1. Who we are
BoltKey Inc. ("BoltKey", "we", "us") operates boltkey.io and the private beta programme described on it. We are the controller of the personal information described in this policy. You can reach us any time at [email protected].
2. What we collect
We keep this deliberately small. At this stage we collect only:
- Your email address, when you submit the access request form.
- Optional context you choose to send us, such as your company name, role, team size or what you are trying to solve, if you include it in a reply or a follow-up conversation.
- Basic technical and usage data, such as approximate location derived from IP, device and browser type, referring source, and which pages you viewed. This is collected in aggregate through privacy-focused analytics.
We do not ask for, and you should never send us, credentials, secrets, API keys or access tokens. Nothing on this site is a place to put them.
3. Why we use it
We do not sell your information. We do not share it with advertisers. We do not add you to a marketing newsletter you did not ask for, and we will not use your address for unrelated products.
4. Legal bases
Where the GDPR or UK GDPR applies, we rely on your consent when you submit your email address to join the access list, and on our legitimate interests for aggregate analytics, security and product research. You can withdraw consent at any time, and every message we send includes a one-click unsubscribe.
5. Who processes it for us
We use a small number of vendors, each bound by contract to process data only on our instructions:
- Form and list handling, to receive and store access requests.
- Email delivery, to send invitations and programme updates.
- Website hosting and CDN, to serve this site.
- Privacy-focused analytics, to measure traffic in aggregate.
We will name our current processors on request. Some of them operate in the United States; where information leaves the UK or EEA we rely on Standard Contractual Clauses or an equivalent transfer mechanism.
6. How long we keep it
Access-list entries are retained until access opens and you either accept or decline, or until you ask us to remove you, whichever comes first. If the programme closes without an invitation reaching you, we delete the entry within 12 months. Aggregate analytics are retained for up to 24 months and are not linked to your identity.
7. Cookies
This site sets no advertising cookies and no cross-site trackers. Our analytics are configured to work without cookies and without collecting personal identifiers, so there is no consent banner to click through. If that changes before launch, we will update this page and ask properly.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your information, to receive a portable copy, and to complain to a supervisory authority. If you are in California, you additionally have the right to know what we collect and to opt out of any sale or sharing of personal information, which we do not do.
To exercise any of these rights, email [email protected] with "Privacy request" in the subject line. We respond within 30 days, usually much sooner, and we do not require you to create an account to ask.
9. Security
Data is encrypted in transit and at rest. Access to the beta list is limited to the people who need it to run the programme, and it is reviewed as the team grows. Given what we are building, we hold ourselves to the standard we intend to help our customers meet.
10. Children
BoltKey is a product for businesses. We do not knowingly collect information from anyone under 16.
11. Changes to this policy
When the product launches, this policy will be replaced by a fuller version covering data processed inside BoltKey itself. Material changes will be announced by email to everyone on the access list before they take effect, and the version stamp at the top of this page will change.