Privacy Policy
This page describes what information BobaSync collects, how we use it, who we share it with, and the choices you have. We aim for plain English. If anything is unclear, email support@bobasync.com.
1. Who we are
BobaSync LLC ("BobaSync," "we," "us," "our") is a limited liability company based in San Diego, California, USA, and operates under the trade name "BobaSync." This policy covers bobasync.com, app.bobasync.com, and any related BobaSync services.
2. Information we collect
Information you give us
- Account information: name, email address, business name, role (store owner / employee / supplier), and city when you sign up.
- Business data: when you use the app, you may submit inventory items, supplier information, orders, invoices, delivery zones, employee details, messages, and similar operational records.
- Communications: when you email, message, or call us we keep a record so we can respond and improve our service.
Information collected automatically
- Usage data: pages viewed, features used, and approximate timing. We use this to improve the product.
- Device and connection data: IP address, browser type, operating system, and referring URL. Standard server-side logging.
- Cookies: we use essential cookies to keep you signed in. We do not run advertising trackers.
3. How we use information
- To provide and operate the BobaSync platform
- To authenticate you and secure your account
- To respond to your support requests and feedback
- To improve features and develop new ones
- To send service-related emails (billing, security, important changes). We do not send marketing emails without your consent.
- To comply with legal obligations
3a. SMS / text message communications
If you provide a phone number and enable the SMS notifications toggle in your BobaSync account settings, we will send transactional text messages to that number for the following purposes:
- New order alerts — when a store places an order with you, or your supplier accepts/declines your order
- Delivery schedule changes — when a delivery date or time window is set, updated, or rescheduled
- Payment confirmations — when a payment is recorded or verified between you and your counterparty
- Dispute updates — when an issue is reported or resolved on one of your orders
Message frequency varies based on your order activity — there is no fixed cadence. Message and data rates may apply from your mobile carrier. BobaSync does not charge for SMS itself.
To opt out at any time, reply STOP to any BobaSync text message, or disable the SMS notifications toggle in your account settings. You will receive a confirmation message after opting out and no further texts. For help, reply HELP to any BobaSync text, or email support@bobasync.com.
SMS is delivered via Twilio. Twilio processes the message content and your phone number solely to deliver the message — they do not use it for marketing. Mobile carriers (the company that owns the cellular network your phone is on) are not liable for delayed or undelivered messages. We do not share your phone number with third parties for marketing purposes, and we do not sell it.
Consent to receive SMS is not a condition of using BobaSync. You can use the full platform with email-only notifications.
4. Who we share information with
We do not sell your information. We share it only with the service providers we use to run BobaSync, and only what each one needs to do its job:
- Vercel — website and app hosting
- Supabase — database, authentication, and file storage
- Anthropic — the Claude AI assistant inside the app processes your prompts; we do not send personally identifying information to it beyond what is necessary for the assistant to respond
- Mapping & geocoding services — OpenStreetMap, Nominatim, US Census Bureau, OSRM (used only when you opt into delivery-zone features)
- Resend — transactional email delivery (notifications, support replies)
- Twilio — SMS delivery, only if you've opted into text notifications. Your phone number and the message content are sent to Twilio for delivery and nothing else.
If we are ever required to share information by law (subpoena, court order), we will do so to the minimum extent required and notify you when permitted.
If BobaSync is acquired or merged, your information may transfer to the new owner. We will notify you before that happens.
5. How we protect your data
We use HTTPS for all traffic, encrypted database storage, role-based access controls, and limit who can access production systems. No system is perfectly secure, but we treat your data the way we'd want our own treated.
6. Your rights
You can:
- Access the data on your account at any time inside the app
- Correct or update your information yourself, or by emailing support@bobasync.com
- Delete your account, which removes your personal data within 30 days (some records may be retained longer if required for legal or financial obligations)
- Export your data in CSV format on request
- Opt out of any non-essential email by replying with "unsubscribe"
If you are in California, the EU, the UK, or a jurisdiction with similar privacy laws (CCPA, GDPR, etc.), you have additional rights including data portability, restriction of processing, and lodging a complaint with a supervisory authority.
7. Children
BobaSync is a B2B product and is not directed at children under 16. We do not knowingly collect information from children.
8. International transfers
Our service providers may store and process your data in the United States and other countries. By using BobaSync you consent to this transfer.
9. Changes to this policy
If we make material changes we will post the updated policy here, update the effective date, and (for significant changes) notify you by email or in-app.
10. Contact
Questions, requests, or complaints about this policy:
BobaSync LLC
Attn: Vincent Wee, Founder
San Diego, CA, USA
support@bobasync.com