Legal

Privacy Policy

Effective Date: April 20, 2026 · Last updated: April 2026

Information We Collect

When you use Boffo, we collect information you provide directly, including your name, email address, company name, and startup idea submissions. We also collect information automatically when you visit our platform, such as IP address, browser type, device identifiers, and usage data through cookies and similar tracking technologies. We collect information about the startup ideas and product concepts you submit for validation. This content is used solely to provide the Boffo service and to improve our AI models. We do not share your submitted ideas with any third parties.

How We Use Your Information

We use the information we collect to: provide, operate, and improve the Boffo demand validation service; process your startup idea submissions and generate viability reports; create and manage your account; send you transactional communications about your reports; respond to your inquiries and support requests; and comply with legal obligations. We use aggregated, anonymized data about startup ideas and market signals to improve our fine-tuned models and benchmark datasets. This aggregated data cannot be used to identify you or your specific idea.

Data Sources and Third-Party APIs

Boffo integrates with third-party data providers including Crunchbase, Y Combinator, Product Hunt, AngelList, CB Insights, PitchBook, and others to generate validation reports. When we query these services on your behalf, we transmit only the minimum information necessary to retrieve relevant market data. We do not share your personal information or submitted ideas with these providers. Our prototype testing module may display your product concept to third-party user panelists. In these cases, your personal identity is never disclosed to panelists. Concepts are presented anonymously for demand testing purposes.

Data Retention

We retain your account information for as long as your account remains active or as needed to provide you services. Validation reports are retained for 24 months and then deleted or anonymized. You may request deletion of your data at any time by contacting privacy@boffo.io. Aggregated, anonymized benchmark data derived from validation runs may be retained indefinitely as it cannot be linked back to individual users or ideas.

Your Rights

Depending on your location, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion of your information; object to or restrict certain processing; and receive a portable copy of your data. To exercise any of these rights, contact us at privacy@boffo.io. We will respond to all legitimate requests within 30 days.

Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls, regular security audits, and secure development practices. However, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and report any suspected security issues to security@boffo.io.

Cookies

We use cookies and similar tracking technologies to authenticate users, remember preferences, analyze platform usage, and improve our service. You may control cookie settings through your browser. Note that disabling certain cookies may affect platform functionality.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform at least 14 days before changes take effect. Your continued use of Boffo after the effective date constitutes acceptance of the updated policy.