Privacy Policy

Last updated 8 September 2026

This policy explains what BoostInAI (operated by Casting Karma LLC) collects, why, and what you can do about it. It applies to boostinai.com and the BoostInAI application.

What we collect

• Account information — your email address and a hashed password. We never store your password in a readable form.
• Business information — the name, address, phone number, website, hours, categories, services and description you give us as your source of truth. This is business information, most of which is already public.
• Listing data — what third-party platforms currently publish about your business, retrieved so we can compare it to your source of truth.
• Measurement data — the questions we ask AI assistants on your behalf and the full raw responses they return, including which businesses were named. We keep these so any percentage we report to you can be independently verified.
• Access credentials — where you connect a platform account, we store an OAuth token, encrypted at rest. We never ask for or store your platform passwords.
• Usage and technical data — IP address, browser user agent, and timestamps for security, abuse prevention, and troubleshooting.
• Billing data — handled by Stripe. We store a customer and subscription identifier and your subscription status. We never see or store your full card number.

Why we collect it

To provide the service you asked for: measuring your AI visibility, correcting your listing data, monitoring it for changes, billing you, and supporting you. We also use aggregate, de-identified measurement data to improve how the service works. We do not sell your data, and we do not use it to build advertising profiles.

Who we share it with

Only with the processors needed to run the service: our hosting and database provider (Cloudflare), our payment processor (Stripe), our email provider, and the AI and listing platforms we query or correct on your behalf. Each acts under contract and only on our instructions. We may also disclose information where required by law.

How long we keep it

Account and business data: while your account is active, and for up to 12 months afterwards. Raw AI responses: 24 months, so a disputed measurement can still be checked. Billing records: as long as tax and accounting law requires. You can ask us to delete sooner — see below.

Your rights

You can request a copy of your data, correction of it, or its deletion, and you can withdraw consent for optional processing, by emailing [email protected]. We respond within 30 days. If you are in the EEA or UK, you have rights under the GDPR; if you are a California resident, you have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those laws define it.

Security

Passwords are hashed. OAuth tokens are encrypted at rest with keys held in a managed secret store. Access to production data is limited to the people who need it. No system is perfectly secure, and we will notify you promptly if a breach affects your data.

Cookies

We use a single strictly-necessary cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Children

The service is for businesses and is not directed at anyone under 18.

Changes

We will post any change here and, for material changes, email account holders.

Contact

Casting Karma LLC · [email protected]