BoostRail Privacy Policy (Draft)

*Draft prepared 2026-07-15 for legal review. Controller: Boostly Limited, New Zealand.*

1. What we collect

• Account data: email address, display name, password hash, language preference, and optional phone number.
• Billing data: order and payment records, billing address and tax IDs where provided. Card details are processed by Stripe and never touch our servers.
• Usage data: per-request metadata — timestamps, model names, token counts, unit prices, and API key identifiers — retained for billing and reconciliation.
• Request content: prompts and responses are transmitted to the selected model provider to serve the request. We do not use request content to train models. Transient logs used for reliability are retained for a limited period.

2. How we use data

To provide and bill the service, to secure it (abuse and fraud prevention), to meet tax and accounting obligations, and to communicate service notices. We do not sell personal data.

3. Processors and transfers

We use service providers to operate the platform, including Stripe (payments and tax calculation), an email delivery provider (transactional email), and hosting providers. Model requests are transmitted to the provider that serves the selected model, which may be located outside your country.

4. Retention

Account data is retained while the account is active. Billing and tax records are retained as required by law. Usage metadata is retained for billing accuracy and dispute resolution.

5. Your rights

You can access and update account data in the console, export usage data, and request account deletion via support (subject to legally required retention of billing records). Depending on your location, additional statutory rights may apply, including rights under the New Zealand Privacy Act 2020 and, where applicable, the GDPR.

6. Contact

Privacy enquiries: support@boostrail.com — Boostly Limited, New Zealand.