Privacy Policy

BoilerShelf is operated by BoilerShelf. For personal information collected directly through our storefront and templates, we act as a data controller. When processing credentials or database storage integrations to deliver SaaS starter files, roles may vary according to our terms.

We collect information in the following categories:

• Account and profile data: name, email address, authentication provider (such as GitHub or Google OAuth), account status, and tier.
• Workspace and usage data: downloaded templates, code generator requests, package preferences, purchase dates, and developer tool logs.
• Billing metadata: plan type, invoice references, payment status, and subscription IDs from our payment processors.
• Technical and security logs: IP address, device/browser metadata, download timestamps, and session events.
• Support and communications: emails you send to our support team and operational notices (login, billing, and template safety updates).

We receive limited data from third parties, including authentication providers (e.g. GitHub OAuth), payment processors (Lemon Squeezy), database management hosts, and email delivery platforms. We use this data only to run, secure, and support your downloads and account.

We use collected data to:

• Operate core features including template downloads, documentation access, and developer dashboards.
• Authenticate users and protect developer accounts.
• Enforce starter entitlements, download limits, and licensing restrictions.
• Process payments, renewals, invoices, and license verifications.
• Send transactional emails, code patches, and service announcements.
• Monitor reliability, fix setup bugs, and improve template quality.

Where applicable law requires a legal basis, we process information under performance of a contract, legitimate interests, compliance with legal obligations, and consent.

We do not sell personal information for money. We share data only with parties that need it to provide the Service, including:

• Infrastructure, database hosting, logging, and email service providers.
• Payment, invoice, and subscription management providers (Lemon Squeezy).
• Professional advisors and authorities when legally required.

We may also disclose information in a merger, acquisition, financing, or sale of assets, subject to standard confidentiality controls.

Our templates may instruct integrations with external providers (such as Stripe, Supabase, OpenAI, or Resend). When you download and use our templates, your data flow to those providers is governed directly by their terms and privacy policies.

We use session cookies and local storage to keep you signed in, preserve items in your shopping cart, monitor download performance, and prevent abuse. You can control cookies through browser settings, but disabling essential cookies will prevent authentication.

We keep data only as long as reasonably necessary for service delivery, tax record audit, and legal compliance. Account and billing metadata are retained for up to 7 years for tax compliance; customer template files are retained until account termination.

We use administrative, technical, and organizational controls designed to protect personal data. No internet transmission or storage method is fully secure, so we cannot guarantee absolute security of your assets.

Our storage and delivery providers process information in multiple countries. Where required by law, we enforce transfer safeguards such as contractual clauses and recognized security mechanisms.

Depending on location, you may have rights to access, correct, delete, or restrict certain uses of your personal data.

To submit a request, email hello@boilershelf.com from your account email. We may verify identity before acting on sensitive requests.

Residents of certain U.S. states have additional rights to know, correct, and delete. BoilerShelf does not sell personal information for monetary value. If state laws grant you specific rights, contact us to process requests.

EEA/UK users have the right to lodge a complaint with their local supervisory authority. We encourage you to contact us first so we can resolve any concern directly.

Our templates and developer services are not directed to children under 13. We do not knowingly collect personal data from children.

We may update this policy periodically. Material updates will be reflected by revising the "Last updated" date on this page.

For privacy requests, licensing options, or data rights questions, contact hello@boilershelf.com.