Privacy Notice

Last updated: September 5, 2026

This notice describes current processing for askboswell.com, its onboarding conversation, the developer site at boswellmcp.com, and the invitation-only Boswell private beta. It does not describe unreleased Boswell 6 features.

1. Information We Process

Public-site state: The browser stores a randomly generated visitor ID in localStorage. The site recognizes a return only after the server confirms that this ID completed the introduction. You can clear this state in your browser.
Onboarding conversation: We process the text you enter, the generated replies, an inferred work persona, and the illustrative page configuration produced from that conversation. On a return visit the site may recall what you said before and continue the conversation.
Introduction events: We record which step of the introduction a visit reached (answers sent, the page offered, the page opened), the timing of those steps, and the model usage each reply consumed, tied to the visitor ID, so we can evaluate and pay for the introduction.
Invited-tenant data: If you join the beta, Boswell processes the branches, commits, bookmarks, tasks, memory content, and related metadata that you or an authorized model client submit.
Operational data: Service logs may contain timestamps, request routes and status, error details, IP address, user agent, rate-limit events, and other data needed to operate and secure the service. The chat service counts requests per IP address for a short window to limit abuse.
Communications: If you email us, we process the message and contact details needed to respond.

2. Why We Process It

To run the public introduction and personalize its illustrative output
To provide tenant-scoped memory, search, recall, and related beta functions to invited users
To operate, diagnose, secure, and evaluate the service
To answer requests, enforce the Terms, and comply with legal obligations

3. Service Providers and External Requests

Atlas infrastructure: The public chat service and beta data are processed on Boswell's Atlas service infrastructure.
Anthropic: The onboarding conversation and related instructions are sent to Anthropic's commercial API to generate replies and the illustrative page. Anthropic states that it does not use chats or coding sessions from its commercial offerings to train its models unless the customer explicitly opts in, such as through its Development Partner Program or feedback. See Anthropic's commercial-offering data-use notice and applicable API terms.
Cloudflare: The public site runs Cloudflare Turnstile, an invisible check that helps keep automated traffic away from the conversation. When you send your first answer, your browser exchanges technical signals with Cloudflare (such as your IP address and browser characteristics) to obtain a token, and the chat service verifies that token with Cloudflare. Cloudflare's privacy policy governs that processing. Boswell does not receive those signals; it receives only the verification result.

We may also disclose information when required by law, to protect users or the service, or in connection with a business reorganization subject to appropriate safeguards.

4. What We Do Not Do

We do not sell personal information or share it for behavioral advertising.
We do not use an invited tenant's memory content to train a shared Boswell model unless that tenant separately and explicitly authorizes the specific use.
The public site does not intentionally set advertising or analytics cookies. It uses the localStorage identifiers described above.

5. Retention and Deletion

We retain onboarding records, beta tenant data, and operational logs for as long as reasonably needed to provide and evaluate the beta, maintain security, resolve disputes, and meet legal obligations. Different record types may have different lifecycles, and residual copies may remain temporarily in backups or logs. You may request access to or deletion of information associated with you; we will verify and respond as required by applicable law and operational constraints.

6. Your Choices

Clear the site's visitor ID through your browser's site-data controls.
Do not submit confidential, sensitive, or third-party information in the public onboarding conversation unless you are authorized to share it.
Ask us to access, correct, export, or delete information associated with you, subject to verification and applicable law.

7. Security

We use safeguards appropriate to the current private beta, including TLS in transit, authenticated tenant access, and service-level access controls. No service or retrieval system is error-free or perfectly secure; protect invite codes and credentials and report suspected misuse promptly.

8. Children

The public beta is not directed to children under 13. Do not submit a child's information without the authority and safeguards required by applicable law.

9. Changes

We may update this notice as the product or its processing changes. The date above identifies the current version; material changes may also be communicated through the site, service, or direct notice where appropriate.

10. Contact

Privacy or deletion requests: hello@askboswell.com.

Steve Krontz
Atlanta, Georgia, USA