Legal
Privacy Policy
Effective 19 July 2026
Boss Your Data ("BYD", "we", "us") is a pharmaceutical market-intelligence
platform. This policy explains what information we collect, why we collect
it, and the choices you have. It applies to the BYD Chrome
extension, the BYD iPhone app, the BYD
Android app, and bossyourdata.com
(together, the "Services").
In short: we collect the details you give us when you
create an account, and the queries you run inside the product. We do not
track your browsing, we do not read the pages you visit, and we never sell
your data.
1. Information we collect
Information you provide
- Account details — your name, work email address,
optional company name, and a password. Passwords are handled by our
authentication provider and are never visible to us in plain text.
- Requests you send us — for example a demo request for
our Pro features, or a colleague's email address when you use the
"Invite" feature (used solely to send that one invitation).
Information generated when you use the Services
- Search and dashboard queries — the terms you search
and the companies or substances you build dashboards for, processed to
return results.
- Ask BYD questions — questions you type into our AI
assistant, and a daily usage count used to apply fair-use limits.
Information stored only on your device
- Your sign-in session token, interface preferences (such as the position
of the floating launcher icon), and which news stories you have already
read. These live in your browser's or phone's local extension storage and
are not transmitted to us as analytics.
What we do not collect
- Your browsing history. The Chrome extension displays a small launcher
icon on web pages, but it does not read, record or
modify the content of the pages you visit.
- Advertising identifiers, location data, or contact lists.
- We do not use third-party analytics or advertising trackers, and the
extension sets no cookies.
2. How we use your information
| Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|
| Providing the Services — sign-in, news feed, dashboards, search, AI answers |
Account details, queries |
Performance of a contract |
| Responding to demo requests and sending invitations you initiate |
Your email, the invitee's email |
Legitimate interests / consent |
| Fair-use limits, security and abuse prevention |
Usage counts, authentication records |
Legitimate interests |
| Service emails (confirmation, password reset) |
Email address |
Performance of a contract |
We do not sell or rent personal information, and we do not use it for
third-party advertising.
3. Who we share it with
We share personal data only with the service providers that run our
infrastructure, under contracts that restrict their use of it:
- Supabase — our database, authentication and hosting
provider. Your account data is stored in Supabase's EU (Ireland)
region.
- Google (Gemini API) — when you use Ask BYD, your
question (and the conversation's recent context) is sent to Google's
Gemini API to generate the answer. Questions are not linked to your
identity by Google beyond what is necessary to process the request.
We may also disclose information if required by law, or as part of a
corporate transaction such as a merger or acquisition (in which case this
policy would continue to apply to your data).
4. Data retention
- Account data is kept while your account is active.
- If you delete your account, your profile and personal records are
permanently removed from our systems.
- Local data on your device (session, read-story list, preferences) is
removed when you sign out, remove the extension, or delete the app.
5. Your rights and choices
- Delete your account at any time from within the
product: open the sign-out menu and choose "Delete account". Deletion is
immediate and permanent.
- Access, correction, portability, objection — under UK
and EU data-protection law you may request a copy of your data, ask us to
correct it, or object to processing. Email us at the address below and we
will respond within one month.
- Complaints — you may lodge a complaint with your
supervisory authority (in the UK, the Information Commissioner's
Office).
6. Security
All traffic between the Services and our servers is encrypted (TLS).
Access to production data is restricted by row-level security policies, so
signed-in users can only ever read the data their account tier permits.
Passwords are stored using industry-standard hashing by our authentication
provider.
7. Children
The Services are a professional tool intended for users aged 18 and over.
We do not knowingly collect information from children.
8. Not medical, regulatory or legal advice
Boss Your Data is an intelligence and productivity tool. It does not
provide medical, regulatory or legal advice, and nothing in the Services
should be relied on as such.
9. Changes to this policy
If we make material changes we will update this page and revise the
effective date above. Significant changes will be highlighted within the
product.
10. Contact
Boss Your Data
Email: support@bossyourdata.com
Web: www.bossyourdata.com