Privacy Policy

1. Introduction

Boosted Circle LLC ("we," "us," or "our") operates Boosted Circle, Done-for-you AI mentorship product creation service. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

• Account Information: Email address, name, and password (encrypted)
• Profile Information: Optional profile details you choose to provide
• Payment Information: Billing details processed through our payment processor (Stripe)
• Communications: Messages you send to our support team
• User Content: Text inputs, chat messages, uploaded files, and AI-generated outputs

2.2 Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Features used, actions taken, time spent, frequency of use
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, referring URLs
• Cookies and Similar Technologies: Session data, preferences, authentication tokens

2.3 Information from Third Parties

We may receive information from third-party services you connect to your account:

• Authentication Providers: Information from Clerk (email, name, profile picture)
• Payment Processors: Payment confirmation and subscription status from Stripe

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: Process your requests, generate AI responses, manage your account
• Billing and Payments: Process subscriptions, send invoices, handle refunds
• Improve the Service: Analyze usage patterns, develop new features, enhance AI models
• Customer Support: Respond to inquiries, troubleshoot issues, provide assistance
• Security: Detect fraud, prevent abuse, protect against security threats
• Communications: Send service updates, security alerts, and marketing messages (with consent)
• Legal Compliance: Comply with legal obligations, enforce our Terms of Service
• Research and Development: Create aggregated, anonymized data for analysis

4. Third-Party Services

We use the following third-party services to operate the Service. Each service has its own privacy policy:

• Clerk: Authentication and user management
• Stripe: Payment processing and subscription management
• OpenAI / Anthropic: AI model providers (accessed via Vercel AI SDK)
• Supabase: Database and data storage
• Vercel: Hosting and infrastructure

When you use the Service, your data may be processed by these third-party providers. We carefully select providers that maintain strong data protection practices, but we are not responsible for their privacy practices. We encourage you to review their privacy policies.

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We share data with third-party service providers who perform services on our behalf (hosting, payment processing, AI processing, analytics). These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of others.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication, security, and basic functionality
• Preference Cookies: Remember your settings and preferences (theme, language)
• Session Cookies: Maintain your logged-in state and session data

You can control cookies through your browser settings, but disabling certain cookies may limit functionality.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained while your account is active
• Chat History: Retained while your account is active (you can delete individual chats)
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 90 days for security and analytics

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (fraud prevention, legal compliance).

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication and password hashing
• Regular security audits and monitoring
• Access controls and employee training
• Secure infrastructure provided by trusted cloud providers

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 Access and Portability

You have the right to access your personal information and receive a copy in a portable format. You can export your chat history through your account settings.

9.2 Correction

You have the right to correct inaccurate or incomplete personal information. You can update your account information through your account settings.

9.3 Deletion

You have the right to request deletion of your personal information. You can delete your account through your account settings or by contacting support@boostedcircle.com. We will delete your data within 30 days, subject to legal retention requirements.

9.4 Opt-Out of Marketing

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or updating your communication preferences in your account settings.

9.5 Object to Processing

You have the right to object to certain types of data processing. Contact legal@boostedcircle.com to exercise this right.

9.6 Withdraw Consent

Where we process your data based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, contact us at legal@boostedcircle.com. We will respond to your request within 30 days.

10. International Data Transfers

The Service is operated in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate.

These countries may have data protection laws that differ from your country. By using the Service, you consent to the transfer of your information to the United States and other countries.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@boostedcircle.com.

If we discover that we have collected personal information from a child under 13, we will delete that information promptly.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at legal@boostedcircle.com. We will verify your identity before processing your request.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes:

• Contract: Processing necessary to provide the Service
• Legitimate Interests: Improving the Service, security, fraud prevention
• Consent: Marketing communications, optional features
• Legal Obligation: Compliance with laws and regulations

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this page
• Sending an email notification to your registered email address (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: legal@boostedcircle.com
• Support: support@boostedcircle.com
• Company: Boosted Circle LLC

For privacy-related inquiries, we will respond within 30 days.