Privacy Policy

Last updated: May 12, 2026

This Privacy Policy describes how Boring Marketing (“we,” “us,” or “our”) collects, uses, and shares information when you use our website, API, CLI, and related services (collectively, the “Service”).

Information we collect

Account information. When you create an account, we collect your name, email address, company name, and authentication credentials.

Billing information. Payments are processed by Stripe. We receive limited billing metadata (subscription tier, status, last four digits of payment method) from Stripe; we do not store full card numbers.

Content and crawl data. When you run an analysis, we collect the URLs, brand names, and keywords you submit, plus the pages we crawl on your behalf and the AI-generated outputs (opportunities, briefs, drafts) we return to you.

Usage telemetry. We collect logs of API calls, credit consumption, error events, feature usage, and aggregate performance metrics to operate and improve the Service.

Communications. When you email us or respond to product communications, we retain those messages.

How we use information

We use the information we collect to provide, maintain, and improve the Service; to process payments and manage subscriptions; to communicate with you about your account, new features, and service issues; to detect, prevent, and respond to abuse, fraud, or security incidents; and to comply with legal obligations.

Third parties

We rely on a small set of vendors to deliver the Service. Each processes a subset of the data above under their own privacy terms:

Stripe— payment processing and subscription billing.
Anthropic— large language model inference. Prompts and content submitted to Anthropic are governed by their commercial terms; we do not opt in to training on our API traffic.
Cloudflare— content delivery, DDoS protection, and infrastructure routing.
Railway— application hosting and managed Postgres.
Sentry— error tracking and crash reporting.
PostHog— product analytics, feature-usage instrumentation, and session recording (session replays, with form inputs masked).

We do not sell your personal information. We do not share your content or crawl data with advertisers or data brokers.

Data retention

We retain account information for as long as your account is active. Billing records are retained for as long as required by tax and accounting regulations. Content and crawl data are retained while you remain a customer; you may request deletion at any time. Usage telemetry is retained for up to 24 months in aggregate form.

Your rights

You may request access to, correction of, export of, or deletion of your personal information at any time by emailing privacy@boringmarketing.com. Depending on where you live, you may have additional rights under applicable law (e.g., GDPR or CCPA); we honor those rights for all users regardless of jurisdiction.

Cookies

We use a small number of strictly necessary cookies to maintain your authenticated session and remember your preferences. We do not use third-party advertising cookies.

Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Contact

Questions about this policy or our data practices? Email privacy@boringmarketing.com or contact@boringmarketing.com.