We believe in transparency. This policy explains exactly how we collect, use, and protect your data when you use Boomship.
We never sell your personal data to third parties
Your data is encrypted in transit and at rest
You can export or delete your data anytime
AI models are trained on anonymized data only
We comply with GDPR, CCPA, and other regulations
Third-party integrations require explicit consent
Boomship ("we", "our", or "us") operates the Boomship AI automation platform. We are committed to protecting your privacy and being transparent about how we handle your data.
This Privacy Policy applies to all users of our services, including our website (boomship.ai), web application, API, and any related services (collectively, the "Services").
By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.
Data Controller: Lank Hospitality Private Limited, No.18, Times Square Building, Satara Road, Pune 411037, India
When you connect a source to a project's Brain, the items you import are indexed for that project and used as context for its runs. Each source shows when it was last read; nothing is read until you connect it, and a scheduled re-sync runs only if you turn it on:
GitHub
The repositories you connect: code, history, and pull requests you ask us to verify
Notion and Linear
The pages and issues you import
Slack
The channels you import
Gmail and Google Drive
The threads and files you import, where the deployment offers Google sign-in for connectors
Model providers
The context compiled for a run (code, documents, memories and your instruction) is sent to the provider of the model that runs it, on your key or a managed one
Files you upload
Indexed into the project they belong to
Integration data is processed solely to provide the requested automation services and is subject to the respective third-party's privacy policies.
Provide Services
Operate, maintain, and deliver our AI automation platform
Process Transactions
Handle payments, billing, and subscription management
Customer Support
Respond to inquiries, troubleshoot issues, and provide assistance
Communications
Send service updates, security alerts, and administrative messages
Product Improvement
Analyze usage patterns to enhance features and user experience
Security
Detect, prevent, and address fraud, abuse, and security threats
Legal Compliance
Comply with legal obligations and enforce our terms
Marketing
Send promotional content (only with your explicit consent)
Our AI agents utilize advanced language models to automate tasks on your behalf. When processing your data, our systems act as a data processor under your direction, not for our own purposes.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. Ever.
We may share information in these limited circumstances:
Service Providers
Supabase, Vercel, Dodo, PostHog, model providersVendors who help us operate: Supabase (database and sign-in), Vercel (hosting), Dodo Payments (billing, as merchant of record), PostHog (product analytics and error reports), and the model providers whose keys you add or we manage (Anthropic, OpenAI, Google, OpenRouter). They are bound to protect your data.
Connected Integrations
GitHub, Notion, Linear, Slack, Gmail, Google DriveServices you connect to a project's Brain. Sharing is limited to reading what you chose to import and, for GitHub, writing branches and pull requests you asked for.
Legal Requirements
Subpoenas, regulatory inquiriesWhen required by law, court order, or government request. We will notify you unless legally prohibited.
Business Transfers
With advance notice providedIn connection with a merger, acquisition, or sale of assets. Your data rights remain protected.
With Your Consent
Case-by-case basisAny other sharing requires your explicit, informed consent.
We implement comprehensive security measures to protect your data:
Encryption in Transit
HTTPS for all data transmission
Encrypted Credentials
Model provider keys and GitHub tokens are encrypted with AES-256-GCM and never shown again after saving
Row-Level Security
Database policies limit every row to its owner and the members of their organization or project
While we implement robust security measures, no system is 100% secure. We encourage you to use strong passwords.
You have the following rights regarding your personal data:
Request a copy of all personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your personal data ("right to be forgotten")
Receive your data in a structured, machine-readable format
Request limitation of processing in certain circumstances
Object to processing based on legitimate interests or marketing
Withdraw previously given consent at any time
File a complaint with your local data protection authority
How to exercise your rights: Email us at privacy@boomship.ai or use the privacy controls in your account settings. We will respond within 30 days.
We retain your data only as long as necessary for the purposes described in this policy:
| Data Type | Retention Period | Notes |
|---|---|---|
| Account Data | Duration of account + 30 days | Deleted upon account closure |
| Usage Logs | 90 days | Anonymized after retention |
| Agent Content | User-configurable | Default: 30 days |
| Billing Records | 7 years | Legal requirement |
| Support Tickets | 2 years | For quality assurance |
| Security Logs | 1 year | For incident investigation |
Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place:
Our primary data processing occurs in AWS data centers located in the US (us-east-1) and EU (eu-west-1). Contact us for a list of sub-processors.
Our Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.
If we learn we have collected personal information from a child under 16, we will delete that information as quickly as possible. If you believe we might have information from or about a child under 16, please contact us at privacy@boomship.ai.
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR).
Processing necessary to provide our Services to you
Where you have given explicit consent (e.g., marketing)
For security, fraud prevention, and service improvement
When required to comply with applicable laws
Data Protection Officer: You can contact our DPO at dpo@boomship.ai
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
We do not sell personal information. To exercise your California privacy rights, contact us at privacy@boomship.ai or call +91 20 1234 5678.
We may update this Privacy Policy from time to time. When we make changes:
Your continued use of our Services after changes become effective constitutes acceptance of the revised policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Lank Hospitality Private Limited
No.18, Times Square Building, Satara Road
Pune 411037, Maharashtra, India
CIN: U55101PN2023PTC123456