Last updated:  |  Version 2.1

Terms of Service — INSIGNIAVIF Boutme

By accessing and using this WebApp and creating an account, you agree to be bound by these Terms and Conditions of Use, all applicable laws and regulations, and acknowledge your sole responsibility for compliance with any applicable local laws. If you do not agree with any of these terms, you are expressly prohibited from using or accessing this WebApp.

1. Use License

1. Permission is granted for the personal use of the WebApp with the Smart Card function. This constitutes a limited, non-exclusive, non-transferable, revocable license, and is not a transfer of title. Under this license, you may not:
   1. modify, copy, reproduce, or distribute the materials;
   2. attempt to decompile or reverse engineer any software on INSIGNIAVIF.COM;
   3. remove any copyright or proprietary notations from the materials; or
   4. transfer the materials to another person or mirror them on any server without written consent.
2. This license terminates immediately if you violate any restriction. INSIGNIAVIF Boutme reserves the right to terminate your access at any time, for any reason, without notice.

2. Third-Party Integrations and Data Sharing

INSIGNIAVIF Boutme integrates the following third-party services to provide its features. By using the WebApp, you acknowledge and consent to data being shared with these providers as described below. Each provider's privacy policy governs their use of your data.

2.1 Google Services (Google Calendar API & Google Drive API)

We integrate with Google Calendar to enable appointment scheduling and synchronization through the Appointments (Apts) module, and with Google Drive to enable external cloud storage options through the Cloud Storage plugin.

Scopes requested:

• https://www.googleapis.com/auth/calendar — Full access to read, create, update, and delete events on your Google Calendar, solely to synchronize appointments you create within the Boutme Apts module.
• https://www.googleapis.com/auth/drive.file — Access to view, edit, create, and delete only the specific files and folders that you choose to open, upload, or create using this app, solely to manage files in your linked Google Drive account through the Cloud Storage plugin.
• https://www.googleapis.com/auth/userinfo.email — Access to view your primary Google account email address, solely to identify and display which Google account is connected to the Cloud Storage plugin.

Google API Services User Data Policy — Limited Use Disclosure:
The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements. Specifically:

• We only use Google user data to provide the calendar synchronization and cloud storage features you explicitly activate.
• We do not use Google user data for advertising, selling, or sharing with third parties beyond what is necessary to operate these features.
• We do not use Google user data for any purpose unrelated to the calendar sync or cloud storage features.
• We do not allow humans to read your Google data unless you have given us explicit permission, it is necessary for security purposes, or we are required to do so by law.
• Google account data (access tokens, refresh tokens, and linked email address) is stored encrypted in our database and used solely to maintain your calendar and Google Drive connections.
• You may revoke access at any time by disconnecting Google Calendar or Google Drive from your Boutme account settings or through your Google Account permissions page .

Data shared with Google: appointment titles, dates, times, and descriptions (for the Apts module), and files/documents/metadata you choose to upload (for the Cloud Storage plugin). Google's privacy policy applies to data processed by their services: https://policies.google.com/privacy .

2.2 Plaid (Bank Account Connectivity)

We use Plaid Inc. to enable bank account connectivity through the Cashflow module. Plaid allows you to securely link your bank or financial institution to import and categorize your transactions.

Data collected and shared with Plaid:

• Bank account credentials (entered directly into Plaid's secure interface — never seen or stored by INSIGNIAVIF Boutme).
• Account information: account numbers (masked), institution name, account type and balance.
• Transaction data: date, amount, merchant name, and transaction category, used solely to display your cashflow within the app.

How we handle Plaid data:

• Your bank credentials are never transmitted to or stored on our servers; they are entered directly into Plaid's encrypted interface.
• Plaid access tokens (used to retrieve your transaction data) are stored encrypted in our database using AES-256 encryption.
• Transaction data imported via Plaid is stored in your Boutme account and is not shared with any third party other than Plaid.
• We use Plaid solely to retrieve and display your financial data within the app — we do not sell or share this data.
• You may disconnect your bank at any time through the Cashflow module settings, which will revoke our access and delete your stored tokens.

Plaid's privacy policy: https://plaid.com/legal/#privacy-policy . Plaid's end user privacy policy: https://plaid.com/legal/#end-user-privacy-policy .

2.3 Stripe (Payment Processing)

INSIGNIAVIF Boutme uses Stripe, Inc. as a payment processor for transactions made through the Reservations and Store modules.

Data shared with Stripe:

• Payment card information (processed directly by Stripe — never stored on our servers).
• Transaction amount, currency, and description.
• Customer name and email address for payment receipts.
• Stripe public and private API keys are configured by each merchant (Boutme user) within their own account settings and are stored encrypted.

INSIGNIAVIF Boutme is a platform provider — each merchant using the Reservations module configures their own Stripe account. Card payment data is processed directly between the end user's browser and Stripe's servers via Stripe.js; INSIGNIAVIF Boutme never handles raw card data.

Stripe's privacy policy: https://stripe.com/privacy .

2.4 Square (Point of Sale & Transaction Import)

We integrate with Square, Inc. to allow merchants to import their Square sales data into the Cashflow module for financial tracking and reporting.

Data collected and shared with Square:

• Square OAuth tokens (used to retrieve sales data on your behalf).
• Transaction data: sale amounts, dates, item descriptions, and payment methods, used solely to populate your Cashflow dashboard.
• Square merchant account identifiers.

How we handle Square data:

• Square OAuth credentials are stored encrypted in our database.
• Transaction data imported from Square is stored in your Boutme account only and is not shared with any third party.
• We access your Square data only to perform the import you explicitly request.
• You may disconnect Square at any time through the Cashflow module settings.

Square's privacy policy: https://squareup.com/us/en/legal/general/privacy .

2.5 Meta / Instagram Services (Instagram Graph API)

We integrate with Meta's Instagram Graph API to enable social media management features through the Instagram Integration plugin. This allows the VITK AI assistant to interact with your Instagram Business or Creator account at your explicit request.

Data collected and how it is used:

• Instagram Media & Public Profile: We access your account username, profile ID, and recent media posts/reels (including caption, timestamp, permalink, like count, and comment count) solely to display them to you and allow the AI assistant to reference them.
• Comments and Replies: We retrieve comments on your recent posts so that you can view them in the chat, and we allow the AI assistant to publish replies to specific comments in your name only when you explicitly instruct it to do so.
• Direct Messages (DMs): We retrieve conversations and messages in your Instagram inbox so you can view them, and we allow the AI assistant to send direct messages on your behalf solely when you explicitly request it. We never send messages or replies automatically.

How we handle Instagram data and how to disconnect:

• Your Instagram access tokens are stored securely and encrypted in our database.
• How to Disconnect: You can completely disconnect your Instagram account at any time by going to the Integrations page in your Boutme dashboard and clicking the "Disconnect" button next to the Instagram integration. This will immediately and permanently delete your Instagram access tokens and all related connection data from our servers.
• You can also revoke this app's permissions at any time directly through your Instagram/Facebook account settings.

2.6 Artificial Intelligence Providers

Our WebApp integrates and utilizes various third-party artificial intelligence tools and large language models (LLMs), including but not limited to those provided by Google (Gemini), Pollinations AI, OpenAI, Z.ai (GLM), Groq, and NVIDIA. These are used to power features such as the AI card builder, AI tips, and content generation tools.

You acknowledge and expressly agree that:

• Any information or content you input into AI-powered features may be transmitted to and processed by these third-party AI providers on their servers.
• INSIGNIAVIF Boutme explicitly disclaims any and all responsibility for the privacy, security, or accuracy of your data once transmitted to these providers.
• Such data may be used by AI providers for model training or improvement as defined in their respective terms of service, over which INSIGNIAVIF Boutme has no control.
• Do not input sensitive personal, financial, or confidential information into AI-powered features.

2.7 Intuit QuickBooks Online (Accounting & Cashflow Integration)

We integrate with Intuit Inc.'s QuickBooks Online API to allow users to synchronize their accounting records, profit and loss statements, customer invoices, vendor bills, and expenses with the Cashflow module and enable conversational financial insights via the AI assistant.

Independent Application Disclaimer:

INSIGNIAVIF Boutme is an independent software application developed and maintained by INSIGNIAVIF. Boutme is not affiliated with, sponsored by, or endorsed by Intuit Inc. QuickBooks and Intuit are registered trademarks and service marks of Intuit Inc., registered in the United States and other countries.

Data Collected and Access Scopes:

• Accounting Data: When you connect your QuickBooks account, you authorize Boutme to access company profile information, chart of accounts, expenses/purchases, customer invoices, vendor bills, and payments solely to display them in your Cashflow dashboard and calculate cash flow metrics.
• OAuth 2.0 Credentials: Access and refresh tokens returned by Intuit are stored in our database using AES-256 encryption. We never request, receive, or store your Intuit account password or credentials.

Data Ownership, No Resale, and Privacy Safeguards:

• Your QuickBooks financial data remains your exclusive property.
• We use your QuickBooks data solely to provide the services you explicitly request within the WebApp. We do not sell, rent, license, or transfer your QuickBooks data to third parties, advertising networks, or data brokers.
• QuickBooks financial data is never used to train generalized or public artificial intelligence models.

Disconnection and Token Revocation:

• You can disconnect QuickBooks at any time directly through the Integrations page by clicking "Disconnect" next to QuickBooks. This immediately and permanently deletes your stored OAuth tokens from our servers.
• You can also revoke Boutme's access directly at any time from your Intuit Account Security / Connected Apps settings.

Financial and Accounting Disclaimer:

Boutme and its AI assistants provide bookkeeping synchronization and cash flow estimations for operational and informational purposes only. Boutme is not a certified public accountant (CPA), certified financial planner, or tax advisory service. You are solely responsible for reviewing and verifying the accuracy of all financial reports, deductions, and tax obligations before filing.

Intuit's privacy statement: https://www.intuit.com/privacy/statement/ .

2A. Phone Notification Access (Android App)

The Boutme Android app can, only if you turn it on, let your Boutme AI agent read the notifications that arrive on your phone so it can summarize them, tell you who wrote to you, and help you act on them. By connecting this feature you agree to the following:

• Optional and revocable. The feature only works after you grant "Notification access" to Boutme in your Android settings; the app shows you this disclosure first. You can revoke it at any time in Settings → Notifications → Notification access, and the app stops sending new notifications.
• What is read. The app name, sender or conversation name, and the text of notifications that arrive after you connect, from a list of messaging, email and social apps that Boutme defines and enforces on its servers (it can change with app updates). We try to filter out notifications that look like verification codes, PINs or password and banking alerts, on your phone and again on our server, so they are not stored; no filter is perfect, so do not rely on it for highly sensitive content.
• How it is used. Only to answer requests you make to your agent (for example "summarize my notifications"). The text may be processed by the AI providers listed in our Privacy Policy to produce the answer, and the answer itself (which can include content from your notifications) is saved in your conversation with the agent like any other message, until you delete it. It is not used for advertising, is not sold, and is not shared with anyone else.
• Retention. Notifications are stored for a maximum of 7 days and then deleted automatically. You can ask your agent at any time to delete them immediately.
• Replies. Reading a notification does not send anything. If you ask the agent to reply to someone, it does so through an integration you connected (for example Instagram, WhatsApp or email) and you remain responsible for messages sent in your name. Review what your agent writes before it is sent.
• Other people's messages. Notifications can contain messages written by other people. You are responsible for connecting this feature only on a phone you own and for using the information in compliance with the law and the privacy of the people who wrote to you. Do not connect it on a shared or borrowed device.
• No guarantee of completeness. Android may delay, group or drop notifications (for example under battery-saving modes), so the agent may not see every notification.

2B. Phone Actions (Android App)

The Boutme Android app can also, only if you grant each permission, let your Boutme AI agent act on your phone when you ask: look up a contact, start a phone call, prepare a text message, open directions or music, read your calendar or create an event. You agree that:

• You ask, it acts. The agent uses these only to carry out a request you make, and asks you in the chat before it prepares a call or a message in your name. You are responsible for calls, messages and events made with your phone, and for checking the name, number and text before you press call or Send.
• Calls and texts are prepared, not made. The agent opens your phone's dialer with the number ready, or your messages app with the text ready; nothing is dialed or sent until you press call or Send yourself.
• Each permission is separate and revocable. Contacts and calendar are each requested on their own and can be turned off at any time in your Android settings. Boutme does not read your call history or your existing text messages.
• Only on Android. These actions run only through the Boutme Android app while it is available on your phone. On iPhone, iPad and computers the agent can still give you links for directions, music, calls and messages, but cannot act on the phone itself. Android may require you to tap a notification to let an action open on the screen.

2C. Boutme Desktop Agent (Chrome Extension)

The Boutme Desktop Agent Chrome extension enables your Boutme AI agent and My Routines to automate browser workflows directly in Google Chrome when you explicitly connect and instruct it. By installing and using the Chrome extension, you agree that:

• User-Initiated and Authorized Actions: The extension only navigates pages, reads content, clicks elements, and inputs text in response to tasks or routines you explicitly trigger. The extension does not execute background actions without your instruction.
• Browser Automation & Permissions: The extension utilizes Chrome APIs (including debugger, scripting, tabs, tabGroups, and storage) solely to inspect page structures, simulate user interactions (clicks, keyboard input, form filling), and manage tabs as needed for your assigned tasks.
• User Responsibility for Web Operations: You remain solely responsible for the actions performed by the agent on websites you navigate (such as submissions, order placements, or data modifications). We strongly recommend reviewing automated workflows and keeping sensitive accounts supervised.
• Revocable and Uninstallable: You may disable or remove the extension at any time via Chrome's extension manager (chrome://extensions), which immediately terminates all browser access and local sessions.

3. Payment Processing and Financial Data

INSIGNIAVIF Boutme acts as a software platform; it does not directly process, store, or have access to your raw payment card numbers. All card transactions are processed by PCI-DSS compliant third-party payment processors (Stripe, Square). You agree to the terms and conditions of these processors when you use payment features within the platform.

For the Cashflow module, financial transaction data retrieved from your bank via Plaid or from Square is used exclusively within your Boutme account for the purpose of financial tracking and reporting. This data is not used for advertising, scoring, resale, or any other purpose beyond the service you explicitly activated.

4. Data Retention and Deletion

• Your account data is retained for as long as your account is active.
• Connected third-party service tokens (Google, Plaid, Square) are deleted from our servers immediately upon disconnection of those services from your account.
• To permanently delete your account and all associated data, send an email to contact@insigniavif.com with the subject: "Delete Account" and your email or Card Code.
• Upon account deletion, we will remove your personal data within 30 days and revoke all third-party access tokens associated with your account.

5. Limitations of Liability

In no event shall INSIGNIAVIF Boutme or its suppliers, directors, employees, agents, or affiliates be liable for any direct, indirect, incidental, special, consequential, or punitive damages (including loss of data or profit, or business interruption) arising out of the use or inability to use this WebApp, even if notified of such possibility. This limitation applies regardless of the legal theory — contract, tort, strict liability, or otherwise.

INSIGNIAVIF Boutme is not responsible for: (a) inaccuracies or errors in AI-generated content; (b) data processed by third-party services (Google, Plaid, Stripe, Square, AI providers) in accordance with their own policies; or (c) content published by users on their public TAPCARD.

6. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted storage of third-party API tokens and access tokens (AES-256), HTTPS/TLS encryption for all data transmission, and access controls on our systems. However, no system is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your data, we will notify you as required by applicable law.

7. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and improve the WebApp. By clicking "Accept Terms" or continuing to use the WebApp, you consent to our use of cookies. Third-party services integrated into the WebApp (Google, Stripe, etc.) may also set their own cookies subject to their respective privacy policies.

8. Waiver, Indemnification, and Assumption of Risk

Waiver and Release: By accepting these Terms, you expressly acknowledge and irrevocably agree to waive, release, and forever discharge INSIGNIAVIF Boutme, its parent companies, subsidiaries, affiliates, officers, directors, employees, agents, contractors, and licensors from any and all claims, demands, liabilities, damages, costs, and expenses, whether known or unknown, arising out of or in any way related to your use of this WebApp, including but not limited to the use of AI functionalities, any loss or leakage of data, privacy breaches, or service interruptions. This waiver applies to the fullest extent permitted by applicable law.

Indemnification: You agree to indemnify, defend, and hold harmless INSIGNIAVIF Boutme and its affiliates from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or in connection with: (i) your use of the WebApp; (ii) your violation of these Terms; (iii) your violation of any third-party rights; (iv) any content you submit or publish; or (v) any dispute between you and any third party.

Assumption of Risk: You understand that your use of the WebApp, including AI-powered features and third-party financial integrations, involves inherent risks, and you voluntarily assume all such risks.

9. Governing Law and Jurisdiction

Any claim relating to INSIGNIAVIF Boutme WebApp shall be governed by the laws of the United States without regard to its conflict of law provisions. You irrevocably agree that the exclusive jurisdiction for any dispute arising out of or relating to these Terms shall be in the state and federal courts of the applicable jurisdiction.

10. Revisions and Updates

INSIGNIAVIF Boutme may revise these Terms at any time without prior notice. By continuing to use the WebApp after any revision, you agree to be bound by the then-current version. It is your responsibility to review these Terms periodically. Material changes to data sharing practices will be communicated by updating the "Last updated" date above and, where required by applicable law, by direct notification.

11. Contact

For questions about these Terms or our data practices, contact us at:
contact@insigniavif.com
INSIGNIAVIF Boutme — https://insigniavif.com

12. Eligibility, Accounts and Security

• You must be at least 18 years old (or the age of majority in your jurisdiction) to create an account. If you create an account on behalf of a business or organization, you represent that you have authority to bind it.
• You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Notify us promptly at contact@insigniavif.com of any unauthorized use.
• We may suspend or terminate accounts that are inactive, compromised, in breach of these Terms, or that pose a security, legal, or operational risk. You may cancel your account at any time via the deletion process in Section 4.

13. Acceptable Use — What You May Not Do

You agree not to, and not to allow your end customers, employees, or agents to:

• Violate any law, regulation, third-party right (including privacy, IP, and financial-services rules), or the terms of any integrated provider (Google, Intuit, Plaid, Stripe, Square, Meta, AI providers, Apple, Google Play).
• Upload or publish unlawful, defamatory, infringing, deceptive, or harmful content; spam, phishing, malware, or content that exploits or harms minors in any way.
• Probe, scan, or test the vulnerability of the WebApp; circumvent access controls, rate limits, or usage quotas; reverse engineer except as permitted by non-waivable law; or use bots/scrapers against the service without written consent.
• Use AI features to generate or disseminate disallowed content, to make solely-automated decisions with legal or similarly significant effects about third parties without required human review and disclosures, or to misrepresent AI output as human advice.
• Resell, white-label, or sublicense the WebApp itself without a written agreement; you may use it to serve your own customers (e.g., your TAPCARD visitors, store buyers, daycare families) subject to these Terms.

14. Your Content, Your Responsibility; License to Us

• You own your content. You retain all rights in the text, images, prices, menus, listings, and other materials you publish through your card, store, reservations, or other modules.
• Your responsibility. You are solely responsible for the accuracy, legality, and currency of your content, including prices, availability, business hours, and any claims about your products or services. We do not pre-screen user content.
• License to operate the service. You grant INSIGNIAVIF Boutme a worldwide, non-exclusive, royalty-free license to host, display, reproduce, and transmit your content solely as needed to operate the WebApp and your public TAPCARD as you configure it. If you set content to public, you understand it may be indexed, shared, or screenshotted by visitors.
• Takedown. We may remove or restrict content that we reasonably believe violates these Terms, the law, or a third-party right, with or without notice. See Section 18 for IP complaints.

15. Artificial Intelligence, Health and Daycare — No Professional Advice

• AI can be wrong. Outputs from VITK, the AI card builder, financial summaries, notification summaries, and other AI features may be inaccurate, incomplete, or outdated ("hallucinations"). You must independently verify important information before acting on it. Review anything your agent drafts (messages, replies, posts, orders) before it is sent or published.
• Not professional advice. The WebApp is not a law firm, CPA/tax firm, financial advisor, health-care provider, or childcare licensing authority. Nothing in the WebApp — including AI answers, cash-flow estimates, profit/loss summaries, health tips, or daycare logs — constitutes legal, tax, investment, medical, or licensing advice. Consult a qualified professional.
• Health features. Any health or wellness content is for general informational purposes only and is not a diagnosis or treatment recommendation. Do not delay seeking care because of something the app says. In an emergency, contact emergency services.
• Daycare / children data — you are the controller. If you use daycare, TAPDAYCARE, or similar features to manage children, families, or staff, you (the account holder) are the data controller/business: you must have all required parental/guardian consents, authorizations, and childcare licenses, and you must comply with COPPA, FERPA where applicable, and all state childcare record-keeping and safeguarding rules. Boutme processes that data only on your instructions to provide the feature. Do not enter a child's sensitive data you have no right to store.
• Other people's data. When you connect notifications, contacts, calendars, inboxes, or integrations, you represent that you have the right to share any third-party personal data involved and to instruct your agent about it, and that you will respect the privacy of senders, customers, children, and families.

16. Payments, Subscriptions, Refunds and Marketplace Transactions

• Platform fees vs. merchant transactions. Amounts you pay to Boutme for plans/add-ons (if any) are separate from amounts your own customers pay you through Reservations/Store. Each merchant configures their own Stripe/Square account and is the seller/merchant of record for their sales.
• Buyer–seller disputes. Purchases, bookings, deposits, tips, and refunds for Reservations/Store are solely between the merchant and their buyer/guest. Boutme is not a party to those transactions and does not set or guarantee prices, availability, quality, refunds, or chargeback outcomes. Direct refund and chargeback disputes to the merchant; merchants must honor their posted policies and applicable law.
• Chargebacks and taxes. Merchants are responsible for chargebacks, reversals, card-network fees, and for calculating, collecting, and remitting all applicable taxes on their sales. Boutme does not give tax advice.
• Plan changes. If paid plans apply, fees, renewal, cancellation, and refund terms are as presented at checkout or in your account. Except as required by law or as expressly stated at purchase, plan fees are non-refundable once the billing period starts.

17. Beta Features, Availability and Changes

Some features may be labeled beta, experimental, or early access and may be incomplete, change, or be discontinued at any time. The WebApp is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement, to the fullest extent permitted by law. We do not guarantee uninterrupted, error-free, or virus-free operation, nor that data (including AI outputs, syncs, or imports) will be accurate, complete, or preserved without backup on your side for critical records.

18. Copyright and Intellectual Property Complaints

If you believe content hosted through the WebApp infringes your copyright or other IP rights, send a notice to contact@insigniavif.com with: (a) identification of the work/registration; (b) the exact URL or location of the allegedly infringing material; (c) your contact information; (d) a good-faith statement; (e) a statement of accuracy under penalty of perjury and of authority to act; and (f) your physical or electronic signature. Repeat infringers' accounts may be terminated. Counter-notices may be sent to the same address.

19. Liability Cap, Exclusions and Force Majeure

To the maximum extent permitted by law: (a) neither party's aggregate liability arising out of or related to the WebApp will exceed the greater of (i) the amounts you paid to Boutme for the WebApp in the 12 months before the claim, or (ii) USD $100 if you paid nothing; (b) in no event will INSIGNIAVIF Boutme be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, data, goodwill, or business interruption, even if advised of the possibility; (c) the limitations in this section do not limit liability that cannot be limited by law (e.g., fraud, willful misconduct, or statutory consumer rights where non-waivable). We are not liable for delays or failures due to events beyond our reasonable control (force majeure), including internet or hosting outages, third-party API changes or shutdowns (Google, Intuit, Plaid, Stripe, Square, Meta, AI providers), app-store actions, or governmental orders.

20. Dispute Resolution — Informal First, Then Binding Arbitration; No Class Actions

• Informal resolution. Before filing a claim, you agree to contact us at contact@insigniavif.com and attempt to resolve the dispute informally for 30 days.
• Binding arbitration. Except for small-claims court actions and IP injunctive relief, any dispute arising out of or relating to these Terms or the WebApp will be resolved exclusively by binding individual arbitration (not a judge or jury), administered under the AAA Commercial Arbitration Rules (or JAMS if AAA is unavailable), in English, with venue in the State of Florida, USA, unless otherwise required by non-waivable consumer law. Each party bears its own costs unless the arbitrator orders otherwise.
• Class/jury waiver. To the fullest extent permitted by law, claims must be brought only in your individual capacity and not as a plaintiff or class member in any class, collective, or representative proceeding. You and Boutme waive any right to a jury trial where permitted.
• Opt-out. You may opt out of arbitration within 30 days of first accepting these Terms by emailing contact@insigniavif.com with subject "Arbitration Opt-Out" and your account email/Card Code.

21. General Terms

• Severability; waiver; entire agreement. If any provision is held unenforceable, it will be reformed to the minimum extent necessary and the rest remains in effect. Failure to enforce a provision is not a waiver. These Terms, with the Privacy Policy and any plan/checkout terms you accept, are the entire agreement for the WebApp.
• Assignment. You may not assign these Terms without our consent. We may assign them in connection with a merger, acquisition, or sale of assets, with notice to you.
• Notices; language. We may give notices via the WebApp, email, or your account. The English version of these Terms controls.
• Export & sanctions. You represent you are not on any restricted-party list and will not use the WebApp in violation of applicable export-control or sanctions laws.
• Survival. Sections 4–5 and 8–21 survive termination or account deletion.

Last updated:

Privacy Policy

Your privacy is of utmost importance to us. This Privacy Policy explains how INSIGNIAVIF Boutme collects, uses, shares, and protects your personal information.

1. Information We Collect

• Account information: name, last name, email address, and phone number, collected when you register.
• Card data: professional information you add to your Boutme card (photo, job title, address, links, etc.).
• Financial data (Cashflow module): bank transaction data retrieved via Plaid, Square sales data, and/or QuickBooks Online accounting records (invoices, bills, purchases, and chart of accounts), stored solely in your account for your personal financial tracking and AI assistance.
• Calendar data (Apts module): appointment information synchronized with your Google Calendar upon your explicit authorization.
• Cloud data (Cloud Storage plugin): files, documents, and associated metadata (such as file name, size, type, and Google Drive file ID) that you choose to store locally or on your linked Google Drive account.
• Payment data (Reservations/Store): transaction records (amounts, dates) processed by Stripe or Square; raw card numbers are never stored by us.
• Phone notifications (Android app, optional): if you enable notification access, the app name, sender or conversation name, message text and time of notifications received on your phone from a limited list of messaging, email and social apps. See Phone Notification Data below.
• Browser agent data (Chrome Extension, optional): when you connect and use the Boutme Desktop Agent extension, active page snapshot data (DOM text and interactive element tags) is processed transiently to carry out your specific automation commands and routines. See Chrome Extension Data & Privacy below.
• Usage data: log data such as IP address, browser type, and pages visited, used for security and performance monitoring.
• AI and agent content: prompts, agent answers, and command logs needed to operate your AI agent (including, only when you ask it to, phone notification summaries, contact/calendar lookups, page snapshots for browser automation). Answers saved in your chat history are kept until you delete them; transient command logs are deleted within 48 hours.
• Daycare / program data (entered by you as provider): children, guardian, attendance, meal/rest, billing, and staff information you choose to manage in daycare features. You are the controller for this data (see Section 9A).
• Health and wellness content (if you use those features): goals, logs, and preferences you enter to receive general wellness information. This is not medical-record data and the app is not a health-care provider (see Terms Section 15).

2. How We Use Your Information

• To operate and provide the features of the WebApp you activate.
• To send transactional emails (account activation, appointment confirmations, password recovery).
• To send marketing emails about new features and updates (your email may appear in group marketing communications; see opt-out below).
• To maintain security and prevent fraud.
• We do not sell your personal or financial data to third parties.
• We do not use your data for advertising purposes beyond our own product updates.

3. With Whom We Share Your Data

We share your data only with the following categories of third parties, and only to the extent necessary to provide the feature you have activated:

• Google LLC — Calendar synchronization (Apts module) and Cloud storage integration (Cloud Storage plugin). Data shared: appointment events you create, and files/metadata you choose to upload to Google Drive. Governed by Google's Privacy Policy. Use of Google data complies with the Google API Services User Data Policy , including Limited Use requirements.
• Intuit Inc. (QuickBooks Online) — Accounting, expense, and profit & loss synchronization (Cashflow module and AI assistant). Data accessed: company profile, chart of accounts, customer invoices, vendor bills, payments, and purchases. Governed by Intuit's Global Privacy Statement.
• Plaid Inc. — Bank connectivity (Cashflow module). Data shared: bank institution name and transaction data you choose to import. Governed by Plaid's Privacy Policy.
• Stripe, Inc. — Payment processing (Reservations/Store module). Data shared: transaction amount, currency, customer name/email. Governed by Stripe's Privacy Policy.
• Square, Inc. — Sales import (Cashflow module). Data shared: sales transaction data you import. Governed by Square's Privacy Policy.
• AI Providers (Google Gemini, Pollinations AI, OpenAI, Z.ai, Groq, NVIDIA) — Content generation and your Boutme AI agent. Data shared: text prompts and content you enter into AI tools, and the content the agent needs to answer you (including, when you ask it to, notifications, contacts or calendar events from your phone). Each provider's terms apply.
• Hosting infrastructure (Hostinger) — Our servers are hosted by Hostinger. Data is stored on servers in accordance with their security standards.
• Law enforcement / legal process — We may disclose data when required by law, court order, or to protect rights, property, or safety.

We do not share your data with any other third parties not listed above.

4. Google API Data — Limited Use Policy

5. Intuit QuickBooks Online Data — Protection & Disconnection Policy

5A. Phone Notification Data (Android App)

5B. Phone Actions Data — Contacts and Calendar (Android App)

5C. Boutme Desktop Agent — Chrome Extension Privacy & Data Handling

6. Your Rights and Choices

• Access, correction, portability, deletion: You can view and update your profile information directly within the WebApp settings. For access, portability, correction, or deletion requests (including GDPR/UK-GDPR and US state privacy requests where applicable), email contact@insigniavif.com with your account email or Card Code. We verify identity before acting and respond within the time required by applicable law (generally within 30–45 days).
• US state rights (e.g., California/CPRA, and similar state laws): depending on your state, you may have the right to know categories/sources/purposes of personal information collected, to correct or delete it, to opt out of any "sale" or "sharing" (we do not sell personal information as defined by the CCPA/CPRA), to limit use of sensitive personal information, and to not be discriminated against for exercising these rights. You may use an authorized agent with written permission and identity verification.
• Disconnect integrations: You can disconnect Google Calendar, Google Drive, QuickBooks Online, Plaid, or Square at any time through the Integrations or relevant module settings. This will revoke our access and immediately delete your stored tokens.
• Chrome Extension: You can disconnect or uninstall the Boutme Desktop Agent extension at any time via chrome://extensions.
• Phone notifications: You can turn off notification access for Boutme in your Android settings at any time, and ask your agent to delete the notifications stored from your phone.
• Marketing opt-out: To remove your email from marketing communications, send an email to contact@insigniavif.com with the subject "Email privacy" and your Card Code. Transactional emails (activation, security, receipts) cannot be opted out of while you hold an account.
• Account deletion: To delete your account and all associated data, email contact@insigniavif.com with the subject "Delete Account" and your email or Card Code. We will process your request within 30 days.

7. Data Retention

We retain your personal information for as long as your account is active. Third-party service tokens (Google, Intuit QuickBooks, Plaid, Square) are deleted immediately upon disconnection of the service. Notifications received from your phone (Android app, if you enable it) are kept for a maximum of 7 days and then deleted automatically. Upon account deletion, all personal data is removed within 30 days. Anonymized or aggregated data may be retained for statistical purposes.

8. Security

We protect your information through reasonable security safeguards including: encrypted storage of sensitive tokens (AES-256), HTTPS/TLS for all data transmission, and access controls on our databases. No security system is impenetrable, and we cannot guarantee absolute security of your data.

9. Children's Privacy

The WebApp itself is not directed to children under 13, and we do not knowingly collect personal data directly from children under 13 for our own purposes.

Daycare/provider customers: if you operate a daycare or similar program and enter children's or families' information into Boutme, you act as the data controller and must obtain all required verifiable parental/guardian consent (including COPPA consent where applicable), limit data to what is necessary for care and billing, and comply with all childcare licensing and records laws. We process such provider-entered data only to provide the feature on your instructions. If we learn that provider-entered children's data lacks required consent, we may delete or restrict it.

9A. Controller and Processor Roles; International Transfers

For your own account data, INSIGNIAVIF Boutme acts as the data controller/business. For data about your customers, guests, buyers, children/families, or employees that you enter or connect (store orders, reservations, daycare records, notification subjects, contacts), you act as the controller/business and Boutme acts as your processor/service provider, processing it only to provide the features you activate, on your instructions.

Our servers are currently hosted by Hostinger. Your data may be stored or processed in the United States or other countries where our hosting and subprocessors (Google, Intuit, Plaid, Stripe, Square, Meta, AI providers listed in Section 3) operate. Where required, we rely on appropriate transfer safeguards (such as Standard Contractual Clauses) for data originating in the EEA/UK.

9B. Additional Data, Breach Notification, Tracking and Lawful Requests

• Additional data we process when you use the service: AI conversation content and agent command logs (kept short-lived as described in Sections 5A–5C unless saved as part of your chat history until you delete it); support messages; device/app identifiers, crash and error reports; and payment metadata (plan, amounts, receipts — raw card data stays with Stripe/Square).
• Breach notification: if we discover a personal-data breach that poses a risk to you, we will notify you and, where required, the competent authority without undue delay, as required by applicable law.
• Do Not Track / cookies: the WebApp does not currently respond to browser "Do Not Track" signals. Session, preference, and security cookies are strictly necessary; third-party integrations may set their own cookies per their policies (see Terms Section 7).
• Law-enforcement and legal requests: we scrutinize requests, disclose only what is legally required, and, unless prohibited, will attempt to notify the affected user. We publish nothing about your data beyond what these policies describe.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes affecting data sharing will be communicated via email or an in-app banner.

11. Contact Us

For questions, concerns, or requests related to your personal data or this Privacy Policy, contact us at:

INSIGNIAVIF Boutme
Email: contact@insigniavif.com
Website: https://boutme.cards

Accessibility Statement

INSIGNIAVIF Boutme aims to conform to WCAG 2.2 Level AA: semantic landmarks and headings, full keyboard operability with visible focus, sufficient color contrast in light and dark modes, resizable text, and reduced-motion support. No third-party accessibility overlay is used — overlays do not guarantee compliance. If you encounter a barrier, email contact@insigniavif.com with the page URL and the assistive technology you use; we respond and prioritize a fix.

Declaración de accesibilidad

INSIGNIAVIF Boutme busca cumplir WCAG 2.2 nivel AA: estructura semántica y encabezados, operación total por teclado con foco visible, contraste suficiente en modo claro y oscuro, texto redimensionable y soporte de movimiento reducido. No usamos barras o widgets de accesibilidad de terceros — no garantizan el cumplimiento. Si encuentra una barrera, escriba a contact@insigniavif.com con la URL y la tecnología de asistencia que usa; respondemos y priorizamos la corrección.