Privacy Policy

This policy explains how BoltPDF ("we", "us") handles personal information on boltpdf.com, app.boltpdf.com and the BoltPDF API. It covers three groups of people:

• Customers: people who sign up for BoltPDF, and the members of their organizations.
• Clients: the people our customers send forms, requests, questionnaires and documents to sign, such as a tax firm's clients.
• Visitors: anyone who visits our website or uses the free tools and demo without an account.

For customer accounts and our website, we decide how information is used. For the information customers put into BoltPDF about their clients, the customer decides, and we process it on their behalf only to provide BoltPDF to them. If you're a client, the firm that sent you a link is responsible for your information, so contact them first. If you contact us, we'll pass your request to them.

• Account information. Your name, email address and sign-in details (through Clerk), and the organizations you belong to and your role in them.
• Billing information. Lemon Squeezy takes payments for us. We receive your plan, number of seats, subscription status and billing email, never your card number.
• What you add to BoltPDF. PDF templates and their fields, records and their values, documents, packets, questionnaires, automations, and the PDFs BoltPDF makes. Records often hold sensitive information such as Social Security numbers, taxpayer identification numbers, dates of birth, income and bank account numbers.
• What clients send. When a customer sends a client a link, we collect the client's email address, the one-time code we email to confirm it, their answers, the files they upload, their signature, and any reason they give for declining a request.
• Signing records. When someone signs a document, we record their name and email, when each step happened (code sent, email confirmed, disclosure accepted, signed), their IP address and browser, the version of the e-sign disclosure they accepted, and a fingerprint of the signed PDF. This audit trail is kept with the signed document and printed on its certificate page.
• The access log. When someone views, creates, changes, fills, sends, downloads or deletes a record, we log who did it, when, how (the app, the API, a client's link, an automation or an import), their IP address and browser, and which fields or forms were involved. The log never holds the values themselves.
• API keys and connected apps. The names of your API keys (we store only a hash of each key), the AI apps you allow through "Sign in with BoltPDF", the URLs you send webhooks to, and a log of each webhook we deliver. Webhook events carry IDs, names and links, never the answers in a record.
• Free tools and the demo. The fillable PDF tool stores the PDF you upload and the fields it finds, and uses your IP address to enforce its daily limits. The demo fills its form from what you type without saving it, and also uses your IP address for its limits. The redaction tool runs entirely in your browser, and the PDF you redact is never uploaded.
• Usage and device information. The pages you visit, features you use and errors you run into, with your IP address and browser, and your user ID and email once you're signed in. Sentry also keeps recordings of some sessions to help us fix bugs, with all text masked and images blocked.

• To run BoltPDF: storing your forms and records, filling and making PDFs, running your automations, and sending the emails you ask us to send, such as client requests, reminders, sign-in codes and signed PDFs.
• To email you about your account: sign-in, billing, service notices, failed automations, and an occasional note if you haven't used BoltPDF in a while.
• To keep BoltPDF secure: rate limits, the access log, and finding and stopping abuse.
• To answer support requests, fix bugs and improve BoltPDF.

We don't sell personal information, we don't use it for advertising, and we don't use your content or your clients' information to train AI models.

Some features send content to Google's Gemini API:

• AI field detection sends the images and text of your PDF's pages to find its form fields.
• The free fillable PDF tool does the same for the first pages of the PDF a visitor uploads.
• Reading client files, when it's available, sends the pages of the files you choose to find values such as names and ID numbers. Nothing is saved to a record until someone reviews the values next to their source.

We use Google's paid API service, under terms that don't let Google use this content to train or improve its models. Google may keep it for a limited time to detect abuse.

We use these service providers to run BoltPDF. Each one processes personal information only to provide its service to us:

• Vercel: hosting for the website and app, and cookieless page view counts.
• Neon: the database.
• UploadThing: file storage.
• Clerk: sign-in and accounts.
• Trigger.dev: background jobs such as field detection, bulk generation, imports and automations.
• Google (Gemini API): the AI features above.
• Resend: sending email.
• Lemon Squeezy: payments and subscriptions. It sells BoltPDF subscriptions as the merchant of record.
• PostHog: product analytics and error tracking.
• Sentry: error tracking.
• Axiom: server logs.

Information also leaves BoltPDF when you, or someone you allow, send it:

• in emails to clients and the addresses your automations name;
• to apps you connect through API keys or "Sign in with BoltPDF", such as an AI assistant or Zapier, which then handle it under their own policies;
• to the webhook URLs you set up.

We may also disclose information when the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of BoltPDF, in which case this policy keeps applying to it.

• Everything between your browser and BoltPDF travels over HTTPS.
• Record values, clients' answers waiting for review, rows of CSV imports and AI readings of client files are encrypted with AES-256-GCM before they're stored, on top of our providers' own disk encryption.
• A client request or signing link opens only after the client confirms their email with a one-time code.
• The records spreadsheet masks SSNs, EINs and account numbers until someone chooses to show them.

No system is perfectly secure. If you find a security problem, please tell us at princh@boltpdf.com.

• Your account, forms and records stay until you delete them or your account. Deleting a record also deletes its values, signed PDFs, client uploads and the PDFs made from it.
• Customers can set a retention policy that deletes records nobody has used for a set number of days.
• The access log keeps entries for 365 days.
• Automation run history is kept for 90 days.
• Webhook delivery logs are kept for 30 days.
• AI readings of client files are kept for 30 days.
• Free fillable PDF tool uploads and results are deleted after a day, unless you save the result as a template.

Deleted information can stay in our providers' backups for a short time before it's overwritten. Logs and analytics are kept for the periods our providers allow.

BoltPDF uses cookies to keep you signed in (Clerk) and for analytics (PostHog). It also keeps a few things in your browser's storage, such as your sidebar and spreadsheet column choices, and the link to a job in the free fillable PDF tool. We don't use advertising cookies.

You can see, change and delete your forms and records in BoltPDF at any time. To get a copy of your information, correct your account or delete it, email us. Depending on where you live, you may also have the right to object to or limit some uses of your information, to get it in a portable format, and to complain to your data protection authority.

If you're a client of one of our customers, contact the firm that sent you the link, since they control your information. If you contact us, we'll pass your request to them.

BoltPDF is a tool for businesses and isn't meant for children. The forms our customers fill can include information about children, such as dependents on a tax return, which the customer is responsible for as described in section 1.

Our providers process information in the United States and other countries, which may have different data protection laws from where you live. We use providers that commit to protecting it.

When we change this policy, we'll update the date at the top. If a change is significant, we'll also email account owners before it takes effect.

Questions about this policy or your information? Email us at princh@boltpdf.com.