Summary: BOM Transformer processes your Bill of Materials files solely to detect errors and generate cleaned outputs. We do not sell your data, share it with advertisers, or use it for any purpose beyond providing the service you requested.
01 Who We Are
BOM Transformer ("we," "us," "our") is an AI-powered Bill of Materials (BOM) audit and error-detection service. We provide a web-based tool that allows engineers and procurement professionals to upload BOM files, receive an automated error report, and optionally download a cleaned version of their BOM.
We are operated as an independent software service. For questions about this Privacy Policy, contact us at [email protected].
02 Information We Collect
Information You Provide Directly
- Account information: Email address and password when you create an account.
- BOM files: Excel (.xlsx, .xls) or CSV files you upload for auditing. These may contain part numbers, descriptions, quantities, units, manufacturers, and other manufacturing data.
- Payment information: When you purchase a BOM unlock, payment is processed by Gumroad. We do not collect or store your credit card number or full payment details — only a confirmation of successful payment.
Information Collected Automatically
- Usage data: Pages visited, features used, time spent, error types detected in aggregate (not tied to your specific file contents).
- Device and browser information: Browser type, operating system, IP address, and general geographic region.
- Log data: Server logs including timestamps of requests, file upload events, and audit completions.
03 How We Use Your Information
We use the information we collect for the following purposes:
- To provide the service: Processing your BOM files through our AI audit engine and returning error reports and cleaned files.
- Account management: Creating and maintaining your account, authenticating your sessions.
- Payment verification: Confirming purchases and unlocking paid features for your account.
- Service improvement: Analyzing aggregate usage patterns (not individual file contents) to improve detection accuracy and add new error types.
- Support: Responding to inquiries and troubleshooting issues you report.
- Legal compliance: Complying with applicable laws, regulations, and legal processes.
We do not: sell your data, use your BOM file contents for advertising, train AI models on your proprietary manufacturing data without explicit consent, or share your information with third parties except as described in Section 5.
04 Your BOM Files — Special Notice
We understand that your Bill of Materials files may contain proprietary and commercially sensitive manufacturing data. We take this seriously.
When you upload a BOM file:
- Your file is transmitted securely to our servers over an encrypted connection (HTTPS).
- The file content is passed to an AI processing service (Anthropic's Claude API) solely to perform error detection and generate a cleaned output. Anthropic's data handling is governed by their own privacy policy and API usage terms.
- Your file is stored in our database (Supabase) associated with your account to allow you to access your audit history and previously unlocked files.
- We do not manually read, review, or access the specific contents of your BOM files except when required for troubleshooting a support request you have made.
- We do not share your BOM file contents with any third party beyond what is described in Section 5.
If you have specific data sensitivity requirements, please contact us before uploading proprietary files.
05 Third-Party Services
We use the following third-party services to operate BOM Transformer. Each has its own privacy policy governing their handling of data:
Supabase
Our database and authentication provider. Stores your account information, audit records, and uploaded BOM files. Hosted on infrastructure in the Mumbai (ap-south-1) region. See supabase.com/privacy.
Anthropic (Claude API)
Our AI processing engine. Your BOM file contents are sent to Anthropic's API to perform error detection. Anthropic processes this data according to their API usage policies. See anthropic.com/privacy.
Gumroad
Our payment processor. When you purchase a BOM unlock, you complete payment on Gumroad's platform. We receive a payment confirmation but do not handle your payment card details directly. See gumroad.com/privacy.
Vercel
Our hosting provider. Serves the BOM Transformer web application. See vercel.com/legal/privacy-policy.
06 Data Retention
We retain your data for as long as your account is active or as needed to provide the service.
- Account data: Retained until you delete your account.
- BOM files and audit results: Retained for 12 months from upload date, or until you delete them from your account, whichever comes first.
- Payment records: Retained for 7 years as required for financial record-keeping compliance.
- Log data: Retained for 90 days.
To request deletion of your data before these periods expire, contact us at [email protected].
07 Security
We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include:
- Encrypted data transmission (HTTPS/TLS) for all communications
- Encrypted storage of passwords (never stored in plaintext)
- Row-level security policies in our database so users can only access their own data
- Authentication tokens with expiration and refresh mechanisms
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.
08 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a machine-readable format.
- Objection: Object to certain types of processing of your data.
- Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.
09 Cookies
BOM Transformer uses minimal cookies necessary to operate the service:
- Authentication cookies: To keep you logged into your account across sessions. These are strictly necessary and cannot be disabled without logging out.
- Session storage: Temporary data stored in your browser for the duration of your session only.
We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
10 Children's Privacy
BOM Transformer is a professional tool intended for use by adults in manufacturing and engineering contexts. We do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has provided us with personal information, please contact us immediately at [email protected] and we will delete that information promptly.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify registered users via email at least 14 days before changes take effect
Your continued use of BOM Transformer after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.