Privacy Policy

Last updated: June 6, 2026 · Version 1.0

A note before you read

BocaBoca is a new product. This policy reflects our practices today. It will evolve as the platform grows. When it does, we will update the date at the top and tell you what changed before those changes take effect.

If anything here is unclear, email contact@amplificationinstitute.com. You will reach a real person, not a support queue.

The short version

BocaBoca connects customers with small, women-owned and women-operated businesses that are hard to find through ordinary search.
We collect the information you give us and some basic technical data needed to run the service.
We do not sell your data. We do not share it with advertisers. There are no advertisers.
We do not use your data to train AI models.
We use a small set of trusted services to make BocaBoca work. They are listed below.
When you contact a business through BocaBoca, you are sharing your information with an independent third party. What they do with it is governed by their own practices, not ours.
You can export or delete your data at any time by emailing us.
BocaBoca is in early access (v0). Things may change.
If you are in the EU, UK, or Argentina, specific rights apply and are listed below.

1. Who runs BocaBoca

BocaBoca is operated by Amplification Institute, Inc., a Florida C Corporation.

For any privacy question, data request, or complaint: contact@amplificationinstitute.com

2. Who uses BocaBoca

BocaBoca serves two kinds of people, and we handle their data a little differently.

Customers are people searching for and connecting with businesses.

Listed businesses are the owners and operators who create listings so the right customers can find them. Many of these businesses have specifically chosen not to be publicly findable through conventional search. Protecting that choice is a core obligation, not a feature.

A person who operates a listed business may also use BocaBoca as a customer. When someone holds both roles, we apply the relevant data practices for each role to the corresponding activity. Business account data is handled as business data. Customer activity data is handled as customer data. The two are kept separate.

Where it matters, the sections below say which group the information applies to.

3. What we collect

Information you give us directly

If you are a customer:

Account information: your email address and a password (stored hashed, never in plain text).
Personas: the contexts you set up so we can match you well. You decide what to add.
Your activity: searches you run, listings you save, and contact requests you start.
Anything you send us: support messages or feedback.

If you are a listed business:

Account and listing information: your business name, the services you offer, your service area, languages spoken, availability, pricing you choose to publish, and the contact details you want customers to reach you through.
Verification information you choose to provide during onboarding.
Anything you send us: support messages or feedback.

Information collected automatically

Basic technical data: browser type, device type, and IP address, used to run the service, diagnose errors, and prevent abuse.
Session data: authentication tokens needed to keep you logged in.
Usage data: how you interact with the service, so we can improve how customers and businesses are matched.

We do not use third-party advertising cookies, tracking pixels, or behavioral advertising tools. We do not build marketing profiles on you.

4. Why we collect it

We use your information only for these purposes:

To let you sign in and use BocaBoca across devices.
To match customers with relevant businesses.
To let customers and businesses connect.
To respond to support questions.
To diagnose problems, prevent abuse, and keep the service secure.
To improve the product.
To meet legal obligations if they arise.

We do not use your data to train AI models. We do not sell it. We do not rent it. We do not share it for advertising or targeting.

5. A note about connecting with businesses

BocaBoca is a discovery service. When you choose to contact a business, you share your information directly with an independent business that we do not own or control. Once you reach out, that exchange is between you and that business, and their handling of your information is their responsibility, not ours.

We do not process payments, take orders, or handle transactions inside BocaBoca. Any arrangement, communication, or payment is directly between you and the business.

6. Who we share data with

BocaBoca runs on a small set of third-party services that process data on our behalf:

Service	What it does	Where data lives
Supabase	Stores account, listing, and customer data; handles authentication	United States
Vercel	Hosts the BocaBoca web application	United States (global CDN)
Resend	Sends transactional emails (account verification, password reset)	United States
Upstash Redis	Rate limiting and abuse prevention	United States

If we add a new service that processes your data, we will update this list.

We may also disclose information if required by law, or to protect the safety, rights, or property of our users, the businesses on the platform, or Amplification Institute, Inc.

7. Where your data is stored

Your data is stored on servers in the United States, operated by our service providers.

If you are located in the European Union, the United Kingdom, or Argentina, your data will be transferred to and stored in the United States. For these transfers we rely on Standard Contractual Clauses through our service providers, and we take steps to protect your data consistent with applicable law in your country.

8. How long we keep your data

Active accounts: we keep your data as long as your account exists.
Accounts closed voluntarily: we remove your personal data from our active database within 30 days. Backups may persist for up to 90 days before being overwritten.
Accounts removed for cause: we retain records necessary to enforce these terms and prevent re-registration for up to 2 years. Personal data not needed for this purpose is deleted within 30 days of removal.
Support emails: we keep correspondence for up to 2 years.

9. Your rights

You have the right to:

Access the personal data we hold about you.
Correct any inaccurate information.
Delete your account and your data.
Export your data in a portable format (CSV or JSON).
Object to how we process your data.
Withdraw consent at any time by deleting your account.

To exercise any of these rights, email contact@amplificationinstitute.com. We will respond within 30 days.

If you are in the EU or UK and believe we have mishandled your data, you may complain to your local data protection authority.

If you are in Argentina, you have rights under Argentine data protection law, including access, rectification, and deletion, and you may contact the Agencia de Acceso a la Información Pública (AAIP).

10. How we protect your data

Passwords are hashed using industry-standard algorithms.
All connections use HTTPS/TLS encryption.
Data is stored with row-level access controls, so accounts can only reach their own data.
We limit access to production data to only those who need it.
We monitor for unusual or abusive access patterns and act on them.

11. Children's privacy

BocaBoca is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, email us and we will delete it.

12. Changes to this policy

If we make material changes, we will update the version number and date at the top and notify active users before the changes take effect.

13. Contact

Amplification Institute, Inc. — a Florida C Corporation.

Email: contact@amplificationinstitute.com

We read every message.