// legal

Privacy Policy

Last updated: October 4, 2026

Boltise is a desktop IDE for FiveM and RedM server development, made by Boltise Private Limited (“Boltise”). This policy explains what we collect when you use the app and the boltise.ai website, what never leaves your machine, and how to get your data removed. We try to keep it short and honest.

What we collect

• Account data. You sign in with Discord, Google, or email through Supabase Auth. We store your email address, the identity returned by your OAuth provider, and your display name.
• Billing data. Paid plans are sold and billed by Paddle, our authorized reseller and Merchant of Record. Paddle processes your payment details. We do not receive or store full card numbers or card security codes. We keep the identifiers and status of your plan, customer account and subscription, billing dates, and payment-provider notifications needed to manage access, renewals and support.
• Telemetry. We use PostHog for product analytics and Sentry for error and crash reports, so we can see what breaks and what gets used. On the website, PostHog also records session replays — a reconstruction of the pages you visited and what you clicked. Every form field is masked before the recording leaves your browser, so we never see what you typed, and the payment window is excluded from recording entirely.

Optional advertising measurement

If you allow Google Ads measurement, Google uses advertising cookies and ad click identifiers to help us measure confirmed website signups, completed paid subscriptions and manual Windows download clicks. Purchase events include the paid amount, currency and an opaque transaction identifier for duplicate prevention. We do not send Google your email address, password, authentication tokens or payment card details, and we do not enable enhanced conversions or personalized advertising through this integration. Google may process this information outside your country under its Privacy Policy.

Advertising measurement is off until you accept. You can decline or withdraw consent using Ad privacy settings in the footer. We remember your choice for up to 180 days. With permission, a short-lived signup cookie helps us distinguish a new confirmed account from a returning sign-in; it expires within seven days. Withdrawing consent stops future advertising measurement and clears advertising cookies set on our website. This setting does not change the product analytics described above.

What stays on your machine

• Your own AI API keys. If you bring your own keys, they are stored locally on your machine and are never sent to Boltise servers.
• Your project files and server code. Boltise works on files on your disk.
• The local database. Projects, settings, recent files, and activity logs live in a local SQLite file.

Boltise AI processing

On paid tiers, Boltise AI requests are proxied through Boltise infrastructure (Supabase edge functions) to AI model providers. Your prompts, and any code or context you attach to them, are processed to generate a response. That is the only reason they are processed. If you use your own API keys instead, requests go from your machine to your provider and skip our infrastructure.

Third-party processors

• Supabase. Authentication and our Postgres database, where account data lives.
• Paddle (Paddle.com Market Ltd.). Our Merchant of Record; processes payments and handles billing for paid plans.
• PostHog. Product analytics and website session replay. Your data is processed in the EU.
• Sentry. Error and crash reporting.
• Google. Optional advertising measurement, only with your permission.
• AI model providers. Only on paid tiers, to process Boltise AI requests as described above.

Data retention & deletion

We keep account data for as long as your account exists. To delete your account and the data we hold about you, email support@boltise.ai from the address on your account. Anything stored only on your machine, including API keys and project files, is yours to delete at any time.

Your rights

You can ask us for a copy of the data we hold about you, ask us to export it, or ask us to delete it. Email us and we will handle it. Depending on where you live, local law may give you additional rights, and we honor those too.

Changes

If we change this policy, we will post the new version here and update the date at the top. If a change meaningfully affects how we handle your data, we will tell you before it takes effect.

Contact

Boltise is operated by Boltise Private Limited. Questions about this policy go to support@boltise.ai.