Privacy Policy
Last updated: July 1, 2026
This Privacy Policy explains how Boilerroom ("we", "us", or "our") collects, uses, and protects information when you use boilerroom.my (the "Service").
1. Information We Collect
Account Information
When you register, we collect your email address and password (stored as a hash). You may optionally provide a name and profile details.
Usage Data
We collect information about how you interact with the Service: pages visited, features used, session timestamps, and your IP address.
Payment Information
Payments are processed by third-party providers (Stripe or equivalent). We do not store your card number or banking details — only a billing reference and subscription status.
Content You Submit
For the Build module: project names, taglines, descriptions, step answers, uploaded files, and expert review requests you submit.
For the AppAtlas module: search queries and filters you apply.
2. How We Use Your Information
- To provide, maintain, and improve the Service
- To process payments and manage your subscription
- To deliver expert feedback and respond to support requests
- To send transactional emails (account confirmation, password reset, billing receipts)
- To monitor Service health and prevent abuse
We do not sell your personal data to third parties.
3. Data Sharing
We share data only in the following cases:
| Recipient | Purpose |
|---|---|
| Payment processor (Stripe, Monecle, Lava.top) | Billing and subscription management |
| Email provider (Resend) | Transactional emails |
| LLM API providers (Google Gemini, Anthropic) | AI-powered content generation within Build and AppAtlas pipelines |
All third-party providers are bound by their own privacy policies and data processing agreements.
4. Data Retention
- Account data is retained as long as your account is active.
- If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records for 5 years).
- Build project files and step answers are deleted when you delete the project or your account.
5. Cookies
We use session cookies required for authentication and basic functionality. We do not use advertising or cross-site tracking cookies.
6. Security
We use industry-standard measures: HTTPS, hashed passwords, and access controls. No system is completely secure; please use a strong, unique password.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to or restrict certain processing
To exercise these rights, email us at [email protected].
8. Children
The Service is not directed at persons under 18. We do not knowingly collect data from children.
9. Changes to This Policy
We will notify registered users by email of material changes. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact
Email: [email protected]