Privacy Policy.

This Privacy Policy explains how The Cat Theory, the operator of Boostor Command (thecatttheory.ai) ("Boostor", "we", "us") collects, uses, shares, and protects personal data when you use Boostor, including boostor.ai, Boostor accounts, Pro, Sparks, tools, kits, community features, and related services (the "Service").

If you have any question about this policy or about how your data is handled, contact us at boost@boostor.ai.

Account data: When you create an account, our authentication provider WorkOS processes your email address and basic identity information so you can sign in. We receive a user identifier and your email from WorkOS.

Payment data: When you buy Pro, a subscription, Founder Genesis, or another paid product, our payment processor Stripe handles your card details and billing information. We do not store full card numbers. We receive payment confirmation, a customer identifier, subscription status, and limited billing metadata from Stripe.

Profile and user content: Information you choose to add, such as a display name, handle, profile details, saved work, posts, comments, prompts, and project descriptions.

Usage and analytics data: Pages viewed, features used, actions taken, and similar product events, collected through analytics so we can understand and improve the Service.

Technical data: IP address, browser and device type, approximate location derived from IP, language preference, and server logs collected automatically when you use the Service.

To operate the Service: create and authenticate your account, deliver Pro and purchased products, track Sparks usage, and provide the features you request.

To process payments: complete checkout, manage subscriptions and renewals, prevent fraud, and handle refunds and disputes through our payment processor.

To improve the Service: analyze usage, debug issues, measure performance, and develop new features.

To communicate with you: send account, billing, security, and product notices, and respond to your support requests.

To keep the Service safe and lawful: detect and prevent abuse, enforce our Terms, and comply with legal obligations.

We use essential cookies and similar storage to keep you signed in, maintain your session, remember your language, and secure the Service. These are necessary for the Service to function.

We also use analytics cookies and identifiers to understand how the Service is used and to improve it. You can clear, block, or limit cookies through your browser settings, but some features may not work correctly without essential cookies.

We rely on a small set of trusted providers to run the Service. Each processes data only as needed to provide its service and is governed by its own privacy policy:

Stripe — payment processing, billing, and fraud prevention.

WorkOS — authentication and account sign-in.

Vercel — application hosting, delivery, and infrastructure logs.

Convex — application database and backend; stores your account, entitlement, and product-usage data.

Analytics provider(s) — product usage measurement and aggregate reporting.

We may also link to third-party tools, repositories, communities, and marketplace destinations. Those external services are governed by their own terms and privacy practices, not this policy.

We do not sell your personal data. We share data only with the processors listed above to run the Service, when required by law or valid legal process, to protect the rights, safety, and security of Boostor and its users, or in connection with a business transfer such as a merger or acquisition (in which case we will provide notice).

We keep personal data for as long as your account is active or as needed to provide the Service, then for the period required to meet legal, accounting, fraud-prevention, and dispute-resolution obligations. When data is no longer needed, we delete or anonymize it.

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent where processing is based on consent.

To exercise any of these rights, email us at boost@boostor.ai. We will respond within a reasonable period and may need to verify your identity first. You also have the right to lodge a complaint with your local data protection authority.

We use reasonable technical and organizational measures to protect personal data, including encryption in transit and access controls. Card details are handled by our payment processor and are not meant to be stored directly by Boostor. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Our providers may process and store data in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards for such transfers as offered by these providers.

Boostor is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will use reasonable efforts to provide notice through the Service or another practical channel. The updated policy applies once posted, and the date below reflects the latest version.

For privacy questions, requests, or notices, email boost@boostor.ai. You can also reach us through the official Boostor links in the footer.