Privacy Policy

1. Controller

XSAVY GmbH (“Bomps”, “we”, “us”) is the data controller responsible for the processing of your personal data. We are a company registered in Germany and operate the Bomps platform at bomps.app and nest.bomps.app.

2. Data We Collect

We collect and process the following categories of personal data:

• Account data (name, email address, password hash)
• Profile data (display name, avatar, bio, location)
• Usage data (pages visited, features used, timestamps)
• Technical data (IP address, browser type, device information)
• Communication data (support tickets, feedback)

3. Legal Basis (GDPR Art. 6)

We process your data based on: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, and (d) our legitimate business interests.

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is deleted within 30 days of account closure.

5. Your Rights

Under GDPR, you have the right to: access your data, rectify inaccuracies, request deletion, restrict processing, data portability, and object to processing. To exercise these rights, contact us at [email protected].

6. Data Transfers

Your data is stored on servers within the European Union. If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

7. Contact

For privacy-related inquiries, contact our Data Protection Officer at: [email protected]