Privacy Notice

This Privacy Notice explains how Bomani Digital ("we", "us") collects, uses, and shares personal data when you use the I Was Here website and services (the "Service"). Bomani Digital is the data controller for personal data processed through the Service.

1. Personal data we collect

• Account data: email address, password hash, authentication identifiers.
• Record content: name, biographical text, themes, quotes, and other content you submit.
• Nomination data: nominee name and contact information (encrypted at rest) provided when you nominate someone.
• Support communications: messages you send to us.
• Usage and device data: IP address, browser type, pages visited, timestamps, and similar telemetry.

Payment card details are collected and processed by Paddle. We do not store card numbers.

2. How we use personal data

• To create and maintain your account and published records.
• To deliver nomination invitations and manage sponsorships.
• To provide customer support and respond to inquiries.
• To secure the Service, prevent fraud, and enforce our Terms.
• To improve product performance and reliability.
• To comply with legal obligations.

3. Legal basis

We process personal data on the basis of (a) performance of our contract with you, (b) our legitimate interests in operating and improving the Service and preventing abuse, (c) your consent where required, and (d) compliance with legal obligations.

4. Sharing personal data

We share personal data with the following categories of recipients:

• Paddle — our Merchant of Record for the sale of the Service, subscription management, payments, tax compliance, and invoicing.
• Service providers / subprocessors — hosting, database, email delivery, analytics, and support tooling.
• Professional advisers — legal, accounting, and insurance advisers where necessary.
• Authorities — where required by law or to protect rights, safety, and property.

5. Retention

We retain published records for the lifetime of the monument, consistent with its purpose as a permanent archive. Account, support, and telemetry data are retained only as long as needed for the purposes above and are deleted or anonymised when no longer required. Unpublished draft records are removed after 24 hours.

6. Your rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. EEA/UK residents may lodge a complaint with their supervisory authority. To exercise these rights, contact us at the address below; we will respond within one month.

7. International transfers

Personal data may be processed outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We implement appropriate technical and organisational measures — including encryption in transit, encryption of sensitive nominee contact data at rest, access controls, and audit logging — to protect personal data.

9. Cookies

We use strictly necessary cookies to keep you signed in and to secure the Service. We do not use advertising cookies. Any analytics cookies used are aggregated and do not identify individuals.

10. Contact

Bomani Digital — privacy inquiries: privacy@iwashereonearth.com.