Privacy Requests And Choices

Overview

This page explains how to submit privacy rights requests, use privacy choices, request account deletion, and send privacy-related support questions for Boba Globe. It should be read together with our Privacy Policy and Cookie Policy.

Privacy Rights And Choices

• Access to personal information associated with your Boba Globe account.
• Correction of inaccurate profile or account information.
• Deletion or anonymization of account profile data, saved projects, and user-owned thumbnails where deletion is legally available.
• A portable copy of account and project information where required by applicable law.
• Restriction, objection, withdrawal of consent, or California privacy rights where those rights apply.
• U.S. state privacy rights to opt out of sale, sharing, targeted advertising, or certain profiling if those activities occur.
• An appeal of a denied privacy request where applicable law provides an appeal right.
• A parent, guardian, or user may report suspected child data or ask us to review information associated with an underage account.

How To Submit A Request

Email support@bobaglobe.com from the email address on your Boba Globe account. Include the type of request, the account email, and enough detail for us to understand what you are asking for. Do not send passwords, full payment-card numbers, health information, sensitive-location details, government identifiers, or other unnecessary sensitive information.

Request Methods And Self-Service Controls

Boba Globe currently operates as an online service with a direct account relationship, so support@bobaglobe.com is the designated privacy request method for access, deletion, correction, portability, and related privacy requests. Where self-service controls are available, you can also delete saved projects from the dashboard, manage billing through Stripe, and withdraw optional editor preference storage consent from the Cookie Policy controls.

If Boba Globe adds offline request channels, non-account collection contexts, or legal requirements that call for additional request methods, we will update this page and the request workflow before using those methods.

Verification

We may ask you to verify control of the account email before disclosing, exporting, correcting, or deleting account information. If you use an authorized agent, we may ask for proof that the agent has permission to act for you and may also ask you to verify your own identity directly where allowed by law.

For suspected child-data requests, do not send extra child information unless we ask for it. We may request limited information needed to verify the account, confirm parent or guardian authority where required, and complete deletion, disabling, or other handling required by applicable law.

Authorized Agent Requests

An authorized agent may email support@bobaglobe.com with the subject Boba Globe authorized agent privacy request. The message should identify the request type, the account email, and the user whose rights are being exercised, and should include proof that the user authorized the agent to submit the request.

Before disclosing, exporting, correcting, or deleting account information, we may ask the account owner to verify their own identity directly or confirm that the agent has permission to act for them where applicable law allows. We do not require power of attorney for an authorized agent request unless a particular law or request type requires it, and we do not disclose account data to an agent until authorization and verification are approved.

Deletion And Erasure

Deletion or erasure requests cover profile data, saved projects, and user-owned project thumbnails where deletion is legally available. Deletion may be limited or delayed where retention is needed for billing, tax, accounting, fraud prevention, security, legal claims, legal obligations, disputes, valid legal requests, or secure backup and provider-deletion cycles. Billing records and Stripe-hosted payment records may need to be retained by Stripe or Boba Globe where required by law.

If deleted information was shared with a service provider or recipient and applicable law requires notice, we will assess whether that provider or recipient should be told about the deletion unless doing so is impossible or disproportionate. Our response will explain completed deletions, retained categories and reasons, and any required appeal or complaint routes. For suspected child data or underage accounts, we escalate the request and default to deletion, disabling, or other protective handling unless legal or business ownership approves a different lawful path.

Correction And Completion

If you ask us to correct or complete inaccurate account, profile, subscription-status, or project information, include the account email, the information you believe is inaccurate or incomplete, the corrected value, and any context needed to verify the change. We may ask you to update project content directly in the app where self-service editing is available and safer for your account.

We will review correction requests under applicable law. If we cannot verify the requested change, if the information is already accurate, or if another legal exception applies, we will explain the decision and include appeal or complaint routes where required. If inaccurate information was shared with a service provider or recipient and applicable law requires notice, we will assess whether that provider or recipient should be told about the correction unless doing so is impossible or disproportionate.

Access, Copies, And Portability

If you request access or portability where applicable law provides that right, we will provide the available account, project, subscription-status, and user-owned project thumbnail information that we can reasonably locate after verification, subject to legal exceptions. Where required by applicable law, we provide portable information in a structured, commonly used, machine-readable format. If you ask us to transmit portable information directly to another service, we will review whether the transfer is technically feasible, lawful, and secure before doing so.

Subject access requests may include confirmation of whether we process your personal information, a copy of the personal information we can provide, and supplementary information about purposes, categories, recipients, retention, rights, complaint routes, sources, and transfer safeguards where required. If a request is broad or unclear and we process a large amount of information about you, we may ask you to clarify the scope before responding.

We provide access responses in a concise, intelligible, and secure way. We do not include passwords, one-time codes, service-role keys, webhook secrets, full payment-card numbers, internal security details, unrelated operational logs, or another user's information in access or portability responses. If a record includes another person's information, we will assess whether to redact or withhold that information unless disclosure is legally allowed.

Timing And Responses

We respond to verified privacy requests within the timeframes required by applicable law. Where GDPR or UK GDPR applies, we aim to respond without undue delay and within one month unless a permitted extension applies. Where the CCPA applies, we aim to confirm receipt of requests to know, delete, or correct within 10 business days and respond within 45 calendar days unless a permitted extension applies. For other U.S. state privacy requests and appeals, we use the legally required deadline for the applicable state and generally target a 45-day response where that pattern applies unless counsel confirms a shorter or different period. If a request is complex, if we need more information to verify it, or if an exception applies, we will explain the next step by email and include appeal instructions where required.

Fees, Refusals, And Repeated Requests

You do not pay a fee to submit a privacy request. Where applicable law allows, if a request is manifestly unfounded, excessive, repetitive, or asks for extra copies, we may ask for clarification, refuse to act, or charge a reasonable administrative fee. If we refuse a request or charge a fee, we will explain the reason and include appeal or complaint routes where required.

Do Not Sell or Share My Personal Information and Limit the Use of My Sensitive Personal Information

Boba Globe does not currently sell personal information, share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or use sensitive personal information for restricted secondary purposes. You can still send a request titled Do Not Sell or Share My Personal Information or Limit the Use of My Sensitive Personal Information to support@bobaglobe.com. We will treat it as an opt-out or sensitive-information limitation request where applicable law requires and confirm current practices.

You do not need to create a new account to submit an opt-out, sale/share, targeted-advertising, or sensitive-information limitation request. If Boba Globe later enables sale, sharing, targeted advertising, or restricted sensitive-information uses, we will update this page and the Privacy Policy before launch and provide the required opt-out or limitation controls.

Opt-Out Signals

Boba Globe does not currently sell personal information, share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or use personal information for profiling that produces legal or similarly significant effects. If you send a Global Privacy Control or other legally recognized universal opt-out mechanism, universal opt-out signal, or opt-out preference signal, we treat it as an opt-out request where applicable law requires us to do so and publish a machine-readable GPC support resource at /.well-known/gpc.json, but it does not change those current practices because those activities are not enabled. Where the CCPA applies, sale, sharing, or sensitive-personal-information limitation requests are handled as soon as feasibly possible and no later than 15 business days.

Objections To Legitimate-Interest Processing

If GDPR, UK GDPR, or similar law applies and you object to processing based on Boba Globe's legitimate interests, email support@bobaglobe.com with the subject Boba Globe privacy objection. Include the account email, the processing purpose if you know it, and the reason for the objection. We will review the objection under applicable law and tell you whether we will stop, limit, or continue the processing because a permitted exception applies.

Boba Globe does not currently use personal information for direct marketing. If we add direct marketing, you may object to direct-marketing use at any time and we will stop direct-marketing use as required by law.

Restriction Requests

If GDPR, UK GDPR, or similar law applies and you ask us to restrict processing, email support@bobaglobe.com with the subject Boba Globe restriction request. Include the account email, the information or processing purpose involved, and why you believe restriction should apply.

We will review whether restriction is available, such as while we check contested accuracy, while an objection is pending, where processing is unlawful and you prefer restriction to deletion, or where you need information preserved for a legal claim. If restriction applies, we will limit active use of the affected information except where the law permits continued processing, such as storage, your consent, legal claims, protecting another person, or important public interest.

Consent Withdrawal

You can withdraw optional editor preference storage consent at any time by disabling optional editor preference storage or using the clear-and-disable control on the Cookie Policy page. Withdrawal applies going forward, does not affect processing based on consent before withdrawal, and does not disable storage required for authentication, checkout, billing, security, or saved projects.

Appeals

If we deny your privacy request and a privacy law gives you the right to appeal, reply to the decision email or email support@bobaglobe.com with the subject Boba Globe privacy appeal. Include the account email, the original request, and why you believe the request should be reconsidered.

If we deny an appeal and applicable U.S. state privacy law gives you the right to contact a state attorney general or privacy regulator, our appeal response will include the regulator complaint instructions required by that law.

Questions Or Complaints

Privacy questions can be sent to support@bobaglobe.com. If you are in the EEA, UK, or Switzerland, you may also contact your local data-protection authority.