Privacy Policy – Buddha in the Boardroom
Last updated: April 4, 2026
Status: Active
Location: The Netherlands
Privacy Policy — Buddha in the Boardroom
Buddha in the Boardroom ("BITB", "we") is committed to protecting your privacy. This policy explains how we collect, use, and
protect your personal data across our services, including our retreats, programs, and AI companions (Alex and Lumis).
No marketing cookies. No tracking. No exceptions.
Our websites and applications do not use marketing cookies, analytics trackers, advertising pixels, or any form of behavioral
tracking. We do not sell, share, or monetize your data in any way. The only cookies used are those strictly necessary for
authentication (signing in).
Our AI Companions: Alex and Lumis
Alex is a personal AI companion for reflection, habits, and organization. Lumis is an AI teaching companion for university
courses. Both are built and operated by Buddha in the Boardroom.
What we store:
Conversations, habits, actions, reflections, and learning moments. Conversation messages are automatically deleted after 30 days.
Other data is retained as long as your account is active.
Data isolation:
Each user has their own separate, isolated database. Your data is not shared with, visible to, or accessible by any other user.
We cannot read your conversations. Only your AI companion (Alex or Lumis) has access to your
conversation content.
For Lumis (educational use):
Faculty can see which course concepts you have engaged with and your learning progress. Faculty cannot see the content of your
conversations with Lumis. This is by design.
Channels:
You can interact with Alex or Lumis via WhatsApp, email or the web application. All channels
route to the same private database. Chat history is separate between WhatsApp and the web app.
Your rights:
You can request a full export of all your data at any time. You can request complete deletion of your account and all associated
data at any time. Both are available self-service via the web application profile page, or by asking Alex or Lumis directly on
WhatsApp. Deletion is permanent and irreversible.
Third-Party Services
We use the following services to operate our AI companions:
Amazon Web Services (AWS): hosting, database (DynamoDB), file storage (S3). Data is stored in the EU (eu-west-1) and US
(us-east-1) regions. AWS encrypts all data at rest.
Anthropic (Claude): AI processing. Anthropic does not retain or train on your conversations. Responses are generated in real time
and not stored by Anthropic.
Meta (WhatsApp Business API): message delivery for WhatsApp interactions. Messages are end-to-end encrypted in transit. We store message content in your private database for continuity. Meta does not have access to message content beyond delivery.
Microsoft (Outlook): email delivery for the alex@ mailbox.
Retreats and Programs
For retreat and program registrations, we collect: name, contact details, dietary and accessibility needs, payment information,
and emergency contacts. This data is used solely for event management, communication, and participant safety. Payment data is
processed by our payment provider and is not stored by us.
Legal Basis (GDPR)
We process your data based on your explicit consent (you chose to create an account and interact with our services). You may
withdraw consent at any time by requesting account deletion.
Contact
For any privacy questions or data requests:
Koen van den Biggelaar
koen@buddha-in-the-boardroom.com
Buddha in the Boardroom
Netherlands
You have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at