Privacy Policy

Last updated 2026-09-13

What the Boreon™ TabTotal support platform collects, why, where it lives, and the rights you hold over it.

This policy explains how the Boreon™ TabTotal Support platform (support.boreon.com, also reachable at support.boreon.ai) handles personal data. It covers the support service only. The TabTotal product at tabtotal.boreon.com is a separate service with its own privacy policy. The platform is operated by Boreon Industries LLC.

Who this applies to

The platform is used by two groups: the authorised contacts of enterprises that hold a TabTotal Enterprise Licence, who sign in to the customer console at /support; and Boreon support staff, who work cases in the staff console. Sign-in is by email, password, and a time-based authenticator code (TOTP).

What we collect

Account and contact information — your name, email address, the Enterprise Licence you belong to, your seat and role, and the account's status.
Support conversations — what you ask Boreon Support and the assistant's replies, including the sources it cites and the diagnostic steps it runs during a conversation.
Cases and their timeline — the content of a case you open, its status changes, staff replies, and internal notes. Opening a case carries the conversation transcript into the case so a human has the full context.
Read-only reads of your own connected Tableau site — if you choose to connect your Tableau site (using an encrypted Personal Access Token or a Connected App JWT), we read metadata such as workbooks, data sources, and extract-refresh health, scoped to your licence. These reads are strictly read-only; the platform never writes to, or changes, your Tableau or TabTotal state.
Security and authentication data — your password (stored only as a hash), your authenticator secret, sign-in events, lockout counters, per-request identifiers, and an audit trail of significant actions.
Notification email — the messages sent to you when a case opens, when staff reply, and when a case's status changes, held in a durable outbox until delivered.

Why we process it

We process this data to operate the support service you or your organisation asked for: to answer questions, to open and track cases, to keep you informed about them, to look up your licence and seats when you ask, and to secure the platform against misuse. We do not use your data for advertising, and we do not build advertising profiles.

Where your data lives

Support data stays on Boreon-controlled, Swiss-hosted infrastructure. The platform runs on Infomaniak in Geneva, Switzerland. Keeping support conversations, cases, and account data within Switzerland is a design commitment of the platform, not an afterthought — the same data-sovereignty guarantee TabTotal itself gives its customers.

AI processing

The assistant is grounded and read-only: it answers only what it can prove from indexed TabTotal documentation or a read of your account, with visible sources, and otherwise declines honestly and opens a case. By default, the AI inference that powers it runs on Infomaniak AI Services (Geneva) using open models — so by default your prompts do not leave Switzerland. A Boreon Super Admin may route a specific support task to Anthropic Claude as an explicit, audited choice; when that happens, that task's prompts are sent to Anthropic and leave Switzerland for that task only. No AI model ever runs on your device or is trained on your data. See our AI Safety page for the full detail.

Encryption and security

Secrets — including any Tableau access token or Connected App key you provide, your authenticator secret, and AI provider credentials — are encrypted at rest. The platform applies a strict Content-Security-Policy, sends no-store on responses, stamps a request identifier on every response, enforces a database-backed sign-in lockout, requires two-step verification, and records significant actions in an audit trail. No system is unbreakable; these are the controls we run.

Retention and your rights

We keep your data for as long as your account is active and as long as we need it to provide support. You are in control of your support history:

From the Danger zone in your account, you can erase your support history and delete your account. This requires a typed confirmation, is recorded in the audit trail, and cascades to the records tied to your account.
A Boreon Super Admin can purge an individual case, or an entire licence and everything under it, on request — also typed-confirmed, audited, and cascading.

If you would like a copy of your data, a correction, or a deletion carried out on your behalf, contact us at support@boreon.com.

We do not sell your data

Boreon does not sell or rent your personal data, and we do not share it for anyone else's advertising. Support data is used to run support, and for nothing else.

Cookies

The platform sets only the cookies it needs to work: a session cookie to keep you signed in, a CSRF-protection token, and a cookie that remembers your language choice. There are no tracking, analytics, or advertising cookies, and no third-party trackers.

Changes to this policy

If we change how the platform handles data, we will update this page and move the “Last updated” date above. Material changes will be communicated through the platform.

Contact

For any privacy question or data request, write to support@boreon.com (Boreon Industries LLC).