Privacy Policy

BOHIO SYSTEMS LTD operates the BOHIO real-estate financial modelling platform. This Privacy Policy explains what personal data we collect, how we use it, and your rights. For questions, contact hello@bohiotech.com.

We collect account data such as name, email address, and encrypted password. We store Excel models, documents, files, and Karaya chat messages you upload or send. We also collect usage and technical data such as IP address, browser type, operating system, pages visited, and feature interactions.

Billing and transaction records are processed by Airwallex. BOHIO receives payment status but does not receive raw card data. Support messages and feedback may be retained to resolve issues and improve the Service.

We use personal data to provide, operate, secure, and maintain the Service; process subscriptions and transactional emails; transmit relevant content to Anthropic for AI responses; prevent fraud and abuse; comply with legal obligations; and improve the Service using aggregated analytics. We do not sell personal data and do not use your content to train AI models.

For users in the European Economic Area or United Kingdom, we rely on contract necessity, legitimate interests, and legal obligations depending on the processing activity.

The Karaya AI assistant is powered by Anthropic Claude. Content submitted through chat, including relevant model excerpts, may be transmitted to Anthropic as a subprocessor solely to generate a response within your session. Your content is not used to train Anthropic foundation models under our API agreement.

BOHIO shares data with subprocessors under appropriate agreements: Supabase for database, auth, and storage; Anthropic for AI response generation; Airwallex for payment processing; Vercel for hosting; Resend for transactional email; and Upstash for rate limiting.

We retain personal data while your account is active or as needed to provide the Service. After account deletion, models, chat history, and profile data are removed from production systems within 30 days and backups within 90 days. Billing records are retained as required by accounting and tax law.

BOHIO uses essential cookies for authentication, session security, CSRF protection, and replay-attack protection. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that identify individual users.

If you are located in the EEA or United Kingdom, you may have rights of access, rectification, erasure, data portability, restriction of processing, objection, and complaint to a supervisory authority. Contact hello@bohiotech.com to exercise these rights.

You may delete your account from Settings. Account deletion permanently removes your profile, account credentials, uploaded Excel models, workbook data, and Karaya chat history. Billing records retained by law are not deleted alongside the account.

BOHIO applies technical and organisational security measures including encryption in transit, encryption at rest where supported, row-level security, least-privilege access, rate limiting, and abuse detection. No method of transmission or storage is completely secure.

BOHIO and its subprocessors may process data outside your country of residence, including the United States. Where required, we use appropriate transfer safeguards such as Standard Contractual Clauses or adequacy decisions.

The Service is not directed at children under 16, and BOHIO does not knowingly collect personal data from children under 16.

We may update this Privacy Policy periodically. We will notify you of material changes by email or by a prominent notice within the Service. Continued use after the effective date constitutes acceptance of the updated policy.

The data controller for personal data processed in connection with the Service is BOHIO SYSTEMS LTD. This Privacy Policy should be read together with the Terms of Service, including its disclaimer and liability sections. Email: hello@bohiotech.com.