Privacy Policy for BoltGrab 2.0

BoltGrab 2.0 is a desktop download manager application that includes browser extensions for Chrome, Edge, Firefox, Brave, Opera, and upcoming Safari support. This Privacy Policy explains what data may be processed when you use the BoltGrab 2.0 desktop application, its browser extensions, our website, and related services.

By using BoltGrab 2.0, you agree to the practices described in this policy. If you do not agree, please discontinue use of the software and extensions.

The following types of data may be processed solely to deliver the core functionality of BoltGrab 2.0:

• Page URLs and link targets you explicitly choose to send from the browser extension to the desktop app
• Media and downloadable resource URLs detected on supported pages when you invoke detection
• Request metadata required for local handoff — such as HTTP referrer headers — needed to authenticate download requests
• Session cookies, only when explicitly needed to complete a browser-to-desktop file transfer you have initiated
• Extension settings stored locally in your browser, such as the local bridge endpoint address and feature preferences
• Contact information (name and email) provided when purchasing a license or submitting a support request

Data processed by BoltGrab is used exclusively for the following purposes:

• To transfer requested pages, direct links, and supported media from your browser to the BoltGrab 2.0 desktop application via the local bridge
• To authenticate and complete download requests on servers that require referrer or session data
• To store your extension configuration preferences so they persist across browser sessions
• To process and fulfil license purchases and deliver license keys via email
• To respond to support requests and troubleshoot technical issues you report
• To maintain and improve the reliability, performance, and compatibility of the software

BoltGrab takes your data privacy seriously. We do not sell, rent, or trade your personal data to any third parties.

We may share limited data only in these circumstances:

• Payment Processing: When you purchase a license, payment is handled by PayPal. We receive confirmation of payment and the associated email address. We do not store credit card numbers.
• Legal Requirements: We may disclose data if required by applicable law, court order, or government authority, to the extent permitted and required by law.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify users via email if this occurs.

We retain data only for as long as necessary to fulfil the purposes outlined in this policy:

• Extension settings are stored locally in your browser and remain until you remove the extension or clear its storage.
• License records are retained for the duration of the license period plus a reasonable period thereafter for accounting and legal compliance.
• Support correspondence (emails) may be retained for up to 2 years for operational purposes.
• Download session data processed locally by the app is not sent to our servers and is managed entirely on your device.

You may request deletion of any personal data we hold about you at any time by contacting us (see Section 8).

We implement industry-standard security measures to protect your data:

• The local bridge server listens only on 127.0.0.1 (localhost) and is not accessible from external networks
• HTTPS is used for all web-facing services, including our website and license delivery
• Payment processing is delegated entirely to PayPal — we do not handle raw payment card data
• Software updates are digitally signed to prevent tampering

You have full control over your data and the following rights:

• Remove the extension at any time through your browser's extension manager. All locally stored settings will be cleared.
• Request a copy of any personal data we hold about you (e.g. license records, support emails).
• Request deletion of your personal data from our systems, where applicable and not restricted by legal obligations.
• Correct inaccurate data — if you believe we hold incorrect information, contact us to have it corrected.
• Opt out — if you do not agree with any part of this policy, you may stop using BoltGrab 2.0 and uninstall the software and extensions at any time.

For GDPR requests (EU/EEA residents) or CCPA requests (California residents), please contact us at privacy@boltgrab.com and we will respond within 30 days.

For any privacy-related questions, data requests, or concerns about this policy, please reach out to us:

We aim to respond to all privacy requests within 30 days. For urgent matters, please include "URGENT" in the subject line.