Privacy Notice

Boostezly ("Boostezly") is the data controller for the personal data described here — that means we decide why and how it is used. You can contact us at info@boostezly.com, +1 (855) 576-1619, or by post at Flat No. 101, 1st Floor, Milco House, M.C.H. No. 10-2-287/B/5, Shanti Nagar, Hyderabad, T.S., India.

• Identity and contact details (name, business name, email, phone, country/region) — to respond to enquiries, run scorecards and audits you request, create and administer your account, and send service communications. Basis: performance of a contract, or our legitimate interest in responding to your enquiry.
• Account and login data (email, hashed password, authentication tokens, sign-in events) — to give you secure access to your account and the Ad Suite. Basis: performance of a contract.
• Subscription and entitlement data (plan, credit balance, credit usage history, purchase records and invoice references) — to provide the service you paid for and keep accurate billing records. Basis: performance of a contract and legal obligation.
• Content you submit (prompts, brand and offer details, website URLs, campaign inputs, support messages) — to generate outputs and provide support. Basis: performance of a contract.
• Usage and technical data (pages viewed, features used, device and browser type, approximate location from IP address, IP address, log and error data) — to operate, secure and improve the services and prevent fraud and abuse. Basis: legitimate interests.
• Marketing data (campaign source, UTM parameters, advertising click identifiers, marketing preferences) — to understand which campaigns work and, where you have opted in, to send marketing. Basis: consent for marketing messages; legitimate interests for attribution and analytics.

Payment card details are collected and processed by Paddle, not by us; we never see or store your full card details.

To generate ad copy, creative briefs, chatbot answers and similar outputs, the content you submit is sent to our AI model providers for processing on our behalf under contractual confidentiality and security terms. Do not submit special category data, payment card numbers or credentials in prompts.

• Service providers and subprocessors: hosting and database providers, AI model providers, email delivery, analytics and support tooling — acting on our instructions.
• Paddle, our Merchant of Record: for the sale of our products, subscription management, payment processing, tax compliance, invoicing, refunds and related customer service.
• Professional advisers: legal, accounting and audit advisers where necessary.
• Authorities and third parties: where required by law, to enforce our terms, or to protect our rights, users or the security of the services.
• Acquirers: if we merge, restructure or sell part of the business, subject to this notice.

We do not sell your personal data.

We operate in India and the United States and use providers that may process data outside your country, including outside the UK and EEA. Where such transfers happen, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses, together with technical measures like encryption in transit and at rest.

• Enquiry and lead records: up to 24 months after our last contact with you.
• Account, content and usage data: for the life of your account and up to 12 months after closure, so you can reactivate and so we can handle disputes.
• Purchase and tax records: as long as tax and accounting law requires (typically 6–8 years).
• Security and fraud logs: normally up to 12 months.

When data is no longer needed for these purposes, we delete or anonymise it.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent at any time (including unsubscribing from marketing), and not be subject to solely automated decisions with legal effect. Under the UK GDPR and EU GDPR these rights apply in full and you can also complain to your supervisory authority. Indian users may exercise equivalent rights under the Digital Personal Data Protection Act, 2023.

Email info@boostezly.com to make a request. We respond within one month, and will tell you if we need longer.

We apply appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level database access controls, least-privilege access for our team, and logging and monitoring. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect a problem.

• Essential: sign-in sessions, security, region preference and basic site function. These are always on because the site cannot work without them.
• Analytics: aggregated measurement of how pages and tools are used, so we can improve them.
• Marketing: advertising and conversion measurement for our Google and Meta campaigns, where enabled.

You can clear or block cookies in your browser settings, and opt out of personalised advertising through your Google and Meta ad settings. Blocking essential cookies will break sign-in.

Our services are for business use and are not directed at children. We do not knowingly collect data from anyone under 18.

We will post updates here with a new "last updated" date and notify account holders of material changes by email. See also our Terms & Conditions and Refund Policy.