Privacy Policy
The Bos Ventures AI Platform is private software operated by its owner, René Bos, for one purpose: keeping an overview of his own finances and those of the companies he owns. It is not offered to the public and has no users other than its owner. This policy explains which data the application handles and how.
1. Who is responsible
René Bos, trading through Bos Ventures, is the data controller for the application. Contact for anything in this policy: rbos@weareaegix.com.
2. Which data the application handles
- Account identifiers of the owner's own bank and payment accounts (account name, IBAN or account number, currency).
- Balances and transaction details of those accounts: date, amount, counterparty name and account, and the payment description as recorded by the bank.
- Balances of the owner's own brokerage and crypto tracking accounts.
- Public exchange rates published by the European Central Bank.
The accounts belong to the owner personally or to companies he owns and manages (Bos Ventures B.V., Bos Ventures LLC, PT Tree Unity Bali, Aegix B.V. and its successor Aegix OÜ).
3. Where the data comes from
Account information is retrieved read-only, with the account holder's explicit consent given at his bank, through licensed account information services (Enable Banking Oy, Helsinki, Finland) or through the account provider's own interface for the owner's account (for example Wise or Mercury). The application never initiates payments and holds no payment credentials.
4. Why the data is processed
To produce the owner's own financial overview: monthly income and expenses per category, balances per account, cash-flow planning and the bookkeeping records of his companies. There is no profiling of other people, no marketing, no advertising, and no sale or sharing of data.
5. Legal basis
The consent of the account holder, who is the only user of the application, and the legitimate interest of the owner in keeping the financial records of his companies.
6. Where the data is stored and how it is protected
On a server operated by the owner in the Netherlands, reachable only over a private network, protected by a login with two-factor authentication. Backups are encrypted and stored off-site. The private signing keys used to talk to account information services never leave that server.
7. Who receives the data
Nobody. The application shares data with no third party. The account information service and the banks process data under their own privacy policies while providing access.
8. How long the data is kept
Transaction records are kept as long as the owner keeps his financial records, in line with Dutch record-keeping obligations for businesses (seven years). Access sessions and consents are deleted when they are revoked or expire.
9. Rights
The owner can revoke any consent at his bank or with the account information service at any time, and can correct or delete data on the server directly. Transaction records naturally contain the names and account numbers of counterparties as the bank recorded them; this information is not used for any purpose beyond the owner's own bookkeeping. Anyone with a question about data that may concern them can write to the address above.
10. Changes
This page is updated when the processing changes. The date at the top shows the current version.