Privacy Policy

Effective: March 9, 2026

Ocean Edgewater, LLC ("we", "us") operates BOMAtlas (bomatlas.com). This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Information you provide:

• Early-access and sourcing requests: name, email address, organization, role, request context, source page, and our follow-up status
• Entity submissions: company or school information you submit for listing
• Newsletter signup: email address
• Contact forms: name, email, message content

Information collected automatically:

• Analytics: page views, session duration, referral source via Google Analytics (GA4). We use anonymized IP addresses.
• Security records: IP address, browser type, and request timestamps used for rate limiting, abuse prevention, and audit logs. Cloudflare also processes server logs under its privacy policy. IP addresses and browser strings are not copied into our canonical sales lead record.

2. How We Use Your Information

• To provide and improve the BOMAtlas platform
• To process early-access, sourcing, opportunity-alert, and entity-submission requests
• To assign an owner, track the next action, and respond to your request
• To send transactional confirmations and service-related communications
• To send marketing emails only when you explicitly opt in
• To analyze usage patterns and improve the user experience
• To respond to support requests

3. Data Sources

Company and supplier data displayed on BOMAtlas is sourced from publicly available federal registries including SAM.gov (System for Award Management), IPEDS (Integrated Postsecondary Education Data System), and the College Scorecard. This data is in the public domain and is not considered personal information.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Cloudflare: hosting, CDN, and security (data processing agreement in place)
• Google Analytics: anonymized usage analytics
• Resend: transactional email delivery
• Firebase: authentication services

We may disclose information if required by law or to protect our rights and the safety of our users.

5. Data Retention

• Account data: retained while your account is active, deleted upon request
• Analytics data: retained per Google Analytics default (14 months)
• Server logs: retained per Cloudflare policy (typically 72 hours)
• Email subscriptions: retained until you unsubscribe

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Unsubscribe from marketing emails at any time
• Opt out of analytics tracking via browser settings or extensions

California residents: under the CCPA, you have additional rights regarding your personal information. We do not sell personal information as defined by the CCPA.

7. Cookies

We use minimal cookies for authentication sessions and analytics. No third-party advertising cookies are used. Google Analytics uses first-party cookies to distinguish users.

8. Security

We use industry-standard security measures including HTTPS encryption, Cloudflare DDoS protection, and secure authentication via Firebase. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

BOMAtlas is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy periodically. The effective date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related questions or data requests, email hello@bomatlas.com.