Privacy policy
What we collect, why we collect it, who else sees it, and what you can ask us to do about it.
Last updated 26 August 2026
The company behind this service
- Registered name
- BE PLUS S.R.L.
- Trade registry no.
- J2026039087001
- VAT number
- RO54913206
- Share capital
- 500 RON
- Registered office
- Str. Dealul Țugulea nr. 77, birou 2, etaj 1, sector 6, 060865 București, România
- Registry
- Oficiul Registrului Comerțului de pe lângă Tribunalul București
- hello@boostyourlife4ever.com
1. Who is responsible
BE PLUS S.R.L., identified at the top of this page, is the controller of the personal data described here. For anything to do with privacy, write to privacy@boostyourlife4ever.com.
Where we process personal data on a customer’s behalf — the content they publish, the social accounts they connect — we act as a processor on that customer’s instructions, and this policy describes what we do with it.
2. What we collect
- When you sign in. Google gives us your email address, your name and a stable identifier for your account. We never receive your Google password.
- Your organisation and your brands. The company name, the brand descriptions you write, and the people you invite.
- Social connections. One access token per connected account, plus that account’s identifier and display name. Tokens are encrypted with a dedicated key.
- What we generate. The posts written for your brands, their status, the edits you make, and the network’s own identifier for each published post.
- Billing. The status of your subscription, the plan it is on and the identifier Stripe gives us. Stripe handles the payment itself — we never receive your card number.
- Technical records. Request logs, and an audit trail of what was done in your organisation: the time, who did it and what changed.
- Visiting this website. Nothing. No account is created and no profile is built. See the cookie policy.
3. Why, and on what legal basis
| What | Why | Legal basis |
|---|---|---|
| Account and organisation data | To give you an account and run the service | Performance of the contract |
| Brand descriptions and generated posts | To write and publish your posts | Performance of the contract |
| Social account tokens | To publish to the accounts you connected | Performance of the contract |
| Billing data | To take payment and issue invoices | Performance of the contract, and legal obligation |
| Service email | To tell you your week is ready, or that a connection has expired | Performance of the contract |
| Audit trail and logs | To keep the service secure, investigate abuse, and show what was published if a payment is disputed | Our legitimate interest in a secure service and in defending a claim |
| Accounting records | To keep books as Romanian law requires | Legal obligation |
4. Who else sees it
We use the following providers to run the service. Each acts under contract, on our instructions, and only for what is listed here.
| Provider | What it does | Where |
|---|---|---|
| Amazon Web Services | Hosting, database and file storage | European Union (Frankfurt) |
| Amazon SES | Sends the emails the service sends you | European Union (Frankfurt) |
| Stripe | Takes payment and issues invoices | European Union and United States |
| Signs you in | European Union and United States | |
| Ayrshare | Delivers posts to the social networks | United States |
| The networks you connect | Receive the posts we publish for you | Under their own terms |
We do not sell personal data, and we do not share it for advertising.
5. Where it is stored, and transfers outside the EU
Your data is stored in the European Union, in Amazon’s Frankfurt region. Some of the providers above are established in the United States, so some data reaches them there.
Those transfers rely on the European Commission’s standard contractual clauses, or on the EU–US Data Privacy Framework where the provider is certified under it.
6. How long we keep it
| What | How long |
|---|---|
| Account and organisation data | While the account exists, then deleted within 30 days of closure |
| Social account tokens | Deleted as soon as you disconnect the account, or when the account closes |
| Brand descriptions and generated posts | While the brand exists, then deleted with the account |
| Audit trail and security logs | 12 months |
| Invoices and accounting records | 10 years, as Romanian accounting law requires |
Accounting records are the one thing we cannot delete on request: the law requires us to keep them, and that obligation outlives the account.
7. Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you,
- correct it if it is wrong,
- delete it,
- restrict what we do with it, or object to processing based on our legitimate interest,
- send it to you, or to another provider, in a portable format.
Write to privacy@boostyourlife4ever.com. We answer within 30 days, and we may need to check who you are before acting on a request.
You can also close your account yourself from the settings, which deletes it and everything under it.
If you think we have handled your data badly, tell us first — and if that does not resolve it, you can complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (dataprotection.ro), or to the authority in the country where you live.
8. How we protect it
- Social account tokens are encrypted with a dedicated key, and only the parts of the service that publish on your behalf can use it.
- Every request is checked against the organisation it names, and data is addressed so that another customer’s records are not a permission we might forget to check — they are an address that does not exist.
- Traffic is encrypted in transit, and data is encrypted at rest.
- There is no password for us to lose: signing in goes through Google, and we never see it.
9. Children
The service is sold to businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, write to privacy@boostyourlife4ever.com and we will delete it.
10. Changes to this policy
If this policy changes we update this page and change the date at the top. Changes that materially affect you are announced by email before they take effect.
11. Contact
privacy@boostyourlife4ever.com, or the registered office listed at the top of this page. We have not appointed a data protection officer, because the scale and nature of what we do does not require one; privacy questions go to the address above and are answered by the company.