Privacy Policy

This Privacy Policy explains how The Other Projects LLC ("Company", "we", "our", "us") collects, uses, and shares information about you when you use Boosterpack (the "Service") or otherwise interact with us. We are incorporated in the country of Georgia. By using the Service, you agree that your information will be handled as described in this Privacy Policy and in our Terms of Service.

Important: This Privacy Policy applies to Boosterpack (our app, APIs, and marketing site). Websites you create and publish using Boosterpack may have their own privacy policy and content, and you are responsible for those websites’ compliance obligations.

Information We Collect

• Account data such as your email address, authentication identifiers, and basic profile details you choose to provide.
• Create flow and generation data such as business details you enter (name, location, description, services, languages), any files you upload (for example images or PDFs), and the outputs generated for you (website HTML, text, images, and related metadata).
• Editing and chat data such as instructions you submit to edit a Site (including chat-based edits) and the resulting changes.
• Domain data such as custom domains you connect to a Site and related status information (verification/SSL). If you purchase a domain through the Service, we may process the registrant details you provide (e.g., name, address, phone, email) as required by the domain provider.
• Usage and diagnostics such as usage counters (e.g., Sites created, edits used), feature usage, and logs needed to operate, secure, and rate-limit the Service.
• Billing data for subscriptions and invoices (payments are processed by our payment provider; we do not store full card numbers).
• Technical data such as device type, browser, operating system, IP address, and approximate location (based on IP).
• Support and communications such as messages or feedback you send us and related contact details.
• Information from third parties and public sources (where applicable), such as Google Places/Maps business listing data you request us to use during creation, or business listing information we may process for outreach and internal research.

We may also create aggregated or de-identified information that does not reasonably identify you; we may use and share that information for any lawful purpose.

Please do not upload sensitive personal information (for example, medical or government ID data) unless you intend for it to be used as part of your Site or project.

How We Use Information

• To provide, operate, and maintain the Service.
• To manage subscriptions, payments, invoices, and account status.
• To process AI requests and deliver generated content you request.
• To host, preview, publish, and deliver Sites you create (including via custom domains, when enabled).
• To generate previews, screenshots, and other derived assets needed for the Service.
• To secure the Service, prevent abuse, detect and investigate fraud, and enforce our Terms of Service.
• To analyze usage and improve or develop features, models, and related services.
• To communicate with you about updates, security alerts, and important notices.
• To provide support, respond to requests, and troubleshoot issues.
• To conduct marketing, outreach, and sales activities (where permitted by law), and to measure the effectiveness of our marketing.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal information to third parties.

Sharing with Service Providers and Others

We use trusted third parties to operate and support the Service. These providers process data on our behalf and according to our instructions:

• Supabase (authentication, database, and storage)
• Stripe (payments and billing)
• Vercel (hosting, deployment, domains, and analytics)
• Inngest (background jobs and orchestration)
• AWS (server-side compute for certain background tasks)
• Resend (transactional email delivery)
• Google APIs (e.g., Places/Maps) and GoDaddy (domain availability checks), where enabled
• AI model providers: OpenAI, Anthropic, and Google
• CDN/providers for static assets (for example icon/font delivery)

Where required by law, these providers act as our data processors and are required to protect your information and use it only to provide their services to us. We may also share information if we are required to do so by law or legal process, if we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or others, or in connection with a merger, acquisition, financing, or sale of all or a portion of our business.

Cookies, Local Storage, and Analytics

We use cookies and similar technologies to operate the Service (for example, to keep you signed in via Supabase sessions), maintain security, and remember certain preferences. The Service may also use analytics tools (such as Vercel Analytics) to understand usage and improve performance.

Depending on your browser settings, you may be able to block or delete cookies. Some features may not work properly if you do so.

Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and our operational needs. When information is no longer needed, we will either delete it or take steps to de-identify it, unless we are required by law to keep it longer.

For example, anonymous create-flow sessions (and associated uploaded images) are typically cleaned up after a limited retention period (such as 7 days), unless the session is linked to an account.

Your Rights

Depending on your location and applicable law, you may have rights to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of your personal information, subject to legal or contractual obligations.
• Request that we restrict or object to certain processing of your personal information.
• Request a copy of your personal information in a portable format where technically feasible.

To exercise these rights, contact us using the details in the Contact section below. We may need to verify your identity before responding to your request. We will handle requests in accordance with applicable laws.

Security

We implement reasonable technical and organizational measures designed to protect personal information from unauthorized access, use, alteration, or destruction. However, no system can be guaranteed 100% secure, and we cannot promise absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account.

International Transfers

Your information may be transferred to and processed in countries other than the country in which you are located, including countries that may not provide the same level of data protection as your home jurisdiction. Where required by law, we take steps to ensure that appropriate safeguards are in place for such transfers.

Children

The Service is not intended for children under the age of 13, and we do not knowingly collect personal information from them. If you believe that a child under 13 has provided us with personal information, please contact us so that we can take appropriate steps to delete it.

Changes

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by posting an updated policy in the Service or by other appropriate means. Your continued use of the Service after the changes become effective constitutes acceptance of the updated Privacy Policy.