Privacy Policy

Effective: October 28, 2024 · Last updated: October 31, 2025

This Privacy Policy explains how Bolt AI Solutions, LLC ("Company", "we", "us", "our") collects, uses, and shares information in connection with the iMaintain website, applications, and services (collectively, the "Service").

1. Who We Are and How to Contact Us

2. Information We Collect

• Information you provide: account details (e.g., name, email), team/workspace information, support communications, and other content you submit. Payment details are processed by our payment processor (e.g., Stripe); we do not store full card numbers.
• Automatically collected: device and usage data, log data, IP address, browser type, pages viewed, and cookie identifiers. We use analytics tools (e.g., Google Analytics) to help analyze usage and performance.
• From third parties: limited information from service providers (e.g., fraud prevention, payments, hosting) to operate the Service.

3. How We Use Information

• Provide, maintain, secure, and improve the Service.
• Process transactions and account administration.
• Develop new features and conduct analytics to understand usage.
• Send service-related communications and, where permitted, marketing communications (you may opt out at any time).
• Comply with legal obligations and enforce our Terms.

4. Legal Bases (EEA/UK where applicable)

• Contract: to provide the Service you requested.
• Legitimate interests: to secure, improve, and market the Service in ways that do not override your rights.
• Consent: for certain analytics, cookies, and marketing communications, where required.
• Legal obligation: to meet record-keeping and compliance requirements.

5. Sharing of Information

We share information with service providers who process data on our behalf and under contract, including but not limited to Stripe (payments), Supabase (database/auth/storage), Vercel (hosting), Google Analytics (analytics), and AI processing providers such as OpenAI and LangChain. We do not sell your personal information. We may share aggregated or de-identified information that cannot reasonably identify you. We may disclose information to comply with law, protect rights and safety, or in connection with a merger, acquisition, or asset sale.

6. Cookies and Tracking

We use cookies and similar technologies for functionality, analytics, and performance. For details and choices, see our Cookie Policy.

6A. AI & Copilot Data Use

iMaintain uses artificial intelligence features ("Copilot") to help users understand their properties, vehicles, pets, belongings, schedules, and records.

Copilot is powered in part by OpenAI's API. When you use Copilot, relevant portions of your data (such as asset details, maintenance history, files, or notes) may be sent to OpenAI solely to generate a response for you.

Data submitted through the OpenAI API is not used by OpenAI to train or improve its models.

iMaintain does not permit OpenAI to use your data for advertising, profiling, or model training. Data is processed only to provide the requested Copilot functionality and is handled in accordance with OpenAI's API data usage policies.

Any embeddings, summaries, or derived data generated by iMaintain are used exclusively to operate and improve features within your account. You retain ownership of your data at all times.

If you delete your account or content, associated Copilot data is deleted in accordance with our data retention and deletion policies.

7. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Where feasible, we aim to delete or anonymize information when it is no longer needed. You can request account deletion and access/export/delete of your data from your in-app profile settings (or by emailing support@imaintain.ai), including after canceling a subscription. We will verify your identity and respond consistent with applicable law. Backups and logs may persist for up to 30 days (or longer where legally required or to enforce our agreements) and will then be deleted or anonymized in the ordinary course of business.

8. Security

We implement appropriate technical and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

• Access, correction, or deletion of your information by contacting us.
• Opt out of marketing emails via the unsubscribe link in those emails.
• Cookie preferences as described in our Cookie Policy.
• If you are in certain regions (e.g., EEA/UK/California), you may have additional rights under local law. Contact us to exercise these rights.

10. International Transfers

We are based in the United States and may process information in the U.S. and other countries. Where required, we implement appropriate safeguards for cross-border transfers.

11. Children’s Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by email or through the Service). Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact

14. GDPR Addendum (EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), the following applies in addition to the sections above.

• Rights: You may have the right to request access, rectification, erasure, restriction, objection, and data portability. Where we rely on consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal bases: We process personal data as necessary for contract performance, based on our legitimate interests (e.g., to secure and improve the Service and communicate with you), with your consent (e.g., certain analytics/cookies/marketing), and to comply with legal obligations.
• Transfers: Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, and implement technical and organizational measures to protect your data.
• Complaints: You can lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can address your concerns.
• Cookies/consent: Where required, we will seek consent for non‑essential cookies/analytics. See our Cookie Policy for details.

15. California Privacy (CPRA)

If you are a California resident, the California Privacy Rights Act (CPRA) provides additional disclosures and rights.

Notice at Collection — Categories and Purposes

• Categories collected: identifiers (e.g., name, email), commercial information (subscription details, transaction metadata), internet/electronic activity (usage, logs, device info, IP address), and inferences drawn from usage to improve the Service.
• Sources: directly from you; automatically from your device/usage; from service providers (e.g., payments, hosting, analytics).
• Purposes: to provide and secure the Service; process payments; analytics and improvement; communications; compliance.
• Disclosure for business purposes: to service providers under contract (e.g., Stripe, Supabase, Vercel, analytics providers) that process data on our behalf.

We do not sell personal information. We do not share personal information for cross‑context behavioral advertising. If this changes, we will update this Policy and provide required opt‑out mechanisms.

Your CPRA Rights

• Right to know/access categories and specific pieces of personal information we collect and use.
• Right to delete personal information, subject to exceptions.
• Right to correct inaccurate personal information.
• Right to data portability.
• Right to opt out of sale/share of personal information (not applicable as described above).
• Right to limit use/disclosure of sensitive personal information where applicable.
• Right to non‑discrimination for exercising your rights.

Submitting requests: Use your in-app profile settings or email support@imaintain.ai. We will verify your request using information we have on file and may need additional information to verify identity. You may use an authorized agent with proper authorization.