Bossreach · Terms of Service · Privacy Policy · Data Processing Addendum · Subprocessors · Acceptable Use Policy

Bossreach Terms of Service

Provider: Final Boss Games, operating Bossreach ("Bossreach", "we")
Effective: October 9, 2026 · Last updated: October 11, 2026
Contact: privacy@bossreach.io · [mailing address]

These Terms govern access to Bossreach, including bossreach.io and its subdomains, parley.email, Bossreach CMS (cms.bossreach.io) and sites published through it, and related APIs (the "Service"). They are a business agreement. By creating an organisation, accepting an invitation, or using the Service, the person accepting confirms they have authority to bind their organisation ("Customer", "you").

You accept these Terms, the Privacy Policy and the DPA by creating an organisation, accepting an invitation, or using the Service. If we change them materially, we will tell the account owner as described in section 16.

1. Eligibility and accounts

• The Service is for businesses and professionals only, not consumers. Users must be 18 or older.
• Access is by invitation or approval. You are responsible for your users, their roles, and keeping sign-in methods secure.
• Tell us promptly at privacy@bossreach.io about any unauthorised access.

2. The Service

• We provide tools to find, organise and contact business prospects, send and track email, manage CRM records and publish websites.
• Many features use third-party services, often with your own API keys ("Bring Your Own Key"). Your use of those services is under their terms and at your cost.
• We may change or improve features. We will give 30 days' notice before removing a core feature you rely on, where practical.
• No uptime promise. We do not offer a service level agreement (SLA) or guaranteed availability unless we sign a separate written agreement that says so.

3. Fees

• The Service is currently offered free of charge; you pay your own third-party providers directly.
• If we introduce paid plans, we will show the price, billing period, automatic renewal terms and how to cancel online before you pay, and you will need to opt in. Paid plans will be cancellable online at any time, effective at the end of the paid period. Existing free use will not be converted to paid without your consent.

4. Your data

• You own your data ("Customer Data"): contacts, campaigns, messages, site content and form submissions.
• You give us the rights needed to host, process and transmit Customer Data to provide the Service, under our Data Processing Addendum (DPA), which is part of these Terms.
• We do not sell Customer Data, use it to advertise, use it to train AI models, or use it for other customers. We may use aggregated, de-identified usage statistics (for example counts of emails sent) to run and improve the Service.
• You are responsible for having the right to collect and use the data you put in, including a lawful basis and any required consents for contacting people.
• Export and deletion: you can export your data at any time, erase one person from your organisation's data, or delete your whole organisation. See the DPA for deletion timelines.

5. Acceptable use

You must follow the Acceptable Use Policy (bossreach.io/legal/acceptable-use), including email law rules (CAN-SPAM, CASL, GDPR/PECR), honouring unsubscribes, and including your valid postal address in commercial email. We may pause sending or suspend access to protect recipients, deliverability or the law.

6. Crawling and research

The Service can visit public websites to find business information. By default it obeys robots.txt, identifies itself as BossreachBot and waits between requests. You must not configure it to get around access controls, rate limits or a site's terms, and you are responsible for any non-default crawl settings you choose (for example ignoring robots.txt or a browser user agent).

7. AI features

AI features send the relevant content (for example a contact's name and company, website text, a reply, or a call transcript you choose to analyse) to the AI providers listed on our subprocessor page, only to produce the output you asked for. Outputs may be inaccurate: review AI-drafted emails before sending. We use AI providers whose commercial API terms say they do not train on API inputs.

8. Our property and feedback

We own the Service, its software and design. You get a non-exclusive, non-transferable right to use it during the term for your internal business. You may not reverse engineer it except where law allows, resell it, or use it to build a competing product. If you send feedback, we may use it without obligation.

9. Confidentiality

Each side will protect the other's non-public information with reasonable care and use it only for this agreement, except information that is public, already known, independently developed, or must be disclosed by law (with notice where allowed).

10. Warranties and disclaimers

Each side promises it has authority to enter these Terms. Except for that, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY OF CONTACT OR ENRICHMENT DATA, DELIVERABILITY, OR UNINTERRUPTED OPERATION. We hold no security certifications (such as SOC 2 or ISO 27001) and make no claim to.

11. Limitation of liability

TO THE FULLEST EXTENT ALLOWED BY LAW: (a) NEITHER SIDE IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR LOST PROFITS, REVENUE, DATA OR GOODWILL; AND (b) EACH SIDE'S TOTAL LIABILITY ARISING OUT OF THESE TERMS IS LIMITED TO THE GREATER OF THE FEES YOU PAID US IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM OR US $100. These limits do not apply to your payment obligations, your indemnity in Section 12, or liability that cannot be limited by law.

12. Indemnity

You will defend and indemnify us against third-party claims arising from Customer Data, your messages and campaigns (including email law and anti-spam claims), your sites' content, or your breach of the Acceptable Use Policy.

13. Term and termination

These Terms last while you use the Service. Either side may end them at any time on notice (you can do so by deleting your organisation). We may suspend immediately for serious or repeated breach, security risk, or legal requirement. After termination you have 30 days to export your data; then we delete it as set out in the DPA.

14. Governing law and disputes

California law governs, without regard to conflict-of-law rules. Before filing a claim, the parties will try to resolve it by good-faith discussion for 30 days. The state and federal courts in [county], California have exclusive jurisdiction, and either party may bring a qualifying claim in small claims court. Either party may seek urgent injunctive relief in any competent court.

15. General

Entire agreement (these Terms, the DPA, the Acceptable Use Policy and any order form); severability; no waiver; assignment only with consent, except to a successor of the business (including a company formed to run Bossreach); force majeure; notices by email to the account owner and to privacy@bossreach.io; independent contractors.

16. Changes

We may update these Terms. For material changes we will email the account owner at least 30 days before they take effect. Continued use after that means acceptance.

Changes log

Bossreach is operated by Final Boss Games · [mailing address] · privacy@bossreach.io