Bossanova

Translation notice: This page is translated from Korean. You can also read the Korean source using the language menu. Your statutory rights remain unchanged regardless of language.

Optional sharing of values: ‘Not secret’ is off by default. Once you confirm the warning and turn it on, approved AI connections can read the original value. This is separate from permission to use a private value. The AI service's processing and retention policies apply to values it receives.

Values already sent to AI cannot be recalled by turning this setting off later. Choose carefully before sharing. Turning it off blocks future reads of the original value, but cannot recall values in transit or already delivered. Editing a value preserves your sharing choice. Turn this setting off before entering a new secret. Restoring a backup as a new vault resets AI connections, access and sharing settings.

1. Information collected

Account and security: email and profile, sign-in, session and authentication records, IP address and browser information, approved device names, types and timestamps, random vault identifiers, and administrators' account actions. Vault identifiers do not reveal vault contents or file paths.
If you choose Google sign-in, we receive your Google account identifier, verified email, name and profile image for account authentication. We do not request access to your mailbox, Drive or vault.
If you sign in with Apple, we use your Apple account identifier, verified email or Hide My Email address, and the name you provide when first granting access to authenticate your account. We do not receive your Apple account password or iCloud data.
Billing and support: Paddle customer, transaction and subscription identifiers, payment and refund amounts and status, access-pass redemption records, and information you include in support requests. tinygem does not receive full card numbers.
Site visits: cookie-free aggregate statistics from Vercel Web Analytics (pages, countries and device types).
AI connections: tinygem does not relay vaults or AI tasks. Allowed labels, shared values, project files and command results travel from your PC to your chosen AI service. ChatGPT connections use OpenAI's tunnel. That service processes information under its own terms and privacy policy.

Social sign-in tokens are used to link and authenticate your account and are deleted with it.

Registration: the version of the Terms of Service accepted at initial signup and the time of acceptance. Signing in to an existing account or creating an account through an administrator is not recorded as acceptance of new terms.

Vercel may process technical records, such as IP addresses from website visits and app update requests, for security and content delivery. Update requests do not send vault contents or account tokens.

2. The vault and authorized use of values

Bossanova provides software and account/subscription services that store secrets encrypted on your PC, restrict the default private AI tool path from returning raw secrets, and let a local executor use values for approved tasks. Vault files, raw secrets and decryption keys are not uploaded to the account server. Labels, descriptions and task information you permit may pass through AI connections, and values needed for tasks are sent to approved destinations.

Programs and child processes receiving values through environment variables or temporary files can read the actual values and write them to files or send them over the network. This includes AI-written code. Output redaction reduces accidental disclosure of supported value forms; it does not guarantee blocking arbitrary transformations or exfiltration.

Automatic approval skips the prompt for each execution request. AI activity can extend automatic locking; lock the vault manually when you need work to stop while you are away. If a value is saved to an approved service, the AI may be able to retrieve it by reading that service later.

Do not put secrets in names or descriptions shared with AI. Information you view, copy or export to backups may remain in the locations you choose.

Separate AI access to screens, files or memory, or an OS compromise, can expose information outside Bossanova’s tool path. For limits and guidance, see the Secret Protection Guide.

Cookies: we use cookies needed for sign-in and security. Your chosen language is stored for one year; you can clear cookies in your browser. Blocking essential cookies may prevent sign-in. We do not use advertising cookies.

Sign-in cookies are valid for seven days and are extended when your session is refreshed.

3. Purposes of use

We use personal data for account authentication, subscription entitlements, device limits, abuse prevention, billing, refunds, customer support and service notices. We do not sell personal data or share it for targeted advertising.

We process personal information needed to create and authenticate your account and approve devices to enter into and perform the service contract (Article 15(1)(4) of South Korea’s Personal Information Protection Act). Reading this policy or signing up does not consent to marketing or optional processing. Where separate consent is required, we explain the relevant processing and ask for your choice in that feature.

Where the GDPR applies, account and subscription processing relies on performance of a contract, statutory retention on legal obligations, and security and fraud prevention on legitimate interests balanced against your rights. Optional processing that requires consent is subject to separate consent.

4. Storage and service providers

Neon and Vercel provide account and subscription data storage and site hosting. Brevo (primary) or Resend (backup) sends email. At checkout, Paddle acts as the Merchant of Record and processes payment information under its own privacy policy.

Only information needed for authentication and service delivery is sent to our processors over encrypted connections during signup, sign-in and email delivery. Safe files and master passwords are excluded. Account and terms acceptance records are retained while the account is active and deleted on request, except where retention is required by law. Processor logs and backups follow their respective retention and deletion policies.

We disclose overseas processing and storage necessary for the contract under Article 28-8(1)(3) of South Korea’s Personal Information Protection Act. You can request that processing stop or data be deleted at support@tinygem.ai. If you decline processing of essential account information, we cannot provide registration, sign-in or account-based features. The provider notices below describe their processing, contact details and retention policies.

Neon stores account, session, device and terms acceptance records in a Singapore-region database. Vercel handles web requests and authentication on servers in Singapore; its delivery network and operational logs may be processed on global infrastructure, including the United States.

Brevo processes your recipient email address, verification message and delivery records when you choose email authentication. It stores data in France, Germany and Belgium. If we use our backup provider Resend, it processes the same items in the United States, with email and log retention of 30 days on standard plans. We do not send to both providers at once.

Neon · Vercel · Brevo · Resend · Paddle

Account, authentication, device and terms acceptance records are kept while your account exists and deleted when you delete it. Paddle maintains its transaction records separately from your Bossanova account. Korean statutory retention periods are five years for contracts, withdrawals and payments, and three years for consumer complaints and disputes.

Processed payment notifications and authentication email delivery records are cleaned up after 90 days when the next relevant request is received. Unprocessed payment notifications and dispute or abuse investigation records may be retained until resolution. Records are deleted when there is no remaining basis to retain them. Provider backups expire under each provider’s retention policy.

A minimal subscription identifier and closure timestamp are retained separately to prevent late payment notifications from reactivating a deleted account. This record does not retain your email or notification content. This minimal closure record has no automatic expiry period.

We protect personal information with access controls, encrypted transport, administrator authentication and security records. If a personal data breach is confirmed, we notify supervisory authorities and affected users as required by applicable law. The Secret Protection Guide explains the vault's local security boundaries.

5. Rights and contact

Privacy and complaints contact: tinygem customer support, support@tinygem.ai. The phone number is shown at the bottom of this page.

tinygem is the data controller. Its business address and phone appear at the bottom of this page; privacy requests go to support@tinygem.ai. Your account lets you unlink devices, manage subscriptions and delete your account. Subject to applicable law, you may request access, correction, deletion, portability, restriction, objection or withdrawal of consent. We verify identity and respond within the legally required period. Withdrawal does not affect the lawfulness of earlier processing. We do not penalize you for exercising your rights.

In Korea, report privacy concerns at privacy.kisa.or.kr (118) or request dispute mediation at kopico.go.kr (1833-6972). EEA and UK users may complain to the data protection authority where they live, work or where the alleged infringement occurred.