Privacy Policy

Short version: boreon.com is a marketing and services website. We collect only what you voluntarily send us through our contact form, plus the minimal server logs our host generates automatically. We do not run analytics trackers, advertising pixels, or third-party tracking scripts on this site.

1   Who We Are

Boreon Industries LLC ("Boreon," "we," "us," or "our") is a United States company incorporated under the laws of the United States of America, providing analytics, AI, network, and infrastructure professional services since 2011. Our primary public website is boreon.com.

Our contact for privacy matters is:
privacy@boreon.com
Subject line: PRIVACY: followed by your request

---

2   What This Policy Covers

This Privacy Policy applies exclusively to the website boreon.com and its subpages. It does not govern:

• Free Church ChMS (freechms.org) — covered by the Free Church ChMS Privacy Policy
• Sermon Assistant (sermonassistant.ch) — governed by Swiss data protection law under Infomaniak hosting
• Any client-side deployments, managed services, or on-premise solutions Boreon delivers to clients — those are governed by the applicable Statement of Work and/or Master Services Agreement

---

3   Data We Collect

3.1   Contact Form Submissions

When you submit the contact form at boreon.com/contact, we collect:

Data type	Purpose	Retention
Name	Identify you in our response	Until request resolved + 2 years
Email address	Reply to your enquiry	Until request resolved + 2 years
Company name (optional)	Understand your organization context	Until request resolved + 2 years
Message content	Respond to your specific enquiry	Until request resolved + 2 years

We do not sell, rent, or share your contact form data with any third party. It is used solely to respond to you.

3.2   Server Logs

Our hosting provider, Infomaniak (Geneva, Switzerland), automatically generates web server access logs. These may include:

Data type	Purpose	Retention
IP address	Security monitoring, rate limiting	30 days
Request path, HTTP method, status code	Error diagnosis, uptime monitoring	30 days
User-Agent string	Browser compatibility	30 days
Referrer URL	Detecting referral traffic	30 days

---

4   Cookies

boreon.com uses no advertising cookies, no analytics cookies, and no third-party tracking cookies. There are no Google Analytics, Facebook Pixel, or similar services on this website.

The only cookie that may be set is a PHP session cookie (PHPSESSID), created only when an authorized administrator logs in to the site backend. This cookie:

• Is HttpOnly (not accessible to JavaScript)
• Is SameSite=Lax for CSRF protection
• Is marked Secure when served over HTTPS
• Expires when you close your browser or after 8 hours of inactivity
• Contains only a randomly generated session identifier — no personal data

If you visit boreon.com as a regular visitor (not logging in to the backend), no cookies are set on your device.

---

5   Third-Party Services

boreon.com self-hosts all fonts and static assets. No external CDN, font service, or analytics provider is loaded by this website. There are no third-party scripts, pixels, or embeds that could track you across sites.

The only external connection your browser makes when visiting boreon.com is to our Infomaniak server in Switzerland.

---

6   How We Use Your Data

Data we receive through the contact form is used solely to:

• Respond to your enquiry or request for a discovery call
• Provide professional services you have requested
• Comply with applicable legal obligations

We do not use your data for advertising, profiling, sale to third parties, or any other purpose. We are a professional services firm, not an ad-supported business.

---

7   Data Transfers & Sovereignty

boreon.com is hosted on Infomaniak infrastructure in Geneva, Switzerland. Switzerland is recognized by the European Commission as providing an adequate level of data protection (EU–Switzerland adequacy decision). Infomaniak is a Swiss company subject to the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the GDPR.

Boreon Industries LLC is a United States company. In our capacity as the operator of boreon.com, we are subject to applicable U.S. privacy law including the California Consumer Privacy Act (CCPA) for California residents.

---

8   Your Rights

Depending on your jurisdiction, you may have the following rights with respect to personal data we hold:

Right	Description	How to exercise
Access	Obtain a copy of data we hold about you	privacy@boreon.com
Rectification	Correct inaccurate data	privacy@boreon.com
Erasure	Request deletion of your data	privacy@boreon.com
Restriction	Limit how we process your data	privacy@boreon.com
Object	Object to processing based on legitimate interests	privacy@boreon.com

We aim to respond to all privacy requests within 5 business days. For EU or Swiss residents who believe we have violated applicable data protection law, you have the right to lodge a complaint with your national supervisory authority (Switzerland: the Federal Data Protection and Information Commissioner, FDPIC).

---

9   Security

We implement appropriate technical and organizational measures to protect the data we process:

• TLS encryption for all data in transit (HTTPS)
• Infomaniak's ISO 27001-compliant infrastructure and Swiss data center physical security
• Application-level security headers (Content-Security-Policy, HSTS, X-Frame-Options)
• Rate limiting on the contact form to prevent automated abuse
• SQLite database access controlled at the file-system level

---

10   Children

boreon.com is a B2B professional services website not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our contact form, contact us at privacy@boreon.com and we will delete it promptly.

---

11   Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Your continued use of boreon.com after changes become effective constitutes acceptance of the revised policy.

---

12   Contact