Bossreach · Terms of Service · Privacy Policy · Data Processing Addendum · Subprocessors · Acceptable Use Policy

Bossreach Terms of Service

Provider: Final Boss Creative, operating Bossreach ("Bossreach", "we")
Effective: October 9, 2026 · Last updated: October 28, 2026
Contact: privacy@bossreach.io · [mailing address]

These Terms govern access to Bossreach, including bossreach.io and its subdomains, parley.email, Bossreach CMS (cms.bossreach.io) and sites published through it, and related APIs (the "Service"). They are a business agreement. By creating an organisation, accepting an invitation, or using the Service, the person accepting confirms they have authority to bind their organisation ("Customer", "you").

You accept these Terms, the Privacy Policy and the DPA by creating an organisation, accepting an invitation, or using the Service. If we change them materially, we will tell the account owner as described in section 16.

1. Eligibility and accounts

• The Service is for businesses and professionals only, not consumers. Users must be 18 or older.
• Access is by invitation or approval. You are responsible for your users, their roles, and keeping sign-in methods secure.
• Tell us promptly at privacy@bossreach.io about any unauthorised access.

2. The Service

• We provide tools to find, organise and contact business prospects, send and track email, manage CRM records and publish websites.
• Many features use third-party services, often with your own API keys ("Bring Your Own Key"). Your use of those services is under their terms and at your cost.
• We may change or improve features. We will give 30 days' notice before removing a core feature you rely on, where practical.
• No uptime promise. We do not offer a service level agreement (SLA) or guaranteed availability unless we sign a separate written agreement that says so.

3. Fees

• The Service is currently offered free of charge; you pay your own third-party providers directly.
• If we introduce paid plans, we will show the price, billing period, automatic renewal terms and how to cancel online before you pay, and you will need to opt in. Paid plans will be cancellable online at any time, effective at the end of the paid period. Existing free use will not be converted to paid without your consent.

4. Your data

• You own your data ("Customer Data"): contacts, campaigns, messages, site content and form submissions.
• You give us the rights needed to host, process and transmit Customer Data to provide the Service, under our Data Processing Addendum (DPA), which is part of these Terms.
• We do not sell Customer Data, use it to advertise, use it to train AI models, or use it for other customers. We may use aggregated, de-identified usage statistics (for example counts of emails sent) to run and improve the Service.
• You are responsible for having the right to collect and use the data you put in, including a lawful basis and any required consents for contacting people.
• Export and deletion: you can export your data at any time, erase one person from your organisation's data, or delete your whole organisation. See the DPA for deletion timelines.

5. Acceptable use

You must follow the Acceptable Use Policy (bossreach.io/legal/acceptable-use), including email law rules (CAN-SPAM, CASL, GDPR/PECR), honouring unsubscribes, and including your valid postal address in commercial email. We may pause sending or suspend access to protect recipients, deliverability or the law.

6. Crawling and research

The Service can visit public websites to find business information. By default it obeys robots.txt, identifies itself as BossreachBot and waits between requests. You must not configure it to get around access controls, rate limits or a site's terms, and you are responsible for any non-default crawl settings you choose (for example ignoring robots.txt or a browser user agent).

7. AI features

AI features send the relevant content (for example a contact's name and company, website text, a reply, or a call transcript you choose to analyse) to the AI providers listed on our subprocessor page, only to produce the output you asked for. Outputs may be inaccurate: review AI-drafted emails before sending. We use AI providers whose commercial API terms say they do not train on API inputs.

8. Our property and feedback

We own the Service, its software and design. You get a non-exclusive, non-transferable right to use it during the term for your internal business. You may not reverse engineer it except where law allows, resell it, or use it to build a competing product. If you send feedback, we may use it without obligation.

9. Confidentiality

Each side will protect the other's non-public information with reasonable care and use it only for this agreement, except information that is public, already known, independently developed, or must be disclosed by law (with notice where allowed).

10. Warranties and disclaimers

Each side promises it has authority to enter these Terms. Except for that, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY OF CONTACT OR ENRICHMENT DATA, DELIVERABILITY, OR UNINTERRUPTED OPERATION. We hold no security certifications (such as SOC 2 or ISO 27001) and make no claim to.

11. Limitation of liability

TO THE FULLEST EXTENT ALLOWED BY LAW: (a) NEITHER SIDE IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR LOST PROFITS, REVENUE, DATA OR GOODWILL; AND (b) EACH SIDE'S TOTAL LIABILITY ARISING OUT OF THESE TERMS IS LIMITED TO THE GREATER OF THE FEES YOU PAID US IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM OR US $100. These limits do not apply to your payment obligations, your indemnity in Section 12, or liability that cannot be limited by law.

12. Indemnity

You will defend and indemnify us against third-party claims arising from Customer Data, your messages and campaigns (including email law and anti-spam claims), your sites' content, or your breach of the Acceptable Use Policy.

13. Term and termination

These Terms last while you use the Service. Either side may end them at any time on notice (you can do so by deleting your organisation). We may suspend immediately for serious or repeated breach, security risk, or legal requirement. After termination you have 30 days to export your data; then we delete it as set out in the DPA.

14. Governing law and disputes

California law governs, without regard to conflict-of-law rules. Before filing a claim, the parties will try to resolve it by good-faith discussion for 30 days. The state and federal courts in [county], California have exclusive jurisdiction, and either party may bring a qualifying claim in small claims court. Either party may seek urgent injunctive relief in any competent court.

15. General

Entire agreement (these Terms, the DPA, the Acceptable Use Policy and any order form); severability; no waiver; assignment only with consent, except to a successor of the business (including a company formed to run Bossreach); force majeure; notices by email to the account owner and to privacy@bossreach.io; independent contractors.

16. Changes

We may update these Terms. For material changes we will email the account owner at least 30 days before they take effect. Continued use after that means acceptance.

BOSSREACH PLATFORM TERMS: ADD-ON FEATURES

These terms apply when a customer uses BossReach's website and CMS, CRM, or email, text and other messaging features ("Add-On Features"). They add to the customer's own agreement with BossReach. If they conflict with a signed customer agreement, the signed agreement controls.

1. SITES AND CONTENT

(a) Your content is yours. Your text, images, logos, brand assets, product data and domain names ("Your Content") belong to you. BossReach hosts and uses Your Content only to run your sites and pages.

(b) The platform is BossReach's. The BossReach software, and every template, theme, component, layout, site build and piece of code underneath your sites, belong to Final Boss Creative (BossReach), including anything BossReach builds for you. You may use them only while your subscription is active.

(c) Domains. Your domain names stay registered to you.

(d) Moving out. If you leave, BossReach will, within 30 days of your request, export Your Content in a common format (such as HTML pages, image files, and CSV or JSON data) and help point your domain elsewhere. The export does not include the platform, its code, templates or components.

2. CRM AND MESSAGING

(a) Sending for you. When you use BossReach to email, text or otherwise message contacts, BossReach sends on your behalf and as you direct. You promise you have every right, consent and notice needed to collect, upload and contact them.

(b) Your lists. You are responsible for your contact lists, where they came from, their consent and opt-out status, and following email, text and privacy laws (including CAN-SPAM and the TCPA). You will cover BossReach for any claim about them.

(c) Opt-outs. BossReach will honor unsubscribe and opt-out requests it receives, and you will honor the ones you receive.

(d) Sending limits. BossReach may pause sending from your account if bounces, spam complaints or legal or security risks run high, until the problem is fixed.

3. CONTACTS THAT BELONG TO BOSSREACH

(a) Opt-ins. Anyone who opts in to BossReach's own updates, for example through a consent box or email footer that clearly names BossReach, becomes BossReach's own contact until they unsubscribe. No one becomes BossReach's contact without their own opt-in.

(b) BossReach's own research. Contacts BossReach finds through its own accounts and research, for its own use and not for you, belong to BossReach.

(c) Aggregated data. BossReach may create and keep aggregated, de-identified data that does not identify you or any person, to run and improve the platform, including after you leave.

(d) No other use. Except as this Section 3 says, BossReach will not use your contacts for its own marketing or for anyone else.

4. RESTRICTED DATA

Don't put consumer reports, background check data, government IDs, financial account data, payment card data, health data or other regulated personal data into Add-On Features without BossReach's written approval and agreement.

Changes log

Bossreach is operated by Final Boss Creative · [mailing address] · privacy@bossreach.io