Privacy Policy
Boost Up ("the Service", boostup.cloud) is operated by Pro Level Solutions Ltd, Bulgaria. This policy explains what personal data we process, why, and what your rights are. We follow the EU General Data Protection Regulation (GDPR).
1. What we collect
- Account data: email address, password hash, company name and the website URL you submit.
- Website analysis data: public pages of the website you ask us to analyse, and the reports we produce from them.
- Connected services: if you connect Google Search Console, Google Analytics, Google Tag Manager, Meta or a CMS, we store the access tokens you authorise and read only the data needed for the features you enable. You can disconnect at any time from Settings, which deletes the tokens.
- Usage and technical data: server logs, error reports (Sentry, EU region), and product analytics about how the Service is used.
2. Why we process it
To provide the Service (contract), to keep it secure and improve it (legitimate interest), to send service emails, and, only with your consent, to place marketing cookies or tags.
3. Google user data
When you connect a Google account, Boost Up requests access to Search Console, Google Analytics and Tag Manager. We use this data only to show your search and traffic performance inside Boost Up, to create and configure properties and tags you ask for, and to let your Boost Up agent prepare recommendations for you. We do not sell this data, do not use it for advertising, and do not share it with third parties except the processors listed below. Boost Up's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Processors and subprocessors
- Hostinger (hosting, EU data centre)
- Cloudflare (DNS, CDN, object storage, EU)
- Sentry (error monitoring, EU region)
- OpenRouter and the AI model providers it routes to (text, image and video generation; prompts contain only the data needed for the task)
- DataForSEO (SEO and AI search datasets; receives keywords and domains, not personal data)
- PostHog (product analytics, EU cloud)
5. Retention
Account data is kept while your account exists and deleted within 30 days of account deletion. Analysis reports are kept for 12 months unless you delete them earlier. Logs are kept for 90 days. Connected service tokens are deleted immediately when you disconnect.
6. Your rights
You can access, correct, export or delete your data, object to processing, and withdraw consent at any time by writing to [email protected]. You can also complain to the Bulgarian Commission for Personal Data Protection.
7. International transfers
Data is stored in the EU. Where a processor is outside the EU, transfers rely on the EU Standard Contractual Clauses.
8. Cookies
We use strictly necessary cookies for login and security. Analytics and marketing tags load only after you accept them in the cookie banner.
9. Changes
We will post updates on this page and change the date above.