.app.

For questions about this Privacy Policy or to exercise your data rights, contact us at support@bojit.app