1. How this notice fits with Boson's Privacy Policy
Buy with Boson is one of the Boson Services. The Boson Privacy Policy applies to it in full. This notice adds detail for Buy with Boson; where the two differ, this notice applies to Buy with Boson.
2. Who we are
Buy with Boson is an AI agent on X (@BuywithBoson) and a checkout at buy.bosonprotocol.io. It is operated by Boson: BVoucher Ltd, a company incorporated in Singapore, operating at 1 Irving Place, #08-11, The Commerze@Irving, Singapore 369546, and its related corporations, as set out in paragraph 1.2 of the Boson Privacy Policy.
Contact our Data Protection Officer at compliance@bosonprotocol.io. We aim to answer within 30 days.
Problems between a buyer and a seller that they can't settle are decided by Redeemeum, the dispute resolver. Redeemeum is separate from the operator of Buy with Boson.
3. What we collect
| From where | What | Why |
|---|---|---|
| X, when you tag @BuywithBoson or quote one of its posts | Your post, the post you replied to or quoted, your X user ID and handle | To understand what you want to buy and reply to you once |
| X, if you reply "stop" | Your X user ID | To make sure we never reply to you again |
| The checkout page | Your email address, name and delivery address | So the seller can deliver your order and both of you can reach each other |
| Your wallet | Your public wallet address, your public USDC balance when you make a request, and the payment transaction | To show a seller that a request is backed by funds, and to place your order in Boson escrow |
| Sellers: X sign-in, when you accept an order | Your X user ID and handle, confirmed by X with your consent | To confirm you control the account that posted the item |
| Sellers: the order page | Your email address, tracking numbers you add, and the address your payment should go to | To send you orders, show the buyer their parcel is on its way, and pay you |
| Sellers: your wallet | A wallet created for you when you sign in, held by a wallet provider so that neither we nor they can move your money without you. We will name the provider here before sellers can sign in | To sign your acceptance and receive your payment without installing anything |
| A problem report | What you write, any photos, and the messages between buyer and seller about the order | To settle the problem, and for the resolver to decide if you can't agree |
We do not collect payment card details. We do not infer sensitive characteristics about you.
4. How we use it
- To read your purchase request and prepare a checkout or request-to-buy link.
- To place and track your order, and to email you and the seller about it.
- To honour opt-outs, prevent duplicate replies, and keep the service safe (rate limits, abuse prevention).
We do not use X content to train AI models, for advertising, or to build profiles about you.
5. Who we share it with
| With | What | Why |
|---|---|---|
| The seller of your item | Your email, name and delivery address | To deliver your order |
| The buyer of your item | The seller's name or handle and any tracking number | So the buyer knows who is sending the parcel and where it is |
| The resolver (Redeemeum) | The order, the messages, tracking and photos in a problem report | To decide a problem the buyer and seller can't settle |
| The wallet provider | The seller's email or X sign-in | To create and secure the seller's wallet |
| Anthropic (our AI provider) | The text of the posts you tagged us in | Only to extract the item, price and your intent. Under its commercial terms, Anthropic does not use this to train models |
| Our email provider | Your email address and order details | To send order emails |
| X | Our single reply to your post | Replies are public on X |
| The blockchain | Your wallet address and payment | Payments on Base are public and permanent by design |
We do not sell your data. Transfers to other countries follow section 8 of the Boson Privacy Policy.
6. How long we keep it
- Post text and the details we extracted from it: 30 days.
- Records of posts we replied to (post and user IDs) and the opt-out list: for as long as the service runs, so we never reply twice or to someone who opted out.
- Order details, problem reports and their evidence: as long as needed for the order and any dispute, and longer only where the law requires it (for example tax and accounting rules), as set out in section 10 of the Boson Privacy Policy.
- Blockchain records can't be deleted by anyone; this is how public blockchains work.
If you delete or edit a post on X, we delete or update any copy of its text we hold.
7. Your choices and rights
- Stop replies: reply "stop" to @BuywithBoson.
- Your rights: access, correction, erasure, restriction, portability and objection, as set out in section 11 of the Boson Privacy Policy. To use them, email compliance@bosonprotocol.io.
8. Changes
If we change this notice, we update the date at the top and, for significant changes, say so on the checkout page.