The short version.
- We collect what it takes to run your workspace: who your people are, what they put in, and how the app is used.
- We do not sell personal information, show ads, or use your content to train AI models.
- Your company decides what goes into its workspace. Questions about that content usually go to your employer first.
- A short list of providers helps us run BOSS: Google Cloud for hosting, Stripe for payments, and the AI provider your company chooses, if any.
1. Who we are
BOSS is made by LampyrLabs, LLC, a Texas limited liability company based in Fort Worth, Texas ("LampyrLabs", "we", "us"). This policy covers the BOSS apps, the BOSS website and related services (the "Service"). It should be read with our Terms of Service.
2. Your company and us
BOSS is used by companies. The company that owns a workspace (the "Customer") decides who is invited and what goes in it. For that content, the Customer is in charge of the information and we process it on the Customer's behalf and under its instructions. If you use BOSS through your employer and have a question or request about what is in your company's workspace, start with your employer; we will help them respond.
For information we handle for our own purposes, such as running sign-up and billing, operating the website, and keeping the Service secure, LampyrLabs is responsible.
3. What we collect
Account information. Your name, email address and password when you sign up or accept an invitation. Passwords are handled by our sign-in provider and are never stored by us in readable form. We also record your role in the workspace and the teams you belong to.
Workspace content. What you and your colleagues enter or import: the vision, priorities, scorecard numbers, issues, to-dos, meeting notes, ratings and headlines, the accountability chart, process documents, quarterly conversation notes, values and fit ratings, and company checkup answers. Some of this is about people, such as who owns a priority or how someone was rated in a quarterly review. Company checkup answers are kept server side and shown in the app only as totals.
Meeting transcripts. When the note-taker is used, what is said in the meeting is turned into text and kept with the meeting. Parts that look personal or sensitive are held back from the notes, visible only to the person who said it and the workspace leaders, and deleted for good when confirmed or 72 hours after the meeting ends. Workspace leaders can delete a meeting and its transcript at any time.
Billing information. The company name, billing contact, plan, number of people billed and invoice history. Card details are entered directly into Stripe's secure form. We see only the card brand, last four digits and expiry date, never the full number.
Usage information. When people sign in and are active, which features are used, meeting dates and ratings, AI usage counts, and records of sensitive actions such as invitations, role changes and support access. We use this to run the Service, help customers, bill correctly and spot misuse.
Technical information. Like most online services, our hosting provider logs IP addresses, browser and device type, and request times when the Service or website is used. These logs help us keep the Service working and secure.
Connector and AI settings. If an owner connects another system or an AI provider, we store the credentials or API key they enter, server side only, along with the settings they choose.
Messages to us. What you send when you contact us for help.
We do not ask for, and the Service is not designed to hold, health records, payment card numbers, government ID numbers or similar sensitive information. Please do not enter them.
4. How we use it
- To provide the Service: show your workspace to the people in it, run meetings, calculate scorecards, send the in-app alerts you see, and keep everyone's view in sync.
- To run the features your company turns on, such as connectors, imports and the AI assistant.
- To handle billing, including keeping the number of people billed in line with your workspace.
- To support you, including looking into your workspace during a support access period your owner grants.
- To keep the Service safe: preventing abuse, investigating security issues and enforcing our terms.
- To improve the Service, using usage information that is combined so it does not identify a person or company.
- To send account and service messages in the app or by email, such as billing notices and important changes. We do not send marketing email to people in your workspace without their consent.
- To meet legal obligations.
We do not sell personal information, share it for targeted advertising, or use workspace content to train AI models.
5. Who we share it with
We share information only as described here.
- People in your workspace. What you enter is visible to others in the workspace according to their access level. Some items, such as quarterly conversation notes and values and fit ratings, are visible only to the person they are about and to the managers, leaders and owners of the workspace.
- Service providers. Companies that help us run BOSS and may only use the information to provide their service to us:
- Google Cloud and Firebase (Google LLC): hosting, database, sign-in, server functions and logs, in the United States.
- Stripe, Inc.: payments, invoices and payment method storage.
- Google Fonts: the website and app load fonts from Google, which receives your IP address when it serves them.
- Resend, Inc.: sending account and notification emails.
- Recall.ai, Inc.: only when someone sends the meeting note-taker into a Teams, Zoom or Google Meet call. It joins the call, turns speech into text and sends the text to BOSS.
- Providers your company chooses. If an owner turns on the AI assistant, content needed for each AI request goes to the AI provider whose key they connected (Anthropic, OpenAI or Google). If an owner sets up a connector, we exchange data with that system. If a person connects their Microsoft 365 account, BOSS reads their calendar to find meeting links and reads Teams meeting transcripts; it cannot send email or change anything there. When someone listens in the room, the browser's own speech service (Google in Chrome, Microsoft in Edge) turns speech into text. These providers handle the data under their agreements with your company.
- Legal and safety reasons. When we believe in good faith that the law requires it, or to protect the rights, safety or property of our customers, the public or LampyrLabs. Where allowed, we will tell the affected customer first.
- Business transfers. If LampyrLabs is involved in a merger, acquisition or sale of assets, information may transfer as part of it, still covered by this policy's promises.
6. AI features
AI features are off until a workspace owner connects an AI provider and turns them on. When someone uses the assistant, asks for help with a priority, or when a meeting recap or number suggestion is written, we send the request and the relevant workspace content to that provider and show the answer in BOSS. We keep a count of AI requests and their size for the owner's usage view. We do not send AI providers your password or billing details.
How the AI provider stores and uses that content is set by its terms with your company. The major providers do not use API content to train their models by default, but your company should check its own settings with the provider.
7. Cookies and storage
The BOSS app stores a sign-in token in your browser so you stay signed in, and remembers small preferences such as light or dark mode. These are needed for the app to work. We do not use advertising cookies, and the website does not run third-party analytics or tracking.
8. Security
We protect information with encryption in transit, access rules that keep each workspace separate, server-only storage for connector credentials and AI keys, time-limited support access that owners control, and audit records of sensitive actions. We limit staff access to what is needed to run and support the Service. No system is perfectly secure; if an incident affects your information, we will notify the affected customer as the law requires.
9. How long we keep it
- Workspace content is kept while the workspace is active. After a workspace ends, the owner has 30 days to ask for an export, and we delete the content from the live Service within 90 days. Backups are cleared as they expire.
- A workspace whose free trial ended without a subscription may be deleted 90 days after the trial ends.
- When someone is removed from a workspace, their account stays so the workspace history still shows who did what. They can ask us to delete their account, subject to the Customer's rights in its content.
- Billing records and audit logs are kept as long as needed for tax, accounting and legal purposes.
10. Your choices and rights
- In the app. You can update your name in Team settings. Owners can change access, remove people, turn off AI features, remove AI keys and connectors, and undo imports.
- Access, correction and deletion. Depending on where you live, you may have the right to ask for a copy of your personal information, to correct it, or to have it deleted. For workspace content, ask your company first; for anything else, contact us. We will respond within the time the law requires and may need to confirm your identity.
- No discrimination. We will not treat you differently for exercising a privacy right.
- Appeals. If we decline a request, you can ask us to reconsider by replying to our answer.
BOSS is hosted in the United States. If you use it from another country, your information will be transferred to and processed in the United States.
11. Children
BOSS is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect information from children. If you believe a child's information is in BOSS, contact us and we will remove it.
12. Changes to this policy
We will update this policy when our practices change. The date at the top shows the latest version. If a change is material, we will tell workspace owners by email or in the app before it takes effect.
13. Contact
LampyrLabs, LLC
Fort Worth, Texas
Email: support@bossforteams.com