Privacy policy

This policy explains which personal data we process when you visit oboss.app, why, for how long, and what rights you have. Processing within the OBOSS application itself (company account, invoices, quotes) is described in the application privacy policy.

1. Controller

The controller is [provider's name, address, registration and VAT number]. Privacy contact: info@oboss.app.

2. What we process and why

2.1 Contact form

When you write to us through the form we process your name, e-mail address, optionally company and phone, the chosen topic and the message. The purpose is to answer your enquiry; the legal basis is steps prior to entering into a contract or our legitimate interest in communication (Art. 6(1)(b) and (f) GDPR). Messages are kept for at most 12 months after the communication ends, unless a contract is concluded.

The form sends the data to the OBOSS application server, which forwards it to our e-mail address. To prevent abuse the server records the sender's IP address and limits the number of messages per hour.

2.2 Server logs

The website is hosted by Cloudflare, Inc. (Cloudflare Pages). On access, technical data (IP address, time, requested page, browser) is processed for security and network operation. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR). Cloudflare is a processor under standard contractual clauses; data may also be processed outside the EU.

2.3 Analytics (only with consent)

Analytics tools (Google Analytics 4, Microsoft Clarity) are loaded only if you allow them in the cookie banner. If the tools are not enabled, no banner is shown and nothing is loaded. Details are in the cookie policy. You can withdraw consent at any time via "Cookie settings" in the footer.

2.4 Links to the application

The "Start for free" and "Log in" buttons lead to the OBOSS application (web.oboss.app). The website transfers no personal data in doing so; processing in the application is governed by its own privacy policy.

3. Recipients

• Cloudflare, Inc. — website hosting (processor);
• the hosting provider of the application server (Render) and the e-mail provider — forwarding contact-form messages (processors);
• Google LLC and Microsoft Corporation — only with consent to analytics.

We do not sell data and do not use it for third-party advertising.

4. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. Send requests to info@oboss.app. You may lodge a complaint with the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si) or your local supervisory authority.

5. Security

Data transfer is encrypted (HTTPS). The website is static and stores no personal data; form messages are kept in the provider's mailbox with restricted access.

6. Changes

We may update this policy; the current version with its date is published on this page.