Last updated: May 13, 2026
BoostsLocal ("we" or "us") operates the website service at boostslocal.com (the "Service"). This Privacy Policy explains what information we collect and what we do with it.
BoostsLocal is operated by Noah Tsai as a sole proprietorship. We act as the data controller for personal data submitted through the Site. PayPal, Inc. processes payments on our behalf and handles payment data directly; their privacy policy governs anything payment-related.
Using the Service means you accept this policy. If you don't, please don't use the Service.
When you sign up, we ask for your business name, your name, email address, phone number, and billing address. As you go through our intake form to build your website, we collect the content you submit — business hours, services offered, service areas, pricing, and any descriptive content you choose to include.
Payment information goes directly to PayPal, our payment processor. We do not store full credit card numbers on our servers.
We also keep messages you send us via email or our support channels.
As you use the platform, we collect technical data automatically: which pages you visit, which features you use, how long you spend. This includes standard device data such as IP address, browser type, operating system, and device identifiers. Server logs, error reports, and diagnostic data help us maintain and improve the Service.
If you connect a Google Business Profile or social media account to your generated website, we may receive limited information from those services — only what you authorize.
We use your information for the following purposes:
The core operational uses are running your website, processing your payments, and responding when you contact support. We also send you service notifications when something needs your attention — billing reminders, deployment status, scheduled maintenance.
Beyond running your account, we use aggregated data to improve the platform and detect fraud or unauthorized access. We also retain and use information when legally required (for example, to enforce our Terms of Service or comply with applicable law).
We do not sell personal information to advertisers or data brokers. We share your information only as described below.
We use third-party infrastructure providers — Amazon Web Services and Cloudflare — to host data and run our platform. For AI-assisted content generation, we use Google's Gemini API; data sent to Gemini is limited to the business information you submit for site generation. Each provider is bound by their own contracts with us and by their public data processing agreements.
PayPal processes all subscription transactions on our behalf. Their handling of payment data is governed by their privacy policy at paypal.com/legalhub/privacy-full.
We may share information when the law requires it — through a court order, government request, or similar legal process. We may also share it when needed to protect ourselves, our users, or the public from harm.
If BoostsLocal is acquired or merged, your information may transfer as part of that transaction. We will notify users of any change in control of their data.
For any other sharing not covered above, we ask for your explicit permission at the time of collection.
Website content you publish through the Service appears on a publicly accessible website by design. That content is public to anyone who visits it.
The boostslocal.com marketing website does not use cookies, analytics, or behavioral tracking. We don't collect any behavioral data from visitors to our marketing pages.
The only exception is a security cookie set by Cloudflare, our CDN
provider. The cookie (called __cf_bm) is temporary,
tied to your session, and used only to block bots. Because it's
essential for site security, it doesn't require your consent under
GDPR Article 6(1)(f) (legitimate interest). It doesn't identify
you or track your behavior across the web.
We may introduce functional cookies in the future — for example, to support customer dashboards or authenticated sessions. We will update this policy and notify you in advance via email or a banner on the Site.
You can control cookies through your browser settings at any time. Beyond Cloudflare's essential security cookie, boostslocal.com does not currently track or store anything on your device.
BoostsLocal depends on a handful of third-party services to run. Each has its own privacy policy that governs their handling of your data:
PayPal processes payments. Amazon Web Services and Cloudflare provide infrastructure (storage, compute, CDN, DNS). Google provides content generation services and, if you connect it, your Google Business Profile.
Direct links to each provider's privacy policy:
We retain your information for as long as your account is active, or as needed to provide the Service. When you cancel, your generated website is taken offline within 30 days. Account data is held for up to 90 days in case you wish to reactivate, and backups containing your data may persist for up to 12 months for disaster recovery purposes. Information required for legal, accounting, or tax purposes — such as invoices — may be retained longer as required by applicable law.
You can request earlier deletion of your data; see Your Rights below.
You have rights over the personal information we hold about you. The specifics depend on where you live — GDPR for EU and UK residents, CCPA for California, and similar laws in other jurisdictions.
You can request a copy of the data we have on file, ask us to correct anything inaccurate or incomplete, or ask us to delete it entirely. You can request a machine-readable export of your data to take to another service. You can object to certain types of processing, or ask us to restrict it. Where our processing relies on your consent, you can withdraw that consent at any time.
To exercise any of these rights, email privacy@boostslocal.com. We respond within 30 days.
We use TLS 1.3 encryption in transit and encrypt data at rest on AWS-managed storage. Access to data is limited to employees on a need-to-know basis; access is logged and reviewed. We review dependencies quarterly for known vulnerabilities, and our underlying infrastructure runs on SOC 2 Type II compliant providers — Amazon Web Services and Cloudflare.
No security system can be made fully impervious to attack. We monitor and patch our infrastructure to address known risks. If we identify a breach affecting your data, we will notify affected users in accordance with applicable law.
The Service is intended for adults (18 or older) operating a business. We do not knowingly collect personal information from anyone under 18. If we learn we've collected such information, we'll delete it promptly.
BoostsLocal uses cloud infrastructure in multiple countries, primarily the United States. By using the Service, you consent to your information being transferred to and processed in these jurisdictions.
For users in the European Economic Area and the United Kingdom, we rely on the Standard Contractual Clauses adopted by the European Commission for transfers to our service providers in the United States. Our underlying providers (AWS, Cloudflare, Google) are also Data Privacy Framework certified.
We may update this policy. The "Last updated" date at the top of this page reflects the most recent version. For changes that materially affect your rights, we will email you or post a prominent notice on the Site at least 30 days before the new version takes effect.
If you continue using the Service after that date, you accept the updated policy.
For questions about this policy or our data practices, email privacy@boostslocal.com. For general support inquiries, use support@boostslocal.com.