Privacy Policy

Effective September 29, 2026.

1. What this covers

This policy describes how Bootech collects and uses information in connection with the GovernedAI website (governedai.co) and application (app.governedai.co).

2. Information we collect

• Account information you or your organization provide: name, work email, company name, and role.
• Billing information, handled by our payment processor, Stripe. We do not store full card numbers ourselves.
• Content you enter into GovernedAI on behalf of your organization: AI system records, vendor records, workflow decisions, evidence files, and similar governance data. This should never include protected health information (PHI). See our Security & data handling page.
• Usage information, such as pages visited and actions taken in the app, used to operate and improve the service.
• Marketing site information, such as readiness-checklist answers and the email you provide for your results.

3. How we use it

We use this information to provide the service, bill for paid plans, communicate with you about your account (including trial and billing notices), respond to support and sales inquiries, and improve GovernedAI. We do not sell your personal information.

4. Where data is processed

The application runs on mainstream cloud infrastructure with a managed database; billing runs through Stripe. See Security & data handling for more on hosting and data isolation between organizations.

5. Retention

We retain your organization’s data for as long as your subscription is active. If canceled, we retain it for a limited period (see the Cancellation & refund policy) to allow export, then delete it.

6. Your choices

You can access, correct, or export most of your organization’s data directly in the app. To request deletion of personal information outside the normal retention process, contact us below.

7. Contact

Questions about this policy: support@governedai.co.