Privacy policy

Introduction

Boomer Ventures LLC ("we," "us," or "our") operates https://boomerforms.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

This Privacy Policy describes how we handle information about you as a visitor, prospective customer, or customer of Boomer. If you are a Boomer customer and use the Service to collect data from your own clients ("Client Data"), we act as a data processor for that Client Data on your instructions — you remain the data controller, and are responsible for your own compliance obligations to your clients. See "Data Processing Role" in our Terms of Service for details.

Sign-in details (such as name and email) are handled by our authentication provider, Clerk, in the United States, regardless of your chosen storage region.

Information We Collect

We may collect the following types of information:

• Name, firm name, and work email, when you sign up or request early access
• Sign-in credentials, handled by our authentication provider, Clerk
• Billing information, handled by our payment processor, Stripe
• Client Data you upload to the Service: form templates, submissions, and supporting documents
• Anonymous usage data, collected via PostHog

We collect this information when you voluntarily provide it to us, when you use our Service, or through automated technologies.

How We Use Your Information

We may use the information we collect for various purposes, including to:

- Provide, operate, and maintain our Service
- Improve, personalize, and expand our Service
- Understand and analyze how you use our Service
- Develop new products, services, features, and functionality
- Communicate with you for customer service, updates, and marketing purposes
- Process transactions and send related information
- Find and prevent fraud
- Comply with legal obligations

Third-Party Services

We may use third-party service providers to monitor and analyze the use of our Service, process payments, or assist with other business functions.

How We Use AI and Your Data

AI only processes the blank form templates you upload, to identify fields and layout. It never processes submitted forms or client documents.

Cookies and Tracking Technologies

We do not use tracking cookies. Our product analytics tool, PostHog, is configured to operate without cookies and collects anonymous usage data to help us improve the product.

Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. If you cancel your plan, we'll work with you to export your data, then delete it from our servers within 30 days.

Data Security

Data is encrypted in transit and at rest. Each customer's data is stored in its own isolated database — your data is never commingled with another customer's. We maintain append-only audit logs of actions taken within the platform.

Our infrastructure runs on Cloudflare, Fly.io, and Neon, all of which are SOC 2 audited. Customers can choose to have their data stored in the Australia, European Union, or United States region.

No method of transmission over the Internet or electronic storage is completely secure. While we follow industry-standard practices to protect your information, we cannot guarantee absolute security.

Transfers of personal data to sub-processors in the United States rely on the EU-U.S. Data Privacy Framework (including its UK Extension) or Standard Contractual Clauses.

Data Breach Notification

If we become aware of a data breach that affects your personal information, we will notify affected customers within 72 hours of becoming aware of the breach, describing what happened, what information was involved, and the steps we are taking in response.

We will also notify the relevant regulator where required — including the applicable supervisory authority under GDPR and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme — in accordance with applicable law.

Lawful Basis for Processing

Your Rights Under GDPR (European Users)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). Boomer Ventures LLC aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

You have the following rights:

• Right to Access — You have the right to request copies of your personal data.
• Right to Rectification — You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure — You have the right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing — You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Data Portability — You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• Right to Object — You have the right to object to our processing of your personal data, under certain conditions.
• Right to Withdraw Consent — Where we rely on your consent, you have the right to withdraw it at any time.
• Right to Lodge a Complaint — You have the right to lodge a complaint with your local data protection supervisory authority.

If you wish to exercise any of these rights, please contact us at privacy@boomerforms.com. We will respond to your request within 30 days.

Your Rights Under CCPA (California Residents)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA).

You have the right to:

• Know — Request that we disclose what personal information we collect, use, and disclose about you.
• Delete — Request that we delete your personal information, subject to certain exceptions.
• Opt-Out — Opt out of the sale of your personal information. We do not sell personal information.
• Non-Discrimination — Not be discriminated against for exercising your CCPA rights.

To exercise your rights, contact us at privacy@boomerforms.com. We will verify your identity before processing your request and respond within 45 days.

Your Rights Under the Privacy Act (Australian Users)

If you are an Australian resident, we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access the personal information we hold about you, request correction of inaccurate information, and lodge a complaint if you believe we have mishandled your data.

To exercise these rights, contact us at privacy@boomerforms.com. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

- By email: privacy@boomerforms.com
- By visiting: https://boomerforms.com

Boomer Ventures LLC is registered in the State of Delaware. Our registered address is 131 Continental Dr, Suite 305, Newark, DE 19713, United States.