Privacy Policy

Last Updated: June 2026

Introduction

boldpower ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

Data Controller

boldpower NL B.V. (Chamber of Commerce / KvK no. 42021707), Stammerkamp 8, 1112 VH Diemen, the Netherlands, is the data controller responsible for your personal data and determines the purposes and means of processing it. We process personal data in accordance with the GDPR and the Dutch Uitvoeringswet AVG (UAVG).

Contact: privacy@boldpower.com

Information We Collect

We collect information that you provide directly to us and information automatically collected when you use our services:

  • Account Information: Name, email address, and authentication credentials when you create an account.
  • Usage Data: Information about how you use our application, including pages visited and features used.
  • Technical Data: IP address, browser type, device information, and session data necessary for authentication.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide our services to you under our terms of service.
  • Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services and ensuring security.
  • Consent: Where you have given explicit consent for specific processing activities.

Service Providers and Recipients

We share personal data only with service providers that process it on our behalf to deliver the service. We do not sell personal data. The main categories of recipients are:

  • AI providers: when you use AI features, the content you submit (such as chat messages and documents) is processed by third-party AI providers, including OpenAI, Anthropic and Google.
  • Email delivery: transactional emails, such as notifications and sign-in messages, are sent through our email delivery provider.
  • Team collaboration: where you connect Slack, relevant notifications and content are delivered to your Slack workspace.
  • Integrations you authorise: when you connect a third-party integration such as Google Workspace, data is exchanged with that provider at your direction.
  • Hosting infrastructure: our database, file storage and single sign-on are operated by or for boldpower on our own infrastructure.

Cookies

We use strictly necessary cookies for authentication and security purposes. For detailed information about our cookie usage, please see our Cookie Policy

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account data is retained while your account is active and for a reasonable period thereafter. Security and audit logs are retained for a limited period (up to 180 days).

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data under certain circumstances.
  • Right to Data Portability: Request transfer of your data to another service provider.
  • Right to Object: Object to processing of your personal data for certain purposes.

To exercise any of these rights, please contact us at privacy@boldpower.com.

Complaints

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

International Data Transfers

Some of our service providers, in particular the AI and email providers described above, are located in the United States. Where personal data is transferred outside the European Economic Area, we have entered into data processing agreements incorporating the European Commission's Standard Contractual Clauses, or rely on an adequacy decision where one applies.

Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure authentication, and regular security assessments.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

privacy@boldpower.com