Privacy Policy

Last updated January 1, 2026

This policy explains what personal data Boyoti collects, why, and how it is protected — both for Agency staff who use the dashboard and for the Agency's clients who use the client portal.

1. Data we collect

Account data: name, e-mail, phone number, preferred language, role and sign-in activity for Agency users and portal clients.

Workspace data entered by the Agency: properties and units, contacts, contracts, invoices, cheques, payments, maintenance requests, documents and messages.

Technical data: IP address, device and browser information, and server logs used for security, rate-limiting and diagnostics.

2. How we use it

To operate the workspace, send transactional notifications (invoices, reminders, OTP codes, maintenance updates), generate documents, provide reports and AI features, bill subscriptions and prevent abuse.

We do not sell personal data and we do not use Agency or client data to train third-party AI models.

3. Sub-processors

We rely on trusted providers to run the service: cloud hosting and storage, e-mail delivery, WhatsApp/SMS messaging, AI model providers for optional AI features, and payment processors. Each processes data only on our instructions and under contractual safeguards.

4. Retention

Workspace data is retained while the subscription is active and for a limited grace period afterwards so the Agency can export it. Logs are kept for a short rolling window. Backups are rotated on a fixed schedule.

5. Security

Data is encrypted in transit, workspaces are isolated by tenant, access is role-based and audited, passwords are hashed, and sign-in links and OTP codes are single-use and time-limited.

6. Your rights

Portal clients can review and update their profile and notification preferences in the portal and may ask their Agency to correct or delete their data. Agency administrators can export or delete workspace data from the settings area.

For privacy requests about the Platform itself contact hello@boyoti.com.

7. Cookies

We use strictly necessary cookies for sign-in sessions, language, theme and pricing-currency preferences. No advertising cookies are set on the Platform.