Privacy

This implementation-ready policy identifies the data flows that require operator-specific legal completion before launch.

Lead requests

Boom processes requirement, geography, budget, timeline, company size, contact details, and routing consent to match a request to eligible providers.

Provider accounts

Account, claim, session, profile, and billing identifiers are processed to operate claimed profiles and paid entitlements. Card data is collected by Stripe, not Boom.

Operator details required

Before launch, add the legal controller identity, address, contact details, retention periods, subprocessors, lawful bases, and data-subject request process for the actual operating entity.