Legal

Privacy policy

Last updated October 15, 2026

On this page

Privacy policy

This policy explains what information Boomkit collects, why, who we share it with and what you can ask us to do with it. It covers boomkit.app, the brand dashboard and the creator app, for brands, creators and anyone who visits. Questions go to hello@boomkit.app.

1. Who we are

Boomkit is run by Boomkit LLC, a Utah limited liability company (“Boomkit”, “we”, “us”). We decide how the information described here is used.

2. What we collect from brands

  • Account details: your name, work email, company name and password. Passwords are stored by our login provider in a form we cannot read.
  • Your brief: your app’s name, links and description, your audience, target countries, guidelines, assets (such as your logo and screenshots), demo logins or promo codes for creators, your contact person, time zone and timing.
  • Orders: the package you bought, your countries, amounts paid and refunds. Payments are handled by Stripe. We never receive or store your full card number; Stripe may share limited details with us, such as the card brand, its last four digits and billing country.
  • Messages: what you send us by email, Slack or other channels.

3. What we collect from creators

  • Profile: your name, email, phone number, country and social handles.
  • Connected social accounts: the usernames and passwords of the accounts you run for Boomkit campaigns, which we store encrypted, plus each account’s posts and analytics, such as views and where viewers are located.
  • Payouts: your earnings and payout history. Bank and payout details are collected and held by our payment provider, Stripe. We also keep any tax information the law requires us to collect from contractors.

4. What we collect from everyone

  • Demo bookings: if you book a call, Calendly collects your name, email and anything you type into the booking form, and shares it with us.
  • Usage and device data: pages you visit, actions in the dashboard, your browser and device type, IP address, and logs our servers keep to run and secure the service.
  • Cookies: we use cookies that are needed to keep you logged in and to keep the site secure. We do not use advertising cookies, and we do not currently use analytics cookies. If that changes, we will update this policy first. Our pages load fonts and icons from Google Fonts and unpkg, which receive your IP address to deliver them.

5. How we use information

  • To run your account, your campaign and your dashboard.
  • To brief creators and strategists on a brand’s app and guidelines.
  • To count views, check them for fraud and bots, and show results.
  • To take payments, give refunds and pay creators.
  • To answer questions, book calls and send service emails (such as receipts, reports and changes to our terms).
  • To keep Boomkit secure, prevent abuse and meet our legal and tax obligations.
  • To improve the product.

6. Who we share it with

We share information only as needed to run Boomkit:

  • Stripe for payments, refunds and creator payouts.
  • Supabase for our database and logins.
  • Vercel for hosting the site and dashboard.
  • Calendly for demo bookings.
  • Creators and strategists on a campaign, who see the brand’s brief.
  • Brands, who see the handles, posts and view numbers of the creators and accounts on their campaign.
  • TikTok, Instagram and YouTube, when we connect accounts and read their analytics through the platforms’ own tools.
  • Authorities or others when the law requires it, or to protect our users, creators or Boomkit.
  • A buyer or successor if Boomkit is sold or reorganized, under this policy.

If we add a new service provider that handles personal information, we will add it to this list.

7. We don’t sell your information

We never sell personal information, and we do not share it with anyone for targeted advertising.

8. How long we keep it

  • Accounts and briefs: while your account is open, and up to 2 years after your last campaign ends, so you can see past campaigns and buy again.
  • Payment, payout and tax records: 7 years, because tax law requires it.
  • Social account logins: only while the account is used for Boomkit campaigns, then deleted within 30 days.
  • Logs: usually up to 90 days, longer if needed to investigate a security problem.
  • Demo bookings: as long as Calendly and our email keep them, and you can ask us to delete them at any time.

When you close your account, we delete or anonymize your information unless we have to keep it for one of the reasons above.

9. How we protect it

All traffic to Boomkit is encrypted. Social account passwords are encrypted when stored, and only the few people who need them can see them. Brands can only see their own campaigns. No system is perfectly secure, so if a breach affects your information, we will tell you as the law requires.

10. Your rights

Wherever you live, you can ask us to:

  • tell you what personal information we have about you and give you a copy
  • correct information that is wrong
  • delete your information
  • stop sending you marketing emails (every marketing email has an unsubscribe link)

Email hello@boomkit.app. We will check it is really you, usually by replying to the email on your account, and answer within 45 days. We may keep some information when the law requires it, such as tax records, and we will tell you if we do.

11. California and other US state rights

If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a privacy law, you have the rights in section 10, plus these:

  • Right to know what we collect, where it comes from, why we use it and who we share it with. This policy is that answer, and you can ask for the details about you.
  • Right to opt out of sale or sharing. We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of.
  • Sensitive information. The only sensitive information we handle is login details (such as account passwords), and we use them only to provide the service.
  • No penalty. We will not treat you differently for using any of these rights.
  • Agents and appeals. Someone you authorize can make a request for you. If we turn down a request, you can appeal by replying to our answer, and we will review it again.

12. Children

Boomkit is not for anyone under 18. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it.

13. Where your information is stored

Boomkit is based in the United States. Your information is stored and processed in the United States and wherever our service providers operate.

14. Changes to this policy

We may update this policy. We will change the date at the top and, for important changes, email account holders before they take effect.

15. Contact

Boomkit LLC, Utah
Email: hello@boomkit.app