Privacy Policy

1. Who we are

Boutique Hub OS (“BHOS”) is a business operating platform for boutique retailers, provided by The Boutique Hub. This policy describes how the BHOS application (boutiquehub.bhos.ai) collects, uses, and protects your information. It supplements The Boutique Hub’s general privacy policy, available at theboutiquehub.com/privacy-policy. Questions? Contact us at HappyPeople@theboutiquehub.com.

2. Information we collect

• Account information — your name, email address, and store details when you create a BHOS account.
• Store and commerce data — data from integrations you choose to connect (for example Shopify, Meta, or Google services), used solely to power the BHOS features you use.
• Usage data — how you interact with BHOS, used to operate, secure, and improve the product experience.

3. Google user data

If you choose to connect a Google account, BHOS requests only the scopes needed for the specific feature you are connecting:

• Google Calendar (calendar.readonly, calendar.events) — to view your calendar availability and create or update events so coaching calls and appointments can be scheduled from BHOS.
• Google Analytics (analytics.readonly) — to read your own Google Analytics 4 reports (sessions, traffic sources, device breakdowns) so BHOS can show your website traffic alongside your commerce data and answer your questions about it.
• Gmail (gmail.readonly) — to read emails from your vendors (order confirmations, shipping notices, and invoices) and turn them into items in your BHOS dashboard: a draft purchase order, a delivery reminder, or a note that a vendor is waiting on your reply. Read-only: BHOS never sends, deletes, labels, or changes your email.

How BHOS handles your Gmail data. BHOS reads the last two weeks of your inbox, leaving out Gmail’s Promotions and Social tabs. For each email that looks like it came from a vendor, it keeps only what your dashboard shows: the sender, the subject, a one-sentence summary, and any order lines, order number, or ship date the email states. It never stores the full text of an email. To write the summary and read the order lines, the email’s text is sent to our AI provider, Anthropic, which processes it only to return that result to BHOS. Email text goes to Anthropic only, never to another AI provider. Anthropic may not use it to train its models, and deletes it within 30 days, unless the law requires it to keep it longer or it keeps it longer to investigate a violation of its usage policies. When you disconnect Gmail in Settings, BHOS revokes its access with Google and deletes everything it stored from your email.

Emails you forward to BHOS. Each store can also get a private forwarding address. BHOS accepts mail there only from members of your store whose sending address it can verify, and ignores everything else. From each forwarded vendor email it keeps the same few details described above, never the full text, and it sends the email’s text to Anthropic on the same terms. Forwarded emails are not received through Google, so they are not Google user data. When you turn forwarding off in Settings, BHOS removes the address and deletes everything it kept from emails you forwarded.

BHOS’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

BHOS’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

In practice, this means:

• We use Google user data only to provide and improve the user-facing features described above — never for advertising, and we never sell it.
• We do not use Google user data — raw, aggregated, anonymized, or derived — to develop, train, or improve foundational or generalized artificial intelligence or machine learning models.
• When BHOS’s AI assistant answers a question using your connected Google data (for example, a question about your own site traffic), that data is processed only to generate the answer for you. Our AI model providers may not use it to train their models. They delete it within 30 days, unless the law requires them to keep it longer or they keep it longer to investigate a violation of their usage policies.
• We transfer Google user data to third parties only as necessary to provide these features (for example, our hosting and database providers), for security purposes, to comply with applicable law, or with your explicit consent.
• No human reads your Google user data unless you ask us to for support, it is required for security or abuse investigation, or we are required to by law.

4. Meta (Facebook and Instagram) data

If you choose to connect a Meta account, BHOS requests only the permissions needed to show you your own advertising results and to build ads on your behalf:

• ads_read — to read your ad accounts, campaigns, ad sets, and their performance metrics (impressions, clicks, spend, reach, conversions) so BHOS can show your advertising results alongside your commerce data and answer your questions about them.
• ads_management — to create an ad in an ad account you already own, when you ask BHOS to publish one you have built in the Ad Wizard.
• pages_show_list — to list the Facebook Pages you manage, so an ad BHOS publishes for you appears under your own Page.
• pages_read_engagement — Meta requires this alongside ads_management for apps that create ads on a Page. BHOS does not use it to read your Page posts, photos, comments, followers, reactions or Page insights.

That is the whole list. BHOS does not read your Page posts or their engagement, and does not ask to manage your Business Manager assets.

What we store, and what we do with it:

• We store your Meta user ID and name, the list of ad accounts and Pages you have access to, and the access tokens needed to make those requests. Tokens and Page tokens are encrypted at rest and scoped to your individual store.
• We use Meta data only to provide the features described above, for the store that connected the account. We do not sell it, and we do not use it to target advertising to you.
• If your store is a Boutique Hub Black member, your Boutique Hub coach can also see your store’s Meta ad performance (spend, budget, results and account health) so they can coach you on it. Coaches see aggregate figures only, never your customers’ personal data, and cannot change your ads.
• We do not use Meta data — raw, aggregated, anonymized, or derived — to develop, train, or improve foundational or generalized artificial intelligence or machine learning models.
• When BHOS’s AI assistant answers a question using your connected Meta data (for example, “how did last month’s campaign perform?”), that data is processed only to generate the answer for you. Our AI model providers may not use it to train their models. They delete it within 30 days, unless the law requires them to keep it longer or they keep it longer to investigate a violation of their usage policies.
• We transfer Meta data to third parties only as necessary to provide these features (for example, our hosting and database providers), for security purposes, to comply with applicable law, or with your explicit consent.
• No human reads your Meta data unless you ask us to for support, it is required for security or abuse investigation, or we are required to by law.

5. Storage and security

OAuth tokens and integration credentials — including Google tokens and Meta user and Page tokens — are encrypted at rest and scoped to your individual store, so no other BHOS store can access them. All data is transmitted over encrypted (TLS) connections. Access to production systems is restricted to authorized The Boutique Hub personnel.

6. Retention, disconnection, and deletion

Disconnecting a single integration. You can disconnect any integration at any time from Settings → Integrations in BHOS. Disconnecting deletes the stored credentials for that integration, including any access tokens.

You can also revoke BHOS’s access from the provider’s own settings:

• Google — Google Account permissions.
• Meta — Facebook Business Integrations. Removing BHOS there revokes the access tokens immediately.

Deleting your whole account. In the BHOS mobile app, open Settings and choose Delete account. This signs you out of every device straight away and schedules your account and all associated store data — including any connected-integration credentials — for permanent deletion. There is a short grace period before the erasure runs, so an accidental tap can be undone: contact us within that window and we will cancel it.

You can also request deletion at any time by emailing HappyPeople@theboutiquehub.com, and we will action it for you.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date above, and we will notify you of significant changes through the app or by email.