Legal
Privacy policy
Last updated September 29, 2026
Who we are
Bootstrapware is operated by an Ontario corporation. We operate from Ontario, Canada. Privacy and deletion requests: [email protected]. This policy covers bootstrapware.co, app.bootstrapware.co, and the product APIs.
What we store
For every workspace we store account email, workspace settings, published product configuration, API key hashes (not the secret in plaintext after mint), webhook endpoint URLs, and non-content session metadata (counts, file type, duration, environment). We do not use that metadata as an invoice meter.
You can sign in with GitHub, Google, Microsoft, or a magic link. When you use a social provider we store the provider account id and the verified email they return so we can link it to your Bootstrapware user. Magic-link mail is sent through our email provider (Brevo).
Billing is processed by Stripe. We do not store full card numbers. Invoices and tax details live in the Stripe customer portal.
Product data boundaries
Importer: we do not receive or store the contents of customer CSV/XLSX/TSV files. Parsing, mapping, and validation run in the customer's browser. We do not collect filenames. Details: Importer privacy.
Feedback: BYO mode stores board configuration only; posts and votes stay on your backend. Hosted mode stores posts and votes (plain text) as a paid convenience. You moderate Hosted content; Bootstrapware does not staff a moderation queue. If you cancel Hosted, writes freeze immediately, you may export for 30 days from the dashboard, then Hosted posts and votes are deleted. Details: Feedback privacy.
Chat: BYO mode stores app configuration only; messages and files stay on your backend. Hosted mode stores plain-text messages and attachment objects as a paid convenience. You moderate Hosted content; Bootstrapware does not staff a moderation queue or scan files for viruses. If you cancel Hosted, writes freeze immediately, you may export for 30 days from the dashboard, then Hosted messages and objects are deleted. The optional Chat storage add-on cancels with Hosted. Details: Chat privacy.
Onboard: BYO mode stores flow configuration only; progress stays on your backend. Hosted mode stores progress records and integration-reported summaries (opaque ids, step keys, revisions, timestamps—not host context or flags) as a paid convenience. If you cancel Hosted, writes freeze immediately, you may export for 30 days from the dashboard, then Hosted progress and summaries are deleted. Downgrading Hosted to active BYO keeps stored data and does not start the 30-day clock. Details: Onboard privacy.
Comments: BYO mode stores app configuration only; discussion text stays on your backend. Hosted mode stores threads and comments as a paid convenience. You moderate Hosted content; Bootstrapware does not staff a moderation queue. If you cancel Hosted, writes freeze immediately, you may export for 30 days from the dashboard, then Hosted discussions are deleted. Downgrading Hosted to active BYO keeps stored data and does not start the 30-day clock. Details: Comments privacy.
RFQ: BYO mode stores app configuration only; RFQ records stay on your backend. Hosted mode stores structured RFQ, quote, clarification, and decision records as a paid convenience. Attachment bytes stay on the host. You are responsible for Hosted content. If you cancel Hosted, writes freeze immediately, you may export for 30 days from the dashboard, then Hosted RFQ records are deleted. Downgrading Hosted to active BYO keeps stored data and does not start the 30-day clock. Details: RFQ privacy.
Answers: BYO mode stores app configuration only; knowledge, retrieval, the model, and visitor logs stay on your backend. Hosted mode stores approved sources, the derived index, visitor questions, optional conversations, unanswered items, and citations as a paid convenience. You are responsible for Hosted content. If you cancel Hosted, writes freeze immediately, you may export for 30 days from the dashboard, then those Hosted rows are deleted. Downgrading Hosted to active BYO keeps stored data and does not start the 30-day clock. Details: Answers privacy.
MCP tools configure products only. Do not send spreadsheet contents, post bodies, message or file bytes, comment bodies, host context or flags, RFQ titles, quotes, or prices, or Answers visitor questions, file bytes, or provider keys through MCP.
Cookies and analytics
The marketing site may use Google Analytics for aggregate traffic. Analytics do not run inside product widgets. Dashboard login uses a bsw_session cookie on app.bootstrapware.co. Local/demo widgets may keep data in the browser (for example localStorage) on the host site; that storage is yours, not a Bootstrapware cookie.
Processors
We host the Service on Railway. Sign-in uses GitHub, Google, and Microsoft when you choose those providers. Stripe processes payments. Brevo sends transactional email such as magic links. Google Analytics runs on the marketing site only. Those processors may store data outside Canada. We do not sell a custom DPA or contractual SLA; that is a deliberate limit of the product and is stated in the terms.
Retention and deletion
Account and configuration data stay until you ask us to delete them or the workspace is closed. Hosted product content follows the cancel-export window above. Webhook deliveries go to the URL you configured; we keep operational delivery metadata, not a second copy of customer content we never received.
Contact [email protected] for access or deletion requests. We will delete account data and configuration. We cannot delete spreadsheet contents we never received (Importer). Hosted Feedback, Chat, Onboard, Comments, RFQ, and Answers content is deleted per the cancel retention policy above or on account deletion.