Effective date: April 17, 2026
This is the privacy statement of Ruby Foundry B.V., trading as Boei, hereinafter: Boei. Boei is registered at the Dutch Chamber of Commerce with number 99995662 and is located at Mulderstraat 35 (3581GP) in Utrecht (The Netherlands). This document explains how Boei handles the processing of your personal data. Boei takes the greatest possible care when processing your personal data.
If you use the services of Boei, you provide a number of personal data to Boei yourself, or personal data is obtained from you in the context of the agreement. Personal data is understood to mean all data relating to an identified or identifiable natural person.
Boei processes the following categories of personal data:
The purpose of the personal data processed by Boei is to:
The processing of personal data is only possible on the basis of the following principles: (i) legal obligation, (ii) execution of the agreement, (iii) obtained (explicit) consent from the data subjects, and (iv) legitimate interest. Personal data is processed when Boei provides its services. Boei only processes data that Boei deems necessary for (improving) its services and handles the (personal) data that it has collected about you and your use of the services with care. The basis for processing this data is the agreement you have entered into with Boei. Your personal data can also be processed by visiting the website www.boei.help provided you have given permission.
The processing of your personal data is necessary to be able to carry out the service. The services that Boei offers cannot be fully performed without the processing of your personal data. If your explicit permission is required for specific purposes with regard to the personal data, you must give permission for this separately.
Boei does not make automated decisions that produce legal or similarly significant effects on data subjects within the meaning of Article 22 GDPR. Automated AI responses are generated by the chatbot on behalf of our customers (who act as Controller), but the Controller remains responsible for any material decisions resulting from those interactions. Where AI features are enabled, you can always request human review by contacting the website operator or Boei.
Boei offers optional AI-powered features such as chatbot responses, summarisation, and translation. When these features are enabled by the customer, the content processed (for example, visitor questions and knowledge base content) is sent to a third-party AI model provider (OpenAI, Anthropic, or Google, depending on configuration) via their API for processing. These providers process data transiently to generate a response and do not use input or output data for model training. For details on which providers are used and the safeguards in place, see our Data Processing Agreement and our Sub-processor list.
Boei primarily hosts and stores personal data within the European Economic Area (EEA). Some of our sub-processors are established in the United States and may process personal data outside the EEA. These transfers are made in reliance on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs), supplemented by appropriate technical safeguards such as encryption in transit and at rest. For the full details of our transfer mechanisms, see our Data Processing Agreement.
Boei retains personal data only as long as necessary for the purposes described in this statement, or as required by law. The following general retention periods apply:
If a longer retention period is necessary on the basis of legislation or regulations, personal data will be kept longer in accordance with those requirements.
Boei only shares personal data with third parties if this is strictly necessary for the execution of an agreement and to comply with relevant laws and regulations. No personal data is sold. Boei may have a legal obligation to share personal data with third parties. If personal data is shared with third parties, processing agreements are therefore concluded.
For a current, detailed list of the third parties we share data with (including their names, purposes, data categories, and processing locations), see our Sub-processor list.
Boei takes the protection of your personal data seriously and takes the protection of your personal data seriously, taking into account the state of the art, implementation costs, as well as the nature, scope, context and the processing purposes and the risks to the rights and freedoms varying in likelihood and seriousness. persons, appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
If you are a minor - meaning younger than 16 under Dutch law, or younger than the applicable age of digital consent set by the law of your country of residence (which can range from 13 to 16 across EU/EEA member states under Article 8 GDPR) - you may only give permission for the processing of your personal data with the permission of one of your parents or legal guardian. It is then important that your parent(s) or guardian read this statement. They can also exercise the rights you have with regard to the personal data you leave with us, such as the right to object to the (further) processing of your personal data or the right to access and correct your data.
You can register via the website for a newsletter and/or for other commercial offers. When you register, Boei requests permission to process your email address for the purpose of sending you marketing emails containing the latest information about products and services, special offers and marketing campaigns. You will only receive marketing emails if you have given your consent.
Your consent also includes your consent that Boei may personalize the content of marketing emails in accordance with your needs and interests based on any user profile created for you.
You can withdraw your consent to receiving marketing emails at any time by clicking "unsubscribe" at the bottom of the marketing email. Withdrawing consent does not affect the lawfulness of processing carried out prior to the withdrawal of consent.
This privacy statement does not apply to websites of third parties that are connected to this website by means of links. Boei cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. Boei recommends that you read the privacy statement of these websites before using these websites.
Boei uses helpers to link the software to, for example, WhatsApp, Facebook Messenger, etc. The privacy policy and cookie statement of the relevant company applies to the use of helpers from other companies (third parties).
As a data subject you have the following rights:
If you have a complaint about the way in which Boei handles your personal data, or if you wish to exercise one of the above rights, you can contact us via the website or by e-mail at [email protected]. To confirm your identity, Boei will typically verify your request via the email address on your account. We will only request additional identification (such as a redacted copy of an identity document with passport photo and MRZ blacked out) where there is a clear indication of fraud or where the request would otherwise pose a significant risk to another person's rights. Boei will respond to your request as soon as possible, but at the latest within 4 weeks. You can also submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which is the competent enforcement body: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.
Boei can change the privacy statement at any time. The most recent version is published on the website. Therefore, always keep an eye on the website for the most recent version. If the new privacy statement has consequences for the way in which Boei processes already collected data relating to you, Boei will inform you by e-mail.