Privacy Policy

Who We Are

BOOJEE Estate operates at BOOJEE.estate and provides services including AI Front Desk, BOOJEE Clean, BOOJEE Security, BOOJEE Maintenance, BOOJEE Rides, BOOJEE Stays, Credit Autopilot, cloud hosting, and digital information products. Primary contact: office@BOOJEE.estate.

Information We Collect

We collect information you provide directly when you:

• Submit a lead or application form — name, email address, phone number, business name, and situational information you provide
• Contact us by email — name, email address, and message content
• Purchase a product or book a service — name, contact info, property address, project description
• Create an account (e.g. AI Front Desk self-serve signup) — name, email address, and a securely hashed password. We never store your password in plain text.
• Subscribe to a membership or recurring service
• Apply as a contractor or service partner — business info, license/insurance details, contact info

We also automatically collect standard web server log data — including IP address, browser type, pages visited, and referring URL — for site performance and security purposes only.

We do not directly process or store payment card information. All payments are handled by Stripe, Inc., a PCI DSS-compliant third-party processor. See Stripe's Privacy Policy.

CCPA/CPRA Categories of Personal Information

For California residents, the categories of personal information we collect are:

• Identifiers — name, email address, phone number, IP address
• Commercial information — services inquired about, purchase history
• Internet or network activity — pages visited, browser type, referring URL (server logs only)
• Professional or employment-related information — business name, role, industry (from application forms)
• Communications content — messages you send us

We do not collect sensitive personal information as defined under CPRA (e.g., Social Security numbers, financial account credentials, precise geolocation, biometric data) except where explicitly required for a specific service and separately disclosed. One such disclosure: the Forecast app may request your browser's geolocation, with your permission, to show local conditions — those coordinates are sent to Open-Meteo to fetch local sky and weather data and are not stored on our servers.

How We Use Your Information

We use personal information to:

• Schedule and deliver purchased services
• Communicate with you about your order, booking, or application
• Deliver digital products (PDF guides, reports) via email
• Manage service subscriptions and recurring billing
• Route service requests to our internal operations team
• Send order confirmations, receipts, and service updates
• Vet and qualify contractor or partner applicants
• Improve our website and services based on aggregate usage patterns

Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA) and United Kingdom, our legal bases for processing personal information are:

• Contractual necessity — processing required to fulfill a service you have purchased or applied for
• Legitimate interests — site security and performance, fraud prevention, internal operations, responding to inquiries
• Consent — where we request optional consent (e.g., SMS marketing), which you may withdraw at any time
• Legal obligation — where processing is required by applicable law

We do not sell your personal information to third parties. We do not use your information for behavioral advertising targeting.

Third-Party Services and Data Sharing

We share personal information only with the following service providers, solely to the extent necessary to operate our services:

• Stripe, Inc. — Payment processing (name, email, payment amount). Privacy Policy.
• Amazon Web Services (AWS) — Website hosting, file storage, and API routing. Form submission data (name, email, phone, business info) passes through our AWS API Gateway and is stored in DynamoDB with an S3 backup. Account sign-in (email and hashed password) is managed by Amazon Cognito. AI chat and AI Front Desk conversations are processed by Amazon Bedrock (an AWS AI service) to generate responses — see "AI Features and Conversation Data" below. All data is stored in the US-East-1 region. Privacy Policy.
• Zoho Mail — Human email correspondence (office@BOOJEE.estate). Privacy Policy.
• Amazon Simple Email Service (SES) — Automated transactional email (order confirmations, receipts, account notices). Part of AWS; see AWS Privacy Policy above.
• Telegram — When you submit a lead or application form, your name, email, phone, and message are transmitted to our internal BOOJEE operations channel via Telegram's API as an internal alert. This is an internal-only notification to our team; your data is not posted publicly or shared with third parties through Telegram.
• Google Fonts — Web typography (CSS and font files served by Google). Google may log your IP address when your browser requests fonts. Privacy Policy.
• Printify, Inc. — Print-on-demand merch fulfillment. When you order a physical merch item, your name and shipping address are shared with Printify to produce and ship your order. Privacy Policy.
• OpenRouter — Optional and user-initiated only. If you use the Forecast app's AI-reading option with your own API key, your birth/natal inputs are sent to OpenRouter to generate the reading. Nothing is sent to OpenRouter unless you choose this option. Privacy Policy.

AI Features and Conversation Data

Our AI chat and AI Front Desk features store conversation transcripts, along with the visitor's IP address, and process them via Amazon Bedrock to generate responses. Transcripts may be reviewed by our team to improve service quality. Please avoid sharing sensitive personal information in AI chat conversations.

The Forecast app's optional AI-reading feature, if used with your own API key, sends your birth/natal inputs to OpenRouter. This happens only when you initiate it.

Companion Care & Care Circle Wellness Data

If you (or a loved one, with their agreement) enroll in the AI Companion's optional Care Mode, we collect additional wellness information, and we want to be unusually plain about it:

• What is collected: daily self-reported check-in answers (mood, sleep, meals, medication taken, pain level, an optional note), responses to standardized well-being questionnaires, and conversation memory that lets the companion remember you between sessions. Nothing is collected before explicit consent is recorded.
• Who it is shared with: only the caregiver or family member the enrolled person designates during setup. They may receive alert emails and a weekly wellness summary. Summaries and alert emails contain engagement and routine information in plain language — never conversation transcripts, note contents, or raw questionnaire scores. We never sell this data, never use it for advertising, and never share it with anyone the enrolled person did not designate.
• How it is protected: encrypted in transit (TLS) and at rest (customer-managed AWS KMS keys on all Care Mode data tables), with scoped access and an audit log of every access and change.
• Your controls: Care Mode can be turned off at any time in the companion's settings, which stops collection and caregiver updates. You may export your Care Mode data or request full deletion (a limited audit trail of the deletion itself is retained). A designated caregiver can stop receiving updates by replying to any update email.
• What this is not: the consumer Care Mode is a general-wellness feature, not a medical service, medical device, or emergency-monitoring system, and it is not covered by HIPAA (we are not your health-care provider or health plan). Where we contract with a health plan or provider organization, HIPAA obligations are established under a signed Business Associate Agreement for that deployment.

Cookies and Tracking

We operate our own first-party analytics (page views and button clicks) to understand site usage. It records the page path, event type, and referring domain — no cookies, no device fingerprinting, and no personal identifiers are attached to these on-site records. (Email engagement tracking, described below, is the exception: it is attributed to the individual recipient.)

This website uses browser localStorage for basic functionality: shopping cart state (bje_cart), signed-in session tokens for account holders (set only after you log in), and your cookie-notice decision (bje_consent). Our checkout page also sets one first-party boojee_cart cookie as a legacy fallback for the cart. We do not use third-party tracking cookies for advertising or behavioral targeting. Web server logs record IP addresses and browsing activity for security and performance purposes only; these are not cookies.

On your first visit, you'll see a brief, dismissible cookie notice at the bottom of the page — it is informational only, does not block any part of the site, and your choice is remembered in localStorage so it won't show again. If we integrate advertising or analytics services in the future, this policy will be updated before deployment and required opt-in consent mechanisms will be displayed. See our Cookie Policy for the complete list of cookies and storage used.

Email Engagement Tracking

Our marketing, outreach, and newsletter emails may include an open-tracking pixel and rewritten click-tracking links. When you open one of these emails or click a link in it, that engagement is recorded and attributed to you as the individual recipient. We use this to understand which messages are useful and to stop emailing people who aren't interested. You can stop receiving marketing email at any time via the unsubscribe link in any message or by emailing office@BOOJEE.estate.

Do Not Track and Global Privacy Control (GPC)

We honor Do Not Track (DNT) signals and Global Privacy Control (GPC) signals. Because we do not use behavioral advertising cookies or cross-site tracking, these signals have no additional practical effect — there is no tracking activity to disable. Your data is processed the same way regardless of these signals.

Data Retention

We retain personal information for as long as necessary to provide services and comply with legal obligations:

• Order and customer records: 3 years for accounting and dispute purposes
• Application and inquiry records: 12 months from last contact
• Server logs: 90 days

You may request deletion of your personal information at any time by emailing office@BOOJEE.estate. We will respond within 30 days.

Your Privacy Rights

Depending on your jurisdiction, you have the following rights:

• Right to access — request a copy of the personal information we hold about you
• Right to rectification — request correction of inaccurate or incomplete information
• Right to erasure — request deletion of your personal information ("right to be forgotten")
• Right to restriction — request that we restrict processing of your information
• Right to data portability — request your personal information in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing
• Right to opt out of sale — we do not sell personal information; this right is satisfied by design
• Right to non-discrimination — exercising your privacy rights will not affect your access to our services

To exercise any of these rights, email office@BOOJEE.estate with the subject line "Privacy Rights Request." We will respond within 30 days (or 45 days if additional time is needed, with notice). California residents may also contact us using the details below to submit a CCPA verifiable consumer request.

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, contact us immediately at office@BOOJEE.estate for immediate deletion.

Security

We use industry-standard measures to protect your information, including HTTPS/TLS encryption on all pages, access controls on infrastructure, and AWS security best practices. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security against all threats.

International Transfers

Our services are operated from the United States. If you are located outside the US, please be aware that information you provide will be transferred to and processed in the US. By using our services, you consent to this transfer. We take reasonable steps to ensure your data is treated securely.

Changes to This Policy

We may update this policy as our services evolve. Material changes will be noted with a revised "Last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact

Privacy questions, rights requests, or complaints:
Email: office@BOOJEE.estate
Website: BOOJEE.estate
BOOJEE Estate

EU/UK residents who are not satisfied with our response may lodge a complaint with their local data protection supervisory authority.