Privacy Policy

Last updated: 26 October 2026

Who is responsible

Bomera Sales is provided by its owner (“we”, “us”). We are the controller of the personal data about you as an account holder. For privacy questions or requests, contact our support email (coming soon).

What we collect and why

• Your account: your email address, the name you give, and your password, which we store only as a scrypt hash. We use these to create your account, sign you in and keep it secure. Legal basis: performing our contract with you.
• Your contacts and Sales CRM: the contacts, companies, phone numbers, emails, notes, activity, follow-ups, quotations and other details you import or type in. We store them only so you can use them in the app. They are never shared, sold or used for anything else. Legal basis: performing our contract with you.
• Security information: to stop password guessing we keep a short-lived count of failed sign-ins per IP address, stored as a keyed hash rather than the address itself. Our hosting provider also keeps standard server logs, including IP addresses, for a limited time. Legal basis: our legitimate interest in keeping the service secure.
• Billing: when you start a checkout, we send your account email to Paddle so it can set up your customer record. When you subscribe, Paddle collects your payment details and billing address. We never see or store your card number. Paddle tells us your subscription status, plan, renewal date and Paddle customer and subscription IDs, which we keep with your account. Legal basis: performing our contract with you and our legal obligations.
• Your country, for prices: our pricing pages ask our server which country your IP address is in (our hosting provider works it out), so they can show the price for your country. Neither the country nor the address is stored. Legal basis: our legitimate interest in showing you the right price.

We don't use advertising, tracking or analytics cookies, and we don't sell personal data.

Contacts you upload are about other people

The contact lists you upload contain personal data about your connections. For that data you decide what is collected and why, and we process it only on your instructions to provide the service. Please make sure you have a lawful reason to keep and use it, and remove anyone who asks you to.

Who we share data with

• Paddle (Paddle.com Market Ltd and its affiliates), our reseller and Merchant of Record, processes payments, invoices, tax and refunds. See Paddle's privacy notice.
• Vercel Inc. hosts the website and stores account and contact data in its private storage. Data may be stored or processed in the United States and other countries where Vercel operates, under Vercel's data protection terms, including standard contractual clauses.
• Resend (Resend, Inc.) sends password reset emails, so it receives your email address and the email's contents. Data may be processed in the United States.
• Professional advisers, or authorities when the law requires it.

Data sent to other countries

Our providers are based in the United States and process data there and in other countries. Where the law of your country (for example the EU or UK GDPR, Egypt's Personal Data Protection Law or Saudi Arabia's Personal Data Protection Law) requires safeguards for sending personal data abroad, we rely on our providers' data protection terms, including standard contractual clauses, and on any approvals or other legal grounds that law requires. Contact us if you want more detail about these safeguards.

Cookies

We use one cookie, which keeps you signed in. It is strictly necessary, so it doesn't need consent. The app also keeps a few settings in your browser's storage, such as the sales person name you type and the tab you last opened, so the app works the way you left it; they never leave your device. When you open the checkout, Paddle may set its own cookies to process the payment and prevent fraud. Our pages load no third-party fonts, analytics or advertising scripts.

How long we keep data

• Your contacts and your Sales CRM: until you delete them (Delete all my LinkedIn leads and Delete my whole Sales CRM in the app) or close your account.
• Your account: until you delete it in the app (Account settings, Delete my account) or ask us to. Failed sign-in counts older than a day are dropped the next time someone signs in to the account.
• Billing records: as long as tax and accounting law requires, usually up to 10 years, by us and by Paddle.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another service. You can export your contacts yourself at any time from the app. To make a request, contact our support email (coming soon); we answer within one month. You can also complain to your local data protection authority.

Security

Data is sent over HTTPS only and stored in private storage that isn't publicly reachable. Passwords are hashed, sessions use signed, HTTP-only cookies, and repeated wrong passwords are locked out. No system is perfectly secure, so please use a strong password that you don't use anywhere else.

Children

The service is for business use. You must be at least 18 years old to create an account, and we don't knowingly collect data about children.

Changes

If we change this policy we'll update the date at the top. Significant changes will be announced in the app.