Privacy Policy

Last updated: January 2026

BooleanKit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (encrypted)
  • Payment information (processed by Stripe - we do not store card details)

1.2 Usage Data

We automatically collect:

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Usage patterns (which tools used, frequency)
  • Credit transaction history

1.3 Content You Provide

When using our AI tools (Resume Anonymizer, CV Formatter, etc.), you may input text content including resumes and job descriptions. This content is:

  • Processed in memory only - not stored in our database
  • Sent to AI providers for processing (see Section 3)
  • Not used for AI training
  • Encrypted in transit via TLS/HTTPS

2. How We Use Your Information

We use collected information to:

  • Provide and maintain our services
  • Process transactions and manage your credit balance
  • Send service-related communications
  • Improve our services and develop new features
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

3. Third-Party Services

3.1 AI Processing

Our AI features use third-party AI services to process your content. These providers:

  • Do not use API data to train their AI models
  • May retain data temporarily for safety and abuse monitoring
  • Process data in accordance with their own privacy policies

3.2 Payment Processing

Payments are processed by Stripe. We do not store your credit card information. See Stripe's Privacy Policy.

3.3 Authentication

We use Supabase for authentication services. See Supabase's Privacy Policy.

4. Data Retention

  • Account data: Retained while your account is active, deleted upon request
  • Usage logs: Retained for 90 days
  • Transaction history: Retained for 7 years (legal/tax requirements)
  • Content you process: Not retained - processed in memory only

5. Your Rights

5.1 All Users

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Opt out of marketing communications

5.2 European Economic Area (EEA) & UK Users (GDPR)

Under GDPR, you additionally have the right to:

  • Object to processing based on legitimate interests
  • Restrict processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on:

  • Contract performance (providing our services)
  • Legitimate interests (improving services, fraud prevention)
  • Legal obligations (tax, accounting requirements)
  • Consent (where specifically requested)

5.3 California Users (CCPA/CPRA)

California residents have the right to:

  • Know what personal information is collected
  • Know whether personal information is sold or disclosed
  • Say no to the sale of personal information
  • Access personal information
  • Request deletion of personal information
  • Equal service and price (non-discrimination)

We do not sell your personal information. See our Do Not Sell My Personal Information page.

6. Data Security

We implement appropriate security measures including:

  • Encryption in transit (TLS/HTTPS) and at rest
  • Secure authentication with hashed passwords
  • Regular security assessments
  • Access controls and monitoring
  • Secure cloud infrastructure

7. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (for EEA/UK transfers)
  • Data processing agreements with all third-party providers

8. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us:

  • Email: privacy@booleankit.app
  • Data Protection Officer: dpo@booleankit.app

For EEA/UK users, you may also contact your local data protection authority.