Privacy Policy

This Privacy Policy describes how Boston Systems Consulting LLC(“we,” “us,” or “our”) collects, uses, and shares information when you use our website and services. By using our site you agree to the practices described below.

1. Information We Collect

Account information. When you create an account we collect your name, email address, and phone number. This is stored in our systems and with our authentication provider (AWS Cognito). Your phone number is used by Boston Systems Consulting LLC, our technology provider, to send you one-time sign-on verification codes via SMS text message and other security-related authentication codes on our behalf. Message and data rates may apply. You must consent to receive these messages in order to create an account.

Shipping information. When you place an order we collect your shipping address. This is stored with your account for future orders.

Order information. We retain records of your purchases including items, quantities, prices, payment method, and order status.

Identity verification. If identity verification is required, we direct you to Plaid, Inc. to complete the process. Plaid collects identity documents, date of birth, Social Security number, and related information directly. We receive only the verification result (pass, fail, or pending) and the date of verification. We do not receive or store your identity documents, SSN, or date of birth.

Payment information. Bank account linking and payment processing are handled by Plaid, Inc. and Dwolla, Inc. We do not receive or store your bank account numbers, routing numbers, or login credentials. We receive only a confirmation of payment status.

Analytics and fraud prevention. We collect usage data including IP addresses, browser type, device information, pages visited, and interaction patterns. We use this data for fraud detection, fraud prevention, security monitoring, and to improve our services. We may use third-party analytics and fraud prevention tools that collect similar data.

Session data. We use cookies strictly for authentication (session tokens). We do not use advertising or marketing cookies.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Communicate with you about orders, account activity, and service updates
• Send one-time sign-on verification codes and other authentication codes to your phone via SMS text message
• Verify your identity when required by transaction thresholds
• Detect and prevent fraud, unauthorized transactions, and other illegal activity
• Monitor for suspicious activity and protect the security of our platform
• Comply with legal and regulatory obligations
• Enforce our Terms of Service

3. Information We Share

We share your information only with the following parties and only as necessary to provide our services:

• Plaid, Inc. -- Bank account linking and identity verification. Subject to the Plaid Privacy Policy.
• Dwolla, Inc. -- Payment processing and fund transfers. Subject to the Dwolla Privacy Policy.
• Boston Systems Consulting LLC -- Technology provider for this site. Sends one-time sign-on verification codes and other security-related authentication codes via SMS text message on our behalf.
• Amazon Web Services -- Authentication (Cognito), email delivery (SES), and infrastructure hosting.
• Analytics and fraud prevention providers -- Usage data and device information for fraud detection and security monitoring.
• Law enforcement or regulators -- When required by law, subpoena, court order, or to protect our legal rights.

We do not sell your personal information. We do not share your information with third parties for their marketing purposes.

4. Data Retention

We retain account, order, and transaction data for a minimum of seven (7) years to comply with legal, regulatory, tax, and financial reporting obligations. After the retention period, data may be deleted or anonymized at our discretion.

Analytics and fraud prevention data is retained as long as necessary to fulfill its purpose.

5. Data Deletion Requests

You may request deletion of your personal data by contacting us at support@bostonsystemsconsulting.com. Due to legal and regulatory retention requirements, we may not be able to delete certain data, including order history and transaction records, which must be retained for the minimum retention period described above. We will inform you of any limitations when we respond to your request.

6. Data Security

We use industry-standard security measures to protect your information, including encrypted connections (TLS), secure authentication with multi-factor verification, and access controls on our systems. Sensitive operations such as payment processing and identity verification are handled by specialized third-party providers with their own security programs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Choices

• Account information. You can update your name and phone number from your account page. Email changes require contacting support.
• Communications. Transactional emails related to your orders and account security cannot be opted out of. We do not send marketing emails.
• SMS authentication codes. SMS sign-on verification codes are required to operate your account securely and cannot be opted out of while your account is active. Message and data rates may apply. Replying STOP will unsubscribe you from these messages and disable your ability to sign in. To stop receiving SMS authentication codes you may close your account at any time.
• Cookies. Our cookies are essential for authentication. Disabling them will prevent you from logging in.

8. Children

Our services are not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of our services after changes are posted constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@bostonsystemsconsulting.com.