Workflow & Automation · bootloop.aiBootLoop
Graded against 809 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
“If your personal information is subject to the applicable data protection laws of the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority if you believe our processing of your personal information violates applicable law.”
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
States that personal information is shared with third parties as needed to provide the services, establishing a disclosure basis for third-party data sharing.
States the general bases on which personal information is disclosed to third parties — to provide services, protect parties, or in major business transactions — establishing the scope of disclosure practices.
Identifies categories of third-party service providers with whom personal information may be shared (cloud infrastructure, authentication, database services, error monitoring, CRM), and states that these providers are contractually bound to process data only as instructed under data processing agreements, establishing both disclosure scope and a protective contractual constraint on subprocessors.
How to read this page: Overall risk rates what BootLoop's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 38 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 38 citationsLast captured 2026-07-19
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Section heading labeling the subsection on use of personal information to provide Services.
" We use your personal information for a variety of business purposes, including to provide our Services, for administrative purposes, and to market our products and Services, as described below."
Defines the scope of the Privacy Notice as applying to personal information processed by BootLoop across its websites and offerings, collectively defined as 'Services'; specifies that Services are provided exclusively to business organizations ('Clients') under enterprise agreements and not to individual consumers; and reserves BootLoop's right to revise the Notice in its sole discretion, indicating an obligation to notify of material changes.
" This Privacy Notice applies to personal information processed by us, including on our websites and other online or offline offerings. To make this Privacy Notice easier to read, our websites and other offerings are collectively called the ..."
Enumerates the categories of personal information BootLoop collects directly from users — including account information (name, email address used solely for authentication), communications, and event-related information — and specifies the limited purpose for which account information is used, creating a defined scope of collection and use obligation.
" We may collect personal information that you provide to us. Account Information. We collect personal information in connection with the creation or administration of your account, specifically your name and email address. This information..."
Restricts the service from being directed to children under 16, prohibits knowing collection of personal information from children, and imposes a procedure for parents or guardians to request removal — protective of minors' data.
" The Services are not directed to children under 16 (or other age as required by local law), and we do not knowingly collect personal information from children. BootLoop’s Services are provided exclusively to business organizations, and ind..."
Establishes that personal information is retained for as long as the user uses the services or as necessary to fulfill collection purposes, provide services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce agreements, and comply with law; and identifies factors considered when determining appropriate retention periods.
" We store the personal information we collect as described in this Privacy Notice for as long as you use our Services, or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish l..."
Discloses that BootLoop may obtain personal information about users from third-party services and organizations, such as an enterprise identity provider accessed via SSO, where the information is made available through the user's privacy settings on that third-party application.
" Third-Party Services and Sources. We may obtain personal information about you from other sources, including through third-party services and organizations. For example, if you access our Services through a third-party application, such as..."
States the general bases on which personal information is disclosed to third parties — to provide services, protect parties, or in major business transactions — establishing the scope of disclosure practices.
" We disclose your personal information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfe..."
Clause A states BootLoop's services are exclusively for business organizations and not individual consumers, while Clause B directly addresses 'you' (an individual) regarding 'your' personal information and privacy rights, implying individual consumers are a direct audience.
" This Privacy Notice applies to personal information processed by us, including on our websites and other online or offline offerings. To make this Privacy Notice easier to read, our websites and other offerings are collectively called the “Services.” BootLoop provides its Services exclusively to business organizations (“Clients”) under enterprise agreements. We do not offer consumer products or services and do not enter into agreements with individual consumers. Changes to our Privacy Notice. We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Notice if you continue to use our Services after the new Privacy Notice takes effect."
" This Privacy Notice is designed to help you understand how BootLoop, Inc. (“BootLoop,” “we,” “us,” or “our”) collects, uses, and shares your personal information, and to help you understand and exercise your privacy rights."
Within one documentClause A implies individuals can directly exercise their rights under the Privacy Notice, while Clause B explicitly states the platform does not offer services to or enter agreements with individual consumers.
" Authenticating and verifying individual identities, including requests to exercise your rights under this Privacy Notice;"
" This Privacy Notice applies to personal information processed by us, including on our websites and other online or offline offerings. To make this Privacy Notice easier to read, our websites and other offerings are collectively called the “Services.” BootLoop provides its Services exclusively to business organizations (“Clients”) under enterprise agreements. We do not offer consumer products or services and do not enter into agreements with individual consumers. Changes to our Privacy Notice. We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Notice if you continue to use our Services after the new Privacy Notice takes effect."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Sharing personal information with third parties as needed to provide the Services;"
States that personal information is shared with third parties as needed to provide the services, establishing a disclosure basis for third-party data sharing.
AI-generated interpretation, not legal advice.
" We disclose your personal information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below."
States the general bases on which personal information is disclosed to third parties — to provide services, protect parties, or in major business transactions — establishing the scope of disclosure practices.
AI-generated interpretation, not legal advice.
" The categories of third parties with whom we may share your personal information are described below. Service Providers. We may share your personal information with our third-party service providers and vendors that assist us with the provision of our Services. This includes service providers and vendors that provide us with cloud infrastructure, authentication and identity management, database services, error monitoring, and CRM services. These service providers are contractually bound to process data only as instructed by BootLoop in accordance with our data processing agreements. Affiliates. We may share your personal information with our corporate affiliates."
Identifies categories of third-party service providers with whom personal information may be shared (cloud infrastructure, authentication, database services, error monitoring, CRM), and states that these providers are contractually bound to process data only as instructed under data processing agreements, establishing both disclosure scope and a protective contractual constraint on subprocessors.
AI-generated interpretation, not legal advice.
" If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth in “Contact Us” below."
States that Nevada residents have the right to opt out of the sale of certain personal information to third parties who intend to license or sell it, and affirmatively represents that the company does not currently sell personal information as defined under the referenced state statute, which is a protective disclaimer limiting the applicability of the opt-out right.
AI-generated interpretation, not legal advice.
" The Services are not directed to children under 16 (or other age as required by local law), and we do not knowingly collect personal information from children. BootLoop’s Services are provided exclusively to business organizations, and individual accounts are provisioned by those organizations for their authorized personnel. If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us as described in “Contact Us” below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child’s account, if applicable."
Restricts the service from being directed to children under 16, prohibits knowing collection of personal information from children, and imposes a procedure for parents or guardians to request removal — protective of minors' data.
AI-generated interpretation, not legal advice.
" All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your personal information consistent with the requirements of applicable laws. If we transfer personal information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses. For more information about the safeguards we use for international transfers of your personal information, please contact us as set forth below."
States that personal information may be transferred, processed, and stored anywhere in the world including countries with different data protection laws, and that the company endeavors to safeguard personal information consistent with applicable law requirements, including when transferring data originating in specified regions to countries without adequate protection findings.
AI-generated interpretation, not legal advice.
" If your personal information is subject to the applicable data protection laws of the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority if you believe our processing of your personal information violates applicable law."
Cross-reference incorporating another governing document; retained and linked for corpus synthesis.
AI-generated interpretation, not legal advice.
" We use your personal information for a variety of business purposes, including to provide our Services, for administrative purposes, and to market our products and Services, as described below."
Section heading labeling the subsection on use of personal information to provide Services.
AI-generated interpretation, not legal advice.
" We use your personal information to fulfill our contract with you and provide you with our Services, such as: Managing your information and accounts;"
Specifies that personal information is used to provide access to areas, functionalities, and features of the Services as part of contract performance.
AI-generated interpretation, not legal advice.
" Providing access to certain areas, functionalities, and features of our Services;"
Specifies that personal information is used to answer customer or technical support requests as part of contract performance.
AI-generated interpretation, not legal advice.
" We use your personal information for various administrative purposes, such as: Pursuing our legitimate interests such as research and development (including marketing research), network and information security, and fraud prevention;"
Specifies that personal information is used to detect security incidents, protect against malicious or illegal activity, and prosecute responsible parties as part of administrative purposes.
AI-generated interpretation, not legal advice.
" This Privacy Notice applies to personal information processed by us, including on our websites and other online or offline offerings. To make this Privacy Notice easier to read, our websites and other offerings are collectively called the “Services.” BootLoop provides its Services exclusively to business organizations (“Clients”) under enterprise agreements. We do not offer consumer products or services and do not enter into agreements with individual consumers. Changes to our Privacy Notice. We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Notice if you continue to use our Services after the new Privacy Notice takes effect."
Defines the scope of the Privacy Notice as applying to personal information processed by BootLoop across its websites and offerings, collectively defined as 'Services'; specifies that Services are provided exclusively to business organizations ('Clients') under enterprise agreements and not to individual consumers; and reserves BootLoop's right to revise the Notice in its sole discretion, indicating an obligation to notify of material changes.
AI-generated interpretation, not legal advice.
" Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;"
Specifies that personal information is used to measure user interest and engagement in the Services as part of administrative purposes.
AI-generated interpretation, not legal advice.
" Improving, upgrading, or enhancing our Services;"
States a purpose for which personal information is used — improving, upgrading, or enhancing the services — establishing an operative basis for data processing.
AI-generated interpretation, not legal advice.
" Ensuring internal quality control and safety;"
States an internal quality control and safety purpose for processing personal information, establishing a lawful processing basis.
AI-generated interpretation, not legal advice.
" Authenticating and verifying individual identities, including requests to exercise your rights under this Privacy Notice;"
States that personal information is used for authenticating and verifying individual identities, including processing rights-exercise requests, establishing a processing purpose tied to identity verification.
AI-generated interpretation, not legal advice.
" Debugging to identify and repair errors with our Services;"
States that personal information is used for debugging to identify and repair service errors, establishing a processing purpose.
AI-generated interpretation, not legal advice.
" Carrying out activities that are required to comply with our legal obligations."
States that personal information is processed to comply with legal obligations, establishing a compliance-based processing purpose.
AI-generated interpretation, not legal advice.
Common questions about BootLoop's policies
- Can you use BootLoop's output commercially?
- Commercial use allowed — based on 1 verified finding from BootLoop's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from BootLoop's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in BootLoop's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in BootLoop's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat BootLoop requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in BootLoop's published policies yet.
What the policies actually cover
0 topicsNone of BootLoop's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Verified retention clauses point in different directions: the Privacy Policy, § 7 (Retention of Personal Information) describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Your Privacy Rights” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause permits sale of personal data or information.
“If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth in “Contact Us” below.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Sharing personal information with third parties as needed to provide the Services;”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We disclose your personal information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“The categories of third parties with whom we may share your personal information are described below. Service Providers. We may share your personal information with our third-party service providers and vendors that assist us with the provision of our Services. This includes service providers and vendors that provide us with cloud infrastructure, authentication and identity management, database services, error mon...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 1 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on subprocessors data sharing
“Sharing personal information with third parties as needed to provide the Services;”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We disclose your personal information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“The categories of third parties with whom we may share your personal information are described below. Service Providers. We may share your personal information with our third-party service providers and vendors that assist us with the provision of our Services. This includes service providers and vendors that provide us with cloud infrastructure, authentication and identity management, database services, error monitoring, and CRM services. These service providers are contractually bound to process data only as instructed by BootLoop in accordance with our data processing agreements. Affiliates. We may share your personal information with our corporate affiliates.”Open timeline citation
Latest stance: sale or sell on privacy data use
“If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth in “Contact Us” below.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-19· verified 2026-07-19verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
38 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of BootLoop's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified BootLoop's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from BootLoop's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.