This policy explains what BoltAI collects, stores, and does with the information you give us when you use the service. We wrote it in plain English on purpose. If something is unclear, ask us — the address is at the bottom.
BoltAI reads and sends email on your behalf through an AI assistant. To do that we store some information about you and your business, and we connect to the tools you authorize (Gmail, Google Calendar, Stripe, and so on). This page explains what we collect, where it lives, and what choices you have.
When you sign up, you give us your name, your business name, and a work email address. When you connect integrations, you give us the credentials we need to read your Gmail and Google Calendar, or to charge customers through Stripe. We do not see your actual Gmail password — we connect through OAuth and only request the scopes we need.
When you reach out through the contact form on our site, you give us name, business name, email, phone, and your message (the message field accepts up to 1,000 characters). We use these fields for one thing only: routing your inquiry to our team and replying to you. We never add you to a marketing list, and we never sell or share contact-form submissions with third parties. We keep the submission only as long as we need it to resolve your inquiry and follow up.
We use a small number of cookies to keep you signed in and to measure how the site is used. The full list — what each cookie does, who sets it, and how long it lasts — lives on our dedicated /cookies page.
We share narrow slices of your data with a small set of third parties that make BoltAI work: Google for Gmail and Calendar access via OAuth once you connect them; Stripe for billing, which receives only what it needs to process your payment; an AI processing service that drafts the replies, schedules, and follow-ups on your behalf (we never send the underlying data to train any AI model); and an email delivery service that sends outbound mail on our behalf. We only share what is necessary for them to do their job.
All of our infrastructure is based in the United States. Everything is encrypted in transit (TLS 1.2 or higher) and encrypted at rest (AES-256). Our infrastructure providers meet SOC 2 Type II standards, and we use them only for hosting, storage, and the AI processing described above.
We only share your data with the third parties you choose to connect: Google for Gmail and Calendar, Stripe for billing, and any job-management system you link (QuickBooks, Jobber, Housecall Pro, ServiceTitan, Zapier). We do not sell, rent, or otherwise provide your business data to anyone else.
As long as your account is active. If you cancel, we delete your account data within 30 days. The one exception is a small set of de-identified aggregate counts (for example, “total emails processed this month”) that cannot be linked back to you or your customers.
You can ask us to export or delete your data at any time. Just send us a note at the address below and we will get back to you within 24 hours on business days.
Questions, deletion requests, or anything else: email boltaiusa@polsia.app.
Last updated: 2026-07-26