Privacy

Privacy Policy

This policy explains how the BossAI website, BossAI Cloud, and BossAI Desktop handle information. Last updated: July 6, 2026.

1. Scope

“We” refers to the operator of the BossAI product. This policy applies to the official website, the authorization cloud service, and Desktop delivery. Third-party model providers apply their own terms when you use their services.

2. Website access data

The website currently has no user registration and does not intentionally use advertising trackers. The web server may record basic access logs such as IP address, access time, requested path, browser type, referrer, and error information for availability and security.

When you contact us by email, we process the name, email address, company or team details, message, and attachments you choose to send.

3. Data handled by BossAI Cloud

  • Customer name, email address, and status;
  • Order reference, product, amount, currency, payment status, and transaction time;
  • License plan, device limit, expiry, validation state, and offline grace period;
  • Device name, platform, app version, activation time, and last validation time;
  • Release records, administrative audit records, and necessary server security logs.

License codes and device identifiers are stored as hashes. The complete activation code is shown only once when issued.

4. Data kept locally in Desktop

The following data remains on the user's computer by default and is not centrally stored by BossAI Cloud:

  • Third-party model API keys;
  • Avatar photos, voice samples, and reference videos;
  • Project materials, prompts, generated scripts, and the local works library;
  • Downloaded MP4 files and other local outputs.

We receive diagnostic material only when the user actively exports and sends it for support. Remove unrelated sensitive information before sending it.

5. Purposes

We use relevant information only to create customer and order records; issue, activate, validate, suspend, restore, or revoke licenses; control devices; provide release checks and download verification; deliver support; prevent abuse; maintain security; and meet transaction or legal obligations.

6. Overseas hosting and cross-border transfer

The BossAI website and BossAI Cloud are currently hosted primarily on servers in the United States. Necessary customer, order, license, device, and audit information submitted to Cloud is transferred to and stored outside mainland China.

If you submit another person's personal information on behalf of a business or team, you are responsible for confirming a lawful basis and completing any notice, authorization, consent, or cross-border procedure required by applicable law.

See the Deployment, filing and data notice for more detail.

7. Third-party services

When you actively call DeepSeek, Ark, Seedance, or another model provider, the submitted content is handled under that provider's terms and privacy policy. BossAI does not control the provider's availability, processing region, or policy changes.

We do not sell personal information to advertisers and do not allow advertisers to access the BossAI Cloud customer, order, or license database.

8. Retention

Data is retained only as long as needed to provide the service, evidence transactions, handle support and disputes, maintain security, and meet applicable legal duties. After a license ends or a valid deletion request is accepted, data will be deleted or anonymized where this does not conflict with transaction, accounting, security, or legal record obligations.

9. Security

  • Production traffic uses HTTPS;
  • The signing private key remains on the cloud server;
  • Desktop contains only the public key;
  • Database and admin access are controlled;
  • Important administrative actions are audited;
  • License codes and device identifiers are hashed.

No system can guarantee absolute security. We will take reasonable containment, remediation, evidence-preservation, and notification steps if a security incident may affect user rights.

10. Your rights

Subject to applicable law, you may ask what data we process about you; request access, correction, supplementation, or deletion; ask for an explanation of order, license, or device records; or raise a privacy complaint. We may verify the associated email, order, or license before responding.

11. Minors

BossAI is intended for business operators, content teams, and adult professional users. Do not submit a minor's personal information, voice, or likeness without a lawful basis and any required guardian consent.

12. Contact and updates

Privacy, access, correction, or deletion requests:

We will update this policy if the product architecture, hosting region, or data scope materially changes.