Privacy and data processing

Roles

Each customer organization decides which data about its sellers, prospects and customers it puts on the platform and is the controller of that data. Springboom processes it on the organization's behalf, under a data processing agreement. For accounts of organization owners, Springboom is the controller.

Isolation

Every organization's data is separated in the database by row-level security and in file storage by organization. Organizations never see each other's data. Platform staff see operational metadata only.

Uploaded material and automated processing

Documents, web pages and videos an organization adds are read on our servers to extract text with references to where it came from. Training drafts and playbook drafts are assembled from that text by rules in our software. At present no third-party language model provider receives customer material. If that changes, this page and the list below will name the provider before it is used. Customer material is never used to train models.

Every prepared item is a draft. Nothing is published to sellers until a person at the organization approves it.

Subprocessors

• Database and application hosting: Chosen at production setup; recorded in the deployment runbook before launch
• Transactional email: Resend (sign-in links, invitations)
• Platform billing: Stripe (subscription payments of organizations)
• File storage: S3-compatible object storage (private bucket)

Your rights

Organization owners can export all of their organization's data and delete the organization in Settings. Sellers and prospects can ask the organization that holds their data to access, correct or erase it; the organization can do so in the platform.

Hoogland Strategy, handelend onder de naam Springboom · Herengracht 449A, 1017 BR Amsterdam · KvK 90997727 · hello@springboom.com

This page describes how the software works. It is not a certification of legal compliance.