Boreal App privacy policy

• Registration Data: We collect your first and last name, date of birth, email, biography and profile picture when you create an account with Boreal.

Currently, Boreal does not connect your account with external social networks or receive data from those platforms.

• Retention of recordings: Boreal stores recordings of live conversations indefinitely in our database to investigate possible violations of our Terms and Conditions of Service.
• Improvement and personalization: We use your information to personalize the app experience, such as suggesting spaces for discussion of your interest or users to follow.
• Legal compliance: In case of investigations for non-compliance with the terms, we will review the recordings of the spaces in which you participated.

We share your data with external services that help us manage and store information, specifically with Amazon Web Services (AWS), which acts as a cloud storage provider.

We keep personal information and audio recordings indefinitely in our database, unless you decide to delete your account or request the deletion of your data.

You have the right to delete your information or activity on Boreal by sending an email to appboreal @com. If you decide to delete your account, any space you created will be removed from our database. However, spaces in which you participated, but not created, cannot be deleted, since they belong to the person who created them.

Boreal uses servers located within the European Economic Area (EEA) and also in other jurisdictions, such as the United States, through Amazon Web Services (AWS).

We may update this Privacy Policy when necessary. We will notify you of any significant changes through the app or by other means, as required by law.

Boreal users have certain rights in relation to their personal data under the General Data Protection Regulation (GDPR). These rights include:

• Right of access: You can request a copy of the personal data we have about you and know how we are using it.
• Right to rectification: You have the right to have us correct any inaccurate or incomplete personal data.
• Right to delete: You can request that we delete your personal data, subject to certain legal conditions. If you have created a conversation space in Boreal, you can request its complete deletion, but participations in spaces created by other users will not be deleted.
• Right to data portability: You can request that we provide you with your personal data in a structured and commonly used format, or that we send it directly to another data controller.
• Right to restrict processing: In certain circumstances, you can ask us to limit the use of your personal data, for example, if you contest its accuracy or object to its processing.
• Right to object: You have the right to object to the processing of your data at any time for reasons related to your particular situation, provided that the processing is based on legitimate interests.

The processing of your personal data at Boreal is carried out on the following legal bases:

• Fulfilment of a contract: We process your data to provide you with Boreal services, such as creating audio spaces and participating in live conversations.
• Consent: By registering with Boreal, you give us your consent to collect and use your data as described in this policy. You can withdraw your consent at any time by contacting us.
• Legitimate interests: In some cases, we process your data based on our legitimate interests, such as the continuous improvement of our services, the security of the platform and the personalization of the user experience. At all times, we consider that these interests do not negatively affect your fundamental rights.

At Boreal, we implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure. These measures include:

• Data encryption both in transit and at rest.
• Restricted access to personal data to authorized employees and vendors.
• Employee training in security and data protection best practices.
• Regular audits to ensure the integrity and security of our systems.

Boreal uses servers located outside the European Economic Area (EEA), in particular, Amazon Web Services (AWS). To ensure that your data is adequately protected, we have implemented the following measures:

• Standard contractual clauses approved by the European Commission, which establish the necessary safeguards to protect your personal data.
• We ensure that any service provider we work with complies with the security and privacy standards established in European legislation.