Plain-English summary
We handle three categories of data: (1) account info you give us at signup, (2) the code, prompts, and context you share to scope and ship a task, (3) anonymised metadata about how the platform is used. We don't sell any of it. We don't train models on it. We delete the task-related data on cancellation.
What we collect
Account info — name, email, company, role, billing address. Submitted via Stripe and our forms. Used to operate your subscription and contact you about it. Task data — code repos you grant us access to, prompts and outputs from production tasks, Slack messages in your channel. Used only to deliver your tasks. Operational data — pages visited, scoping calls booked, dashboard usage. Used to improve the product. We use Plausible for analytics — no cookies, no fingerprinting.
What we don't do
We don't sell your data. We don't share your prompts, code, or eval fixtures with other clients. We don't train Boundev models on customer data. We don't run external retargeting pixels on the dashboard. We don't keep account data on cancellation beyond what US tax law requires.
Subprocessors
Stripe (billing). AWS (hosting, US-East-1 + EU-West-1). Slack (delivery channel). Anthropic / OpenAI / Bedrock (the LLMs that power the work — calls scoped to your task, with provider data-retention disabled where the provider supports it). Sentry (error tracking, no PII). Full subprocessor list available on request before signing.
Your rights
Access, export, and deletion of your account data on request. Email privacy@boundev.ai with the subject your account email. We respond within 5 business days. EU and California residents have the standard rights under GDPR / CCPA / CPRA — same channel, same timeline.
Contact
privacy@boundev.ai for any privacy question. legal@boundev.ai for DPAs and contract paper. Boundev AI, Inc. is a Delaware C-Corp; data controller for the purposes of GDPR is the same legal entity.