Boostack
Legal

Privacy Policy

Last updated: 4/24/2026

1. Introduction

Welcome to Boostack also as TryBoostack ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

  • Identity Data: includes first name, last name, username or similar identifier.
  • Contact Data: includes email address and telephone number.
  • Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
  • Usage Data: includes information about how you use our website, products and services.

3. Analytics & Performance

We use Umami Analytics, Vercel Analytics, and Speed Insights to understand website traffic and performance. These tools are privacy-focused:

  • Umami Analytics: A privacy-friendly, open-source alternative to Google Analytics. It collects anonymized data such as page views, referrers, and device types without tracking individual users across other websites.
  • Vercel Analytics: Collects anonymized visitor data (e.g., page views, country, device type) without using tracking cookies.
  • Speed Insights: Monitors the technical performance (loading speed, responsiveness) of our site.

4. Event Tracking & Form Services

For our users who embed Boostack forms on their websites, we act as a Data Processor. We collect data on behalf of our users to provide them with form interaction analytics and submission management.

  • Session Identification: We use sessionStorage to group form interactions (like step completions) into a single session. This data is transient and is automatically deleted when the visitor closes their browser tab.
  • IP Addresses: We collect visitor IP addresses for security, fraud prevention, and to provide approximate geographic insights (Country/City).
  • Privacy Mode: We offer a "Strict Privacy Mode" for our users. When enabled, IP addresses are anonymized (e.g., 192.168.1.123 becomes 192.168.1.0) before being stored, ensuring no identifiable personal data is retained for anonymous visitors.

Note: It is the responsibility of our users (the website owners) to ensure their own privacy policies accurately reflect their use of Boostack for data collection.

5. Payment Information

We use Dodo Payments as our Merchant of Record (MoR) and payment processor. Boostack does not store your credit card details or bank account information on our servers.

When you make a purchase:

  • Payment data is processed securely by Dodo Payments.
  • We receive transaction status and subscription details (including billing cycle preferences) to manage your access.
  • Dodo Payments handles your data according to their own Privacy Policy.

6. How We Use Your Data

We use your personal data to:

  • Provide and maintain the Boostack platform (hosted on Vercel/Appwrite).
  • Process your payments and subscriptions via Dodo Payments.
  • Send you transactional emails (e.g., invoices, password resets).
  • Improve our services based on aggregated, anonymous usage patterns (via Vercel Analytics).

7. Data Storage & Security

Your data is stored securely in Appwrite databases. We implement industry-standard security measures, including:

  • Encryption in transit (HTTPS/TLS).
  • Secure authentication via Appwrite Auth.

8. Google User Data Policy

Boostack's use and transfer to any other app of information received from Google APIs will adhere to Google API Service User Data Policy, including the Limited Use requirements.

  • Data Access & Use:Boostack requests access to your Google Drive via the drive.file scope. This permission is used exclusively to create and update dedicated spreadsheets for your form submissions. We only access files that are created by Boostack or that you specifically open with Boostack.
  • No Sharing or Disclosure:We do not share, transfer, or disclose any data retrieved from your Google account (including spreadsheet content or metadata) with any third-party tools, advertising platforms, or external databases. Your data is used solely to provide the integration service you have enabled.
  • Data Retention & Deletion:We only store your Google OAuth tokens (access and refresh tokens) in an encrypted format to maintain the integration. All tokens and associated metadata are permanently deleted from our servers immediately if you disconnect the Google Sheets integration from your Boostack dashboard.

9. Other Integrations

If you choose to connect other third-party services (like Slack), we store encrypted access tokens to perform actions on your behalf.

  • Slack: We use Incoming Webhooks to send notifications to your chosen channel.