Privacy Policy

Boba keeps secrets for a living. Here is exactly what this website collects, why, and what your rights are. Short version: an email address if you join the waitlist, plus the technical data needed to serve and protect the site. That's the whole racket.

1. Who is responsible

Controller: David Hristev, bul. Vasil Levski, Sofia, Bulgaria. Email: boba@talktoboba.com

2. Waitlist data

If you join the waitlist we store:

• your email address, which plan you were interested in, and where on the page you joined,
• a pseudonymous, salted hash derived from your IP address for spam and abuse prevention; the raw IP address is not stored in the waitlist table,
• your browser's user-agent string and the referring page,
• a timestamp.

Legal basis: your consent (Art. 6(1)(a) GDPR) for the waitlist itself; our legitimate interest (Art. 6(1)(f) GDPR) for abuse prevention. We use the email only to tell you about the launch of Boba's Brain Trust. No resale, no ad networks, no "trusted partners."

Storage: Supabase (Postgres), hosted in the EU (AWS eu-central-1, Frankfurt).

Retention: until the launch communication is complete or you ask us to delete it, whichever comes first.

3. Analytics

We do not currently run website analytics or load an analytics script. If that changes, we will update this policy before enabling analytics.

4. Hosting & server logs

The site is served by Vercel. Like every web host, Vercel processes technical connection data (IP address, request time) to deliver the page and protect against abuse.

5. Your rights

Under the GDPR you can request access, rectification, erasure, restriction of processing, data portability, and object to processing. You can withdraw waitlist consent at any time — one email and you're out, no exit interview, Boba doesn't beg. You also have the right to lodge a complaint with a supervisory authority.

6. Contact

Privacy contact: boba@talktoboba.com