Deployment, filing and data notice
This page explains BossAI's current hosting region, China ICP filing status, cloud data boundary, and future adjustment principles. Last updated: July 6, 2026.
1. Current architecture
The BossAI website and BossAI Cloud are currently hosted on infrastructure in the United States and are delivered over HTTPS. BossAI Desktop runs on the customer's Windows computer. Video generation, project files, avatar assets, API keys, and work files are managed locally by default.
Desktop: content generation, third-party model calls, assets, projects, and work files.
2. China ICP filing status
The website and authorization service do not currently use servers or CDN access nodes located in mainland China. Accordingly, the website does not display a mainland China ICP filing number at this time.
ICP filing obligations depend on the actual hosting provider, server and CDN region, application form, and service model. If BossAI later moves to mainland China infrastructure, uses mainland China CDN resources, or launches a mainland application, mini program, or other regulated internet information service, the filing and licensing position will be reassessed under the rules then in force.
This notice describes the current technical and operational setup. It is not legal advice and does not replace a determination by a competent authority or professional adviser.
3. Data stored in BossAI Cloud
- Customer name, email address, and customer status;
- Order reference, product, amount, currency, and payment status;
- License plan, expiry, device limit, and validation state;
- Device name, platform, app version, activation time, and last validation time;
- Release records, download URL, SHA256, and release notes;
- Administrative audit records and necessary server security logs.
License codes and device identifiers are handled as hashes in the cloud. A complete activation code is shown only once when it is issued.
4. Data not centrally stored by BossAI Cloud
- Customer API keys for third-party model providers;
- Avatar photos, voice samples, and reference videos;
- Project scripts, prompts, and the local works library;
- MP4 files downloaded to the customer's computer;
- Complete diagnostic packages unless the user submits them for support.
When a user actively calls a third-party model service, the submitted content is handled under that provider's own rules and may be processed in other countries or regions.
5. Overseas storage and cross-border transfer
Because BossAI Cloud is currently hosted in the United States, the minimum account, order, license, and device information submitted to Cloud is transferred to and stored on servers outside mainland China. We process only the information needed for authorization, delivery, security, and support.
Businesses or teams using BossAI to handle personal information for other people are responsible for confirming a lawful basis and completing any notice, authorization, consent, or cross-border procedure required by applicable law.
6. Security and retention
- Production traffic uses HTTPS;
- The license signing private key remains on the cloud server, while Desktop contains only the public key;
- Database access is controlled and the admin console requires a separate management token;
- Important administrative actions are recorded in audit logs;
- Data is retained only as long as needed to provide the service, evidence transactions, resolve disputes, perform security audits, and meet applicable legal obligations.
When a license ends or a deletion request is accepted, data will be deleted or anonymized where this does not conflict with transaction evidence, accounting records, security records, or other legal duties.
7. Access, correction, and deletion
You may request access to, correction of, or deletion of Cloud data associated with you, or ask about hosting, filing, and data storage:
We may ask for order, license, or email verification before disclosing or deleting data.
8. Changes
We will update this page and the privacy policy if the hosting region, data scope, filing status, or product architecture materially changes.
9. Regulatory references
These official Chinese-language sources are provided for general reference. Applicability depends on the actual service and guidance from the competent authority.