--- title: "Privacy Policy" url: https://boslaai.co/privacy language: en --- # Privacy Policy > **Draft — requires legal review before publication.** This policy describes what this website and BOSLA AI accounts actually collect today. It does not yet name a legal entity or registered address; add those once confirmed. ## Who we are This website and BOSLA AI accounts are operated by the BOSLA AI team. *[Legal entity name and registered address to be added after legal review.]* You can reach us through the [contact page](https://boslaai.co/contact). ## What we collect, and why **Your BOSLA AI account.** When you create an account we store your email address and, if you add them, your first and last name. Sign-in is handled by our authentication provider (Clerk), which also records security information such as the devices and browsers you signed in from, so it can protect your account. **Invites and points.** Each account gets a personal invite code. We record who invited whom, when, and the points earned. When a friend joins through your invite, you see their first name — or a partly hidden email address such as s••••@gmail.com — in your dashboard. We never show your email address to people you invite. **Early-access sign-ups (before launch).** If you joined the early-access list before BOSLA AI went live, we keep your email address, where on the site you signed up, campaign tags in the link you followed (utm_source, utm_medium, utm_campaign) if any, and whether you agreed to receive product updates, and when. We use this only to tell you BOSLA AI is available and, if you opted in, to send occasional product updates. **Product update emails.** We email product news only to people who asked for it: people who joined the early-access list and ticked “send me product updates”, and members who switched on *Product updates by email* under **Account → Privacy**. For each email we keep who it went to, when, and whether it was delivered, bounced or reported as spam — we don't track opens or clicks. Every email has an unsubscribe link; once you use it (or an address bounces or reports spam) no further update reaches it. Emails about your account, such as sign-in codes, are separate and not affected. **Contact form.** When you contact us we store your name, email address, inquiry type, subject and message so we can reply and keep a record of the conversation. **Feedback.** When you send feedback we store your rating, your answers (topic, which part of the site, how likely you are to recommend us), your message, the language you used and the page you came from — and, only if you give them, your name and email address and whether we may contact you about it. For bug reports you can choose to include your browser and device type (for example "Chrome 141 · macOS"). If you're signed in we also link it to your account. Signed-in members may occasionally be asked, in the site, how likely they are to recommend BOSLA AI; we store that score, the optional reason and the page it was asked on with their account, or that they chose "Not now". We use feedback only to improve BOSLA AI. **AI assistant.** If you use the AI assistant — from the chat bubble on this website or in your account — the questions you type — together with your first name, points, invite count and invite link, and the website's published content — are sent to our AI provider, Anthropic (Claude), to generate the reply. We don't store your conversations; they stay in your browser tab until you close it. We count how many questions are asked, without their content, to manage limits. Visitors who aren't signed in can use the chat bubble too: we send their questions, and nothing about any account, to the same provider, and we use their network address only to count questions for a daily limit (a counter, not a log). Please don't share passwords, verification codes or other sensitive information in the chat. **Aggregate usage counts.** We count a small set of events — such as "call-to-action clicked", "article viewed" or "invite link opened" — to understand which parts of the site are useful. These counts are not linked to you: we set no cookies for them and store no IP addresses. To count *unique* visitors we use a one-way, salted hash of your IP address and browser details; it cannot be turned back into either, and we do not use it to follow you across sites. ## The BOSLA AI browser extension **What stays on your device.** The extension removes ads, blurs images and applies your filters inside your browser. Images are checked by models that run on your device; no image, face, video, title, channel, URL or browsing history is ever sent to us or anyone else. **Without an account.** Nothing leaves your device. Your settings, lists and counters are saved in your browser only. **With an account (optional).** When you tap "Connect account", you sign in on boslaai.co. We then store: - your account email, to show who is connected; - your extension settings, including the channel names and words you chose to block or allow, so they follow you to every device; - the list of browsers you connected (browser type, operating system, extension version), so you can disconnect any of them. **Usage totals (off by default).** If you turn on "Share usage" in your dashboard, the extension sends daily numbers only: for example how many ads were removed, how many faces were blurred, and how many minutes you spent on YouTube. We use them to show you your own activity. Turn it off, download them as CSV or delete them any time from Privacy & data. **Disconnecting.** "Disconnect" in the dashboard, or removing the extension, ends the connection. Deleting your account deletes everything above. We never sell this data, never use it for advertising, and never share it except with the service providers that run our site (hosting and database), under contract. ## Cookies and similar storage We use only what the site needs to work — no advertising or analytics cookies. The full list, with durations, is in our [Cookie Policy](https://boslaai.co/cookies): - **Sign-in cookies** (set by Clerk) keep you signed in to your account. - **Invite cookie** (`bosla_ref`) remembers an invite code for up to 30 days after you open an invite link, so the right friend is credited. It contains only the code. - **Language cookie** (`bosla_lang`) remembers English or Arabic. - **Theme** (light or dark) is stored in your browser's local storage. - A **session cookie** is used only when a team member signs in to the administration area. ## Who can access your data Only authorised BOSLA AI team members, through a password-protected administration area with role-based permissions, and the service providers below acting on our behalf. ## Service providers - **Clerk** — account sign-in and security. - **Anthropic** — the AI model (Claude) behind the AI assistant, only when you use it. - **Supabase** — our database and image storage. - **Netlify** — website hosting. - **Resend** — email delivery: messages to our team from the contact form, and the product updates you opted in to. - *[Add the locations where each provider processes data.]* ## Retention **When you delete your account.** We keep your account's data for 30 days after you delete your account. After that we delete it, except your email address and first name, which we keep only to recognise you if you come back — never to send you email. If the BOSLA extension is still connected in a browser, it keeps syncing during those 30 days; sign out of it or remove it to stop that. Feedback and survey answers you sent stay, without your name or email address. You can ask us to erase everything, including your email address and name, through the [contact page](https://boslaai.co/contact). *[Define retention periods — for example, account data until you delete your account, early-access emails until launch plus a set period, or until you ask us to delete them.]* ## Your choices and rights You can update your name and email, review your signed-in devices, or **delete your account** at any time under **Account & security**. You can also ask us to access, correct or delete your data, or to stop contacting you, via the [contact page](https://boslaai.co/contact). Depending on where you live you may have additional rights under local law. ## Changes We'll update the date at the top of this page whenever this policy changes.