Privacy Policy

Effective date: [INSERT DATE] · Last updated: [INSERT DATE]

Nexo Media Foundation Inc., a nonprofit organization (EIN 85-2706759) doing business as Business One Stop Shop (“B-OSS,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to b-oss.org, our member portal and CRM, our SMS text-messaging program, and our facility and services at 350 E St Ste 100, Santa Rosa, CA 95404 (collectively, the “Services”).

1. Information We Collect

We collect the following categories of information:

• Information you provide: name, email address, phone number, mailing address, business name, and account credentials when you register, book a space, join a membership, request a virtual office, or contact us.
• Payment information: payments are processed by our third-party processor (Stripe). We do not store full card numbers; we receive limited transaction details such as a confirmation and the last four digits.
• Communications: messages you send us, including email, SMS, and in-portal chat.
• Automatically collected: IP address, device and browser type, pages viewed, and similar usage data collected through cookies and similar technologies.

2. How We Use Your Information

We use your information to operate and improve the Services, including to:

• Create and manage your account, memberships, and bookings;
• Process payments and send confirmations, receipts, and reservation PDFs;
• Send transactional and program messages by email and, with your consent, SMS;
• Respond to inquiries and provide customer support;
• Connect you with programs, workshops, advisors, and partners you request;
• Maintain security, prevent fraud, and comply with legal obligations.

3. SMS / Text Messaging

4. How We Share Information

We share information only as needed to run the Services:

• Service providers: vendors who process payments (Stripe), host our site and CRM, send email, or provide SMS delivery, bound by contract to protect your data and use it only for those services.
• Anchor partners and advisors: only when you request a connection, referral, or program enrollment, and only the information needed to fulfill that request.
• Legal and safety: when required by law, subpoena, or to protect the rights, safety, or property of B-OSS, our members, or others.
• Business transfers: in connection with a merger, acquisition, or transfer of assets, subject to this Policy.

We do not sell your personal information. As noted above, we never share SMS consent or mobile phone numbers with third parties for marketing.

5. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand site usage. You can control cookies through your browser settings; disabling them may limit some features.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or anonymize it.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what personal information we collect, use, and disclose;
• Request access to and a copy of your personal information;
• Request correction of inaccurate personal information;
• Request deletion of your personal information, subject to legal exceptions;
• Opt out of any “sale” or “sharing” of personal information (we do not sell or share);
• Not be discriminated against for exercising these rights.

To exercise these rights, contact us at info@b-oss.org. We will verify your request and respond within the time required by law.

9. Children’s Privacy

The Services are intended for adults and business owners. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Third-Party Links

Our Services may link to third-party websites and services. We are not responsible for their privacy practices, and we encourage you to review their policies.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new effective date, and material changes will be communicated through the Services.

12. Contact Us