Privacy Notice

1. Finder and market

The AI Finder uses the answers you enter to compute recommendations. If you optionally describe a concrete recurring workflow and keep private saving enabled, PriceBolt requires you to confirm that personal data, credentials, secrets and confidential third-party information have been removed before that free-text workflow is stored. The recommendation still works if you do not confirm storage. Finder answers and privately saved workflows are not automatically treated as external workflow-training, evaluation or licensing data. Product/catalog requests and normal hosting logs may still be processed to operate, secure and improve the service.

2. Workflow intake and workflow test

The buyer-facing workflow intake lets you type, dictate or attach a redacted example before PriceBolt structures the workflow and prepares a test. When you use Dictate, your browser records a short audio clip and sends it to a PriceBolt server endpoint for transcription with Google Gemini 3.5 Transcribe through Vercel AI Gateway. PriceBolt uses the raw dictation audio only for that transcription request and does not intentionally retain it after the request completes; the returned transcript is added to your editable workflow description. Vercel and Google may process the audio to provide the transcription service under their applicable terms and privacy policies. Do not dictate personal data, credentials, secrets or confidential third-party information. PDF, DOCX and text-like buyer uploads are sent to PriceBolt only long enough to extract readable text for that request; this buyer-intake endpoint does not store the raw file. Extracted text is then treated as part of the workflow description.

The workflow test may send the redacted workflow description to configured AI providers through Vercel AI Gateway to structure the work, suggest editable answers when you request them, generate synthetic cases, evaluate candidate-model responses and independently audit expected answers. PriceBolt labels AI-proposed workflow rules separately from details you entered yourself.

3. Workflow tests, managed-agent tests, controlled pilots and private history

Enabled workflow tests may send a redacted workflow description to Vercel AI Gateway for server-side structuring and may send PriceBolt-generated synthetic cases to the model provider or providers named in the test. PriceBolt may retain the audited synthetic test suite, including private expected answers, so later tool and commercial-host tests can be graded without revealing those answers to the candidate AI. When private workflow saving is enabled, PriceBolt may store the redacted workflow, workflow structure, evidence runs, technical results, automation decision, human-review information and economic baseline in your private PriceBolt workflow history.

If you explicitly choose Build & test agent, PriceBolt may create a temporary managed-agent session with OpenAI's Agents API using your redacted workflow specification and PriceBolt-generated synthetic test cases. The managed agent is connected only to PriceBolt's controlled synthetic MCP test environment for this feature: it is not given access to your real email, CRM, accounting system, payments, customer records or other production systems. Private gold expected answers remain on PriceBolt's server and are not supplied to the candidate agent. PriceBolt may retain the tested agent configuration, blueprint hash, provider session identifier, tool-event summary, token/runtime metadata and resulting evidence so the score can be traced to the exact tested configuration. This managed-agent test is evidence about the synthetic controlled environment, not permission or proof for production writes.

Anonymous browser-linked private workspaces currently expire after 365 days without activity. If a private workspace is claimed to an account, its saved workflow history is retained until you delete it or the account/workspace is otherwise removed, subject to any limited retention required for security, legal or transactional records. You can delete individual saved workflows or clear the browser-linked workspace from the product.

For an optional controlled real-work pilot, you add individual real business cases only after confirming that names, personal data, credentials, secrets and confidential third-party information have been removed. PriceBolt stores that redacted case text privately for the pilot, together with the directly captured commercial-AI recommendation, observed host signal, your human final decision, correction/approval status, review-time information, critical-override flag and optional business-outcome note. The candidate AI does not receive the human reference/final decision through the PriceBolt pilot connector. Controlled live-pilot sessions currently expire after 30 days unless their containing private workspace is deleted earlier; the related pilot cases are deleted with the session. Durable workflow evidence records may retain summarized results needed to show what was established without retaining the temporary capability URL.

PriceBolt's controlled real-work pilot does not itself execute production-system writes. A self-reported implementation outcome remains private service history and is not L5 controlled-pilot evidence. Private workflow history, audited suites, pilot data and evidence records do not grant contribution, training, external evaluation or licensing rights.

4. Separation from contribution/reuse rights

Private workflow memory exists to provide the PriceBolt service. PriceBolt does not use that storage choice as permission to license the workflow or provide it to third parties for model training/evaluation. Broader use requires a separate contribution action and the permissions described below.

5. Price contributions

If you voluntarily use Price Check, PriceBolt stores the product name, seat count, monthly spend and optional business context you submit. We do not ask for prompts, customer files or conversations in that flow.

6. Workflow contributions

A workflow contribution can contain business context, workflow steps, tools, judgment points, success criteria, optional contact email and an optional voice/file example. Do not submit customer, employee or other personal data. PriceBolt does not treat pseudonymisation as equivalent to anonymisation.

7. Raw material vs derived workflow packet

Raw recordings/files and the structured workflow packet are separate assets. Raw material is private by default and is not externally licensed unless you explicitly opt in to consideration under a separate buyer agreement. New raw assets are currently scheduled for deletion after 90 days. The derived packet remains until deleted or otherwise no longer needed.

8. Your permission choices

You can keep a derived task PriceBolt-private, make it evaluation-eligible, or make it training-and-evaluation-eligible. Eligibility is not a license or sale. Any third-party licensing requires a separate opportunity/agreement.

9. Withdrawal and deletion

Every new workflow contribution receives a private management link. Withdrawal disables future external matching and returns the derived-use scope to PriceBolt-private. Deletion removes the contribution and retained raw assets unless a completed license record requires separate review. A minimal deletion receipt may be retained without workflow content.

10. Retention and minimisation

PriceBolt aims to collect only what is needed for the stated workflow/evaluation purpose and uses explicit retention controls for temporary material. Buyer-intake raw dictation audio and raw attached files are not intentionally retained after their request completes. Temporary commercial-host connectors expire after 24 hours. Controlled real-work pilot sessions and their redacted cases currently expire after 30 days. Anonymous private workflow workspaces currently expire after 365 days without activity; claimed private workflow history is retained until the user deletes it or the account/workspace is removed, subject to limited security, legal or transactional retention where applicable. Deleting a saved workflow removes its related private evidence/suite/pilot records through the service's database relationships. Contribution raw-material retention is described separately above. The European Commission describes data minimisation, purpose limitation and storage limitation as core GDPR principles.

11. Service providers and international processing

PriceBolt currently uses Vercel for web hosting/deployment and AI Gateway routing, DeepSeek through Vercel AI Gateway for fast redacted workflow preparation, Google and Anthropic as available independent workflow-audit providers, Google for Gemini-powered dictation transcription, OpenAI for enabled workflow evaluation and for managed-agent tests that you explicitly start, and Supabase for database/storage infrastructure. Managed-agent tests use OpenAI's Agents API only within the synthetic PriceBolt test boundary described above unless the product explicitly introduces and discloses a different mode later. Additional configured model providers may be used as fallbacks when the product identifies them in a test result. Processing locations and subprocessors may change; cross-border processing must be handled under applicable data-protection rules.

12. Result emails and optional updates

If you ask PriceBolt to email a result, the email address is used to deliver that transactional result. It is not added to marketing automatically. You can also ask PriceBolt to email a one-time, expiring workspace claim link so the same private workflow workspace can be opened on another device; that address is used to deliver the requested access link and does not itself create marketing consent. If you separately opt in to occasional PriceBolt product updates, PriceBolt stores your email address, consent text, source and subscription status so those updates can be sent and your preference can be honored. You can withdraw that consent at any time by contacting info@kinvectum.com or through the privacy request form.

13. Requests and contact

Email info@kinvectum.com or use the privacy request form for access, correction, withdrawal, deletion or other privacy questions. Contributors with a private management link can perform immediate self-service actions there.