Effective: October 28, 2024 · Last updated: October 31, 2025
This Privacy Policy explains how Bolt AI Solutions, LLC ("Company", "we", "us", "our") collects, uses, and shares information in connection with the iMaintain website, applications, and services (collectively, the "Service").
1. Who We Are and How to Contact Us
2. Information We Collect
- Information you provide: account details (e.g., name, email), team/workspace information, support communications, and other content you submit. Payment details are processed by our payment processor (e.g., Stripe); we do not store full card numbers.
- Automatically collected: device and usage data, log data, IP address, browser type, pages viewed, and cookie identifiers. We use analytics tools (e.g., Google Analytics) to help analyze usage and performance.
- From third parties: limited information from service providers (e.g., fraud prevention, payments, hosting) to operate the Service.
3. How We Use Information
- Provide, maintain, secure, and improve the Service.
- Process transactions and account administration.
- Develop new features and conduct analytics to understand usage.
- Send service-related communications and, where permitted, marketing communications (you may opt out at any time).
- Comply with legal obligations and enforce our Terms.
4. Legal Bases (EEA/UK where applicable)
- Contract: to provide the Service you requested.
- Legitimate interests: to secure, improve, and market the Service in ways that do not override your rights.
- Consent: for certain analytics, cookies, and marketing communications, where required.
- Legal obligation: to meet record-keeping and compliance requirements.
5. Sharing of Information
We share information with service providers who process data on our behalf and under contract, including but not limited to Stripe (payments), Supabase (database/auth/storage), Vercel (hosting), Google Analytics (analytics), and AI processing providers such as OpenAI and LangChain. We do not sell your personal information. We may share aggregated or de-identified information that cannot reasonably identify you. We may disclose information to comply with law, protect rights and safety, or in connection with a merger, acquisition, or asset sale.
6. Cookies and Tracking
We use cookies and similar technologies for functionality, analytics, and performance. For details and choices, see our Cookie Policy.
7. Data Retention
We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Where feasible, we aim to delete or anonymize information when it is no longer needed. You can request account deletion and access/export/delete of your data from your in-app profile settings (or by emailing support@imaintain.ai), including after canceling a subscription. We will verify your identity and respond consistent with applicable law. Backups and logs may persist for up to 30 days (or longer where legally required or to enforce our agreements) and will then be deleted or anonymized in the ordinary course of business.
8. Security
We implement appropriate technical and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your Choices and Rights
- Access, correction, or deletion of your information by contacting us.
- Opt out of marketing emails via the unsubscribe link in those emails.
- Cookie preferences as described in our Cookie Policy.
- If you are in certain regions (e.g., EEA/UK/California), you may have additional rights under local law. Contact us to exercise these rights.
10. International Transfers
We are based in the United States and may process information in the U.S. and other countries. Where required, we implement appropriate safeguards for cross-border transfers.
11. Children’s Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, please contact us so we can take appropriate action.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by email or through the Service). Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
13. Contact
14. GDPR Addendum (EEA/UK)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), the following applies in addition to the sections above.
- Rights: You may have the right to request access, rectification, erasure, restriction, objection, and data portability. Where we rely on consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
- Legal bases: We process personal data as necessary for contract performance, based on our legitimate interests (e.g., to secure and improve the Service and communicate with you), with your consent (e.g., certain analytics/cookies/marketing), and to comply with legal obligations.
- Transfers: Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, and implement technical and organizational measures to protect your data.
- Complaints: You can lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can address your concerns.
- Cookies/consent: Where required, we will seek consent for non‑essential cookies/analytics. See our Cookie Policy for details.
15. California Privacy (CPRA)
If you are a California resident, the California Privacy Rights Act (CPRA) provides additional disclosures and rights.
Notice at Collection — Categories and Purposes
- Categories collected: identifiers (e.g., name, email), commercial information (subscription details, transaction metadata), internet/electronic activity (usage, logs, device info, IP address), and inferences drawn from usage to improve the Service.
- Sources: directly from you; automatically from your device/usage; from service providers (e.g., payments, hosting, analytics).
- Purposes: to provide and secure the Service; process payments; analytics and improvement; communications; compliance.
- Disclosure for business purposes: to service providers under contract (e.g., Stripe, Supabase, Vercel, analytics providers) that process data on our behalf.
We do not sell personal information. We do not share personal information for cross‑context behavioral advertising. If this changes, we will update this Policy and provide required opt‑out mechanisms.
Your CPRA Rights
- Right to know/access categories and specific pieces of personal information we collect and use.
- Right to delete personal information, subject to exceptions.
- Right to correct inaccurate personal information.
- Right to data portability.
- Right to opt out of sale/share of personal information (not applicable as described above).
- Right to limit use/disclosure of sensitive personal information where applicable.
- Right to non‑discrimination for exercising your rights.
Submitting requests: Use your in-app profile settings or email support@imaintain.ai. We will verify your request using information we have on file and may need additional information to verify identity. You may use an authorized agent with proper authorization.