Privacy Policy: how BOS handles your data — BOS
Legal

Privacy Policy

LAST UPDATED: AUGUST 4, 2026

At Synova Digital Solutions SRL ("we," "BOS") we take the privacy of your data seriously. This policy explains what information we collect, for what purpose, how we protect it, and what rights you have over it.

1. Data controller

Controller: Synova Digital Solutions SRL — CUIT 30-71890877-5.
Address: Av. Scalabrini Ortiz 1135, Ciudad Autónoma de Buenos Aires, Argentina.
Privacy contact: desarrollo@synova.la.

2. What data we collect

Depending on your relationship with BOS, we may process:

We don't request special categories of data (health, ideology, etc.) for the operation of the service.

3. Purpose and legal basis

We process data to:

We do not sell personal data or use it for third-party advertising.

4. How we protect it

We apply technical and organizational measures aligned with the state of the art, including: per-account data isolation (multi-tenant with Row Level Security), multi-layer role-based access control, encryption in transit (HTTPS/TLS) and at rest, authentication via corporate identity providers with two-step verification, continuous security monitoring, audit logging, and data minimization. Details are on our Security page.

5. Who we share data with (subprocessors)

To provide the service we rely on providers acting as processors, under data processing agreements:

These providers may process data outside Argentina. Transfers are carried out under contractual safeguards (DPA and standard contractual clauses).

6. Where data is hosted and international transfers

Data is hosted on Supabase and Vercel infrastructure, in the us-east-1 region (US East, Northern Virginia). Since the controller is based in Argentina and the infrastructure in the United States, every international transfer is carried out in accordance with Law 25.326 and, when applicable by user location, GDPR, under each provider's contractual safeguards.

7. How long we retain it

We retain data for as long as the contractual relationship exists and for the periods required by applicable legal obligations. When an account is closed, its data is deleted or anonymized within 90 days, unless a legal obligation requires longer retention.

8. Your rights

As a data subject, you can exercise the rights of access, rectification, updating, and deletion, and — where GDPR applies — objection, restriction, and portability. Write to us at desarrollo@synova.la; we respond within the legally required timeframes.

In Argentina, the supervisory authority is the Agencia de Acceso a la Información Pública (AAIP), where you can file a complaint. If GDPR applies to you, you can file one with the supervisory authority of your country of residence.

9. Cookies

We use cookies and similar technologies necessary for operation, security (session, fraud prevention) and, with your consent, usage metrics. You can manage them from the site's cookie notice. See our Cookie Policy.

10. Changes to this policy

We may update this policy. We'll publish the current version with its date and, for substantial changes, notify you through our usual channels.

11. Contact

Synova Digital Solutions SRL — desarrollo@synova.la — Av. Scalabrini Ortiz 1135, Ciudad Autónoma de Buenos Aires, Argentina.