Privacy notice

Your information.
Handled with purpose.

Understand what information is used, how it supports the service and how to contact us about your privacy.

Last updated October 4, 2026

1. About this notice

This notice describes information associated with Boomsay's website, business communications, demo scheduling and AI reputation service for apartment communities. Personal information means information that identifies someone or can reasonably be linked to them.

Visitors and business contacts provide information directly to us. Apartment communities also determine which resident and property information they connect to the service and how they use feedback. Their own privacy notices explain their collection and use of resident information. For requests about community records, contact the property management team responsible for those records.

2. Information we handle

Information you provide

  • Demo inquiries: name, work email and company.
  • Scheduling details: time zone, selected time and information needed for the calendar invitation and Google Meet meeting.
  • Account and property information: business contacts, account and community identifiers, property context, messaging guidelines and integration settings supplied for the service.
  • Communications: information you choose to include in emails, support requests and conversations with us.

Please do not include resident information, apartment numbers, passwords or sensitive personal details in the demo form.

Information from communities and connected services

  • Surveys and private feedback: responses, comments, scores, relevant community and lifecycle context, and contact information used for authorized requests.
  • Public reviews: review text, ratings, dates, public reviewer information and source platform, together with responses and their status.
  • Connected property data: information made available through a customer's PMS connection or other authorized source to support feedback workflows.

Website requests

Requests include technical information such as an IP address, requested path, browser information and request time. Scheduling endpoints use short-lived request counts to limit repeated requests. Campaign parameters in a link, the referring page within this site and the service selected through a call to action can accompany a booking to explain how the inquiry reached us.

3. How information is used

Information supports the functions you or your community request: collecting private feedback, inviting public reviews, monitoring and responding to reviews, analyzing sentiment and recurring themes, and presenting findings in dashboards, reports and Insights chat.

Business-contact and scheduling information is used to arrange demos, create meetings, send meeting details, answer questions and follow up about the service. Information also helps investigate support issues, protect scheduling endpoints against misuse and respond to applicable legal requests.

4. Resident feedback and AI

AI and natural language processing work with survey responses, public reviews and relevant property context to identify meaning, sentiment and recurring concerns. Outputs include summaries, aggregated trends, recommendations, review responses and answers in Insights chat. A chat question and the relevant feedback context are used to produce its answer.

Comments can remain personal information even when names are omitted, and small groups of responses may reveal an individual's experience. Customers should review supporting feedback when making consequential decisions and use messaging guardrails and optional approval appropriate to their communities. AI outputs can contain errors.

Contact us for the processing-provider details and data terms applicable to your account.

Calendar privacy

5. Availability, not calendar access

The booking experience uses availability to identify open 30-minute times. A person scheduling a demo receives available times, not access to the host's calendar.

Existing event titles, descriptions, attendees, email addresses, notes, locations, calendar names, categories and meeting links are not included in public availability responses. The interface does not explain why a time is unavailable.

Scheduling requests pass through the website's server. Calendar credentials and API keys stay server-side, outside page source, browser scripts and public responses. Availability responses contain only bookable start and end times and a short-lived token validating the selection.

When you confirm a booking, the scheduling service processes your contact details, time and time zone to create the event, arrange Google Meet and send invitations and confirmation messages. Your own booked meeting's date, time and Meet link can be returned to you. No details from unrelated events are shared.

6. Providers and disclosures

The functions you request involve providers for website operation, scheduling, calendars, video meetings, email and platform processing. Providers receive the information needed for their role. Connected PMS and review services also process information under their own terms and notices.

The scheduling integration uses Cal.com to coordinate bookings, with Google Calendar and Google Meet for meetings. When you confirm a booking, these services process contact and meeting details. See the notices from Cal.com and Google.

Feedback, responses and Insights outputs are available to the customer team using the service. Publishing a review response makes it public on its destination platform; a private survey response is a separate workflow.

Information may also be disclosed when you direct us to do so or where required by law. Contact us for details about providers processing a particular account's data. Independent third-party websites govern how they handle information you give them.

7. Website technology and cookies

This marketing website does not install analytics cookies, advertising pixels or session-recording tools. Fonts and artwork are served with the site.

Demo details remain in page memory while you choose a time and are sent when you confirm a booking. The form does not save entries in browser local storage. Leaving or reloading the page can clear unsubmitted entries. Availability checks send the requested week, not your form details.

You can control cookies through browser settings. Third-party services you visit, including calendar and video-meeting services, have their own browser and cookie practices.

8. Retention and security

Retention depends on the information and its purpose, including customer relationships, support needs, booked meetings and applicable legal obligations. Invitations and emails may remain in recipients' accounts under those services' settings. Contact us about retention or deletion of a specific record.

The scheduling implementation keeps provider credentials server-side, limits public responses to booking information and validates duration before confirming a reservation. Temporary request counters and duplicate-booking safeguards use server-side storage. No system is immune to security incidents.

If you believe information has been exposed or used improperly, contact andres@boomsay.com. Do not send passwords or unnecessary sensitive information.

9. Your privacy choices

You can ask about information associated with you, request access or correction, request deletion, or ask us to stop sales follow-up by emailing andres@boomsay.com. Depending on applicable law, you may also have rights to object to or restrict processing, receive a portable copy, withdraw consent or complain to a privacy authority.

We may need information to verify that a request concerns your records. Requests can be subject to legal exceptions or need to be handled by the community that provided the data. We can help identify the appropriate contact without disclosing another person's information.

Required booking details are needed to arrange a meeting. A demo inquiry does not enroll you in an unrelated newsletter. Calendar invitations and replies to your inquiry are service communications, distinct from optional promotional messages.

The website and business demo flow are intended for adults acting in a business capacity. Contact us if a child has provided personal information through them.

10. International visitors

Privacy requirements vary by location. If your organization needs specific processing locations, transfer arrangements or contractual safeguards, contact us before connecting resident information so those requirements can be reviewed for your account.

11. Updates and contact

We update this notice when the practices it describes change. The date above identifies the current version.

For questions about Boomsay, this notice or your information, contact andres@boomsay.com. Describe your request without including unnecessary sensitive or resident information.