Privacy

Last updated 10/10/2026

Who we are

BosOn is a trading name of EAanalytics Ltd, a company registered in England and Wales (company number 08006715). EAanalytics Ltd makes BosOn and decides how the personal information described here is used, so under UK data protection law we are its controller. You can reach us about anything on this page at hello@getboson.app.

The short version

On this website we only collect what you type into the early-access form or the beta application. In the BosOn app, everything you make and everything it reads from the services you connect stays on your own computer: we don't receive your library, your prompts, your pictures or your results. We don't sell anyone's information, and this website has no analytics, advertising or tracking.

What we collect on this website

When you join the early-access list: your name, your email address and your answers to the four questions (what you make, which tools you pay for, the other tools you use and, if you say, roughly what you spend). We also keep your place on the list, your referral code, who invited you if anyone did, how many people joined with your code, and when you signed up.

When you apply for the beta: your name, your email address and your answers: the computers you work on (with the Windows version, or your Mac's chip and macOS version), the AI platforms you use, what you make and roughly how much, where your work goes out, whether you can do a check-in each week and, if you add them, a link to your work and what you find hardest about keeping track of it. We count applications from each internet address for one day, then forget the address.

To stop the referral system being gamed: we count sign-ups from each internet address for one day, then forget the address.

When you visit: like every website, our host's servers see your internet address and browser details when they send you a page. Vercel keeps these in short-lived logs to run the site and protect it from abuse. We don't use them to identify you.

We don't use cookies. What the site keeps in your browser is explained on our cookies page.

Why we use it, and on what basis

To put you on the list and keep you posted: we email you your place and your referral code, and we'll email you when your early-access place is ready. We do this because you asked us to (your consent, which you can withdraw at any time).

To understand who BosOn is for: your answers help us decide what to build and how to price it. This is in our legitimate interests, and we only look at them ourselves.

To run the referral system fairly: when someone joins with your code, we email you to say so and tell you your new place. We never tell them, or you, the other person's name or email. The one-day count of sign-ups per internet address stops people inventing sign-ups. Both are in our legitimate interests.

To pick the beta: we read your application to choose a mix of creators, computers and tools, and email you about it. We do this because you asked to be considered (your consent, which you can withdraw at any time).

We never sell your information, share it for anyone else's marketing, or use it to train AI.

The BosOn app and your own accounts

BosOn is a desktop app for Windows and Mac. Your library, the pictures and videos you make, your prompts and the results BosOn reads are kept on your own computer. The keys BosOn uses to reach the services you connect are stored encrypted there, with Windows' own protection or the macOS Keychain. When you make something with an AI service (such as Higgsfield, Gemini, OpenAI or Claude), BosOn sends your request straight from your computer to that service, under your own account and that service's own terms and privacy policy. It doesn't pass through us.

The BosOn app and your Meta accounts

If you connect your Facebook and Instagram accounts to BosOn, it uses Meta's permissions to read your ad accounts, Pages and Instagram accounts and how your ads and posts are doing, and, only when you ask it to, to upload your pictures and videos, create ads (paused unless you choose to make them live) and publish posts and comments. Everything it reads is kept in your library on your own computer, and the key it uses is stored encrypted there. We don't receive, sell or share that data, and we don't use it for advertising or to train AI.

When you sign in with Meta, the sign-in comes back through getboson.app, because swapping Meta's one-time code for a key needs a secret that can't be kept inside an app. The key is held in Upstash for at most five minutes, deleted as soon as BosOn on your computer collects it, and never logged. How to remove BosOn from your accounts and delete what it saved is on our data deletion page.

The BosOn app and YouTube

BosOn uses YouTube API Services. If you connect your YouTube channel, you're also agreeing to the YouTube Terms of Service, and Google handles your information under the Google Privacy Policy.

What BosOn does: only when you choose a video and press Post with YouTube ticked, it uploads that video to your own channel with the title, description, tags and privacy setting (Public, Unlisted or Private) you chose. It never uploads anything you haven't chosen.

What it reads: your channel's ID, name and picture, to show which channel it will post to; and, for the videos BosOn posted, their privacy status and their view, like and comment counts, to show beside each post in BosOn. It reads nothing else from your account.

Where it's kept: on your own computer, in your BosOn library, for as long as the post is in your library. The keys that let BosOn reach YouTube for you are stored encrypted there (with Windows' own protection, or the macOS Keychain). After posting, BosOn refreshes a video's numbers at most every hour for the first week, then once a day, for 30 days. We don't receive any of it on our servers, and it is never sold, shared, or used for advertising or to train AI.

Signing in: the sign-in comes back through getboson.app, because swapping Google's one-time code for keys needs a secret that can't be kept inside an app. The keys are held in Upstash for at most five minutes and deleted as soon as BosOn on your computer collects them. When BosOn renews its key, the request passes through getboson.app for the same reason, and nothing from it is kept. Keys are never logged.

Removing access: in BosOn, Connections, YouTube, Disconnect deletes the keys from your computer and revokes them with Google. You can also remove BosOn's access at any time in your Google Account's security settings. How to delete what BosOn saved is on our data deletion page.

BosOn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The BosOn app and TikTok

If you connect your TikTok account, TikTok handles your information under its own privacy policy.

What BosOn does: only when you choose a video and press Post with TikTok ticked, it sends that video to your TikTok account, either to your TikTok inbox as a draft for you to finish in the TikTok app, or posted with the caption, who can see it, the comment, Duet and Stitch settings, the commercial content disclosure and the AI-generated content label you chose. It never posts anything you haven't chosen.

What it reads: your account's open ID, display name, username and profile picture, to show which account it will post to, and the posting options TikTok allows for your account. It reads nothing else.

Where it's kept: on your own computer, in your BosOn library. The keys are stored encrypted there. We don't receive any of it on our servers, and it is never sold, shared, or used for advertising or to train AI.

Signing in: as with YouTube, the sign-in comes back through getboson.app and the keys are held in Upstash for at most five minutes. Renewing BosOn's key and disconnecting also pass through getboson.app, because both need a secret that can't be kept inside an app; nothing from either is kept. Keys are never logged.

Removing access: in BosOn, Connections, TikTok, Disconnect deletes the keys from your computer and revokes them with TikTok. You can also remove BosOn in the TikTok app: Settings and privacy, Security and permissions, Apps and services permissions.

Reports you send from the app

If something goes wrong, Help, Send a report in BosOn sends us what you write, your email address if you give it so we can reply, which version of BosOn you have, your computer's system (for example Windows 11), and the end of BosOn's own log, which records what the app did and any errors. BosOn takes keys, tokens and passwords out of the log before it sends it. The log can include the names of files and folders in your library, but never the pictures, videos or files themselves. Nothing is sent unless you press Send report. The report comes to us by email, and we use it only to find and fix the problem.

Downloading the app

The download page asks for the code from your early-access email. We check it against the early-access list to see whether we've let you in yet, and count the tries from each internet address for an hour to stop guessing. The installer then comes from Cloudflare, whose servers see your internet address and browser details when they send it, as with any download. The app's update check sends us only which version of BosOn you have, nothing about you.

Signing in to BosOn

To use BosOn's paid features, you sign in inside the app with your email. We email you a six-digit code, which works for ten minutes and is then deleted. For each computer you sign in on, we keep the name your computer gives itself (such as DESKTOP-4F2A), a random ID BosOn made when it was installed, when it was added and when it last checked in, so you can use BosOn on two computers and replace one when you change. BosOn checks in when it opens and once a day; it sends only that ID, its key, and which version of our licence agreement you agreed to on that computer, nothing about what's in your library. We keep that version and when it was last seen, so we can show the agreement was accepted. We keep a fingerprint of each computer's key, never the key itself.

Who handles it for us

These companies process information for us, only on our instructions and only for the purposes above:

Some of these companies are based in the United States. Where your information leaves the UK, it is protected by the safeguards UK law requires, such as the UK and US data bridge or the standard data protection clauses approved for the UK.

How long we keep it

Your early-access sign-up: until early access ends, or sooner if you ask us to delete it. A beta application: until the beta is over, or sooner if you ask us to delete it. The count of sign-ups per internet address: one day. A Meta, YouTube or TikTok sign-in passing through: at most five minutes. A YouTube or TikTok key being renewed, or a TikTok disconnection, passing through: not kept at all. A report from the app: until the problem it describes is fixed, and no longer than 12 months. The count of reports, and of download tries, per internet address: one hour. A sign-in code: ten minutes. The computers you've signed in on: while they're on your account (signing out of BosOn on a computer, or replacing it, removes it at once). Emails between us: as long as we need them to help you, and no longer.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to limit how we use it, to object to how we use it, or to have it in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. Email hello@getboson.app and we'll reply within one month. It's free.

If you're not happy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

BosOn is made for people creating content for their work, not for children. If you think a child has given us their details, email us and we'll delete them.

Changes to this policy

If what we collect or how we use it changes, we'll update this page first and change the date at the top. If a change matters to you, we'll tell you by email before it applies.