Privacy Policy

Version 1.5 - Updated September 6, 2026

Local-first by default

Boollm is a Windows desktop AI workspace developed by saz3 Labs. Local chats, notes, project files, browser state, settings, screenshots, model files, response feedback, and project-learning records stay on your Windows PC when you use local features. Boollm does not include telemetry, advertising analytics, tracking, or automatic crash reporting.

Information stored on your computer

Boollm stores conversations, settings, provider and connector credentials, model files, task plans and checkpoints, schedules, generated files, optional email OAuth tokens, and optional local learning or Education records under your Windows user profile. API responses expose only whether a secret is present, not its value. You can clear chats and learning records, disconnect accounts and connectors, disable project learning, sign out, or uninstall Boollm using the controls provided in the app and Windows.

Optional account and administrator sync

Boollm can be used without a Boollm account. If you choose Google Sign-In, the Boollm account service receives the account identifier, email address, display name, profile image, and session information needed to provide sign-in. Signed-in Boollm administrators may synchronize notepad content, safe interface preferences, and an encrypted credential-vault backup. Credential payloads are protected with AES-GCM before database storage. Signing out stops synchronization without deleting local data.

When information leaves your computer

Information leaves your PC only when you choose a network feature. Examples include cloud AI providers, account sign-in, model downloads, web browsing and research, image generation, remote MCP or HTTP-agent connections, API connectors, scheduled webhooks, installation helpers, email connectors, or asking an online provider to inspect a screenshot, page, note, project file, or selected email. Boollm sends the task content and credentials needed for the selected operation. The destination service's terms, retention practices, charges, and privacy policy apply.

Optional Gmail and Outlook connectors send OAuth and mail requests directly between your PC and Google or Microsoft. Draft-only mode disables sending; otherwise sending is subject to the approval controls configured in Boollm. If you ask a local model to work with mail, inference stays on your PC. If you select Codex, another cloud AI provider, or a remote connector, relevant mail content, instructions, and generated context may be sent to that service. Transactional account, security, support, or service messages may be delivered using Cloudflare Email Service.

Google-connected features

Google account sign-in, Gmail, and Google Cloud developer connections are separate optional features. Connecting one does not automatically connect the others. For Gmail, Boollm may request the identity scopes displayed by Google and the gmail.modify scope. This can allow Boollm, at your direction, to identify the mailbox; list, search, and read messages and metadata; create and send drafts; manage labels; and move messages to or restore messages from Trash. Review the exact permissions on Google's consent screen before authorizing.

Boollm uses Google user data to provide the Google-connected feature and AI-assisted task you request. Boollm does not sell Google user data, build advertising profiles from it, or itself use Gmail content to train a general-purpose AI model. When you deliberately use a cloud model or remote connector for a Gmail task, that selected third party receives the content needed for the task, and its privacy, retention, account, and model-training terms apply. Review those terms before proceeding with sensitive mail.

You may disconnect Gmail in Boollm and revoke Boollm's access in your Google Account settings. Disconnecting or revoking access stops future mailbox access but does not automatically delete local chats, drafts, task results, backups, or content already sent to a provider or recipient. Remove those separately using Boollm, Windows, Google, or the destination service's controls.

Use of Google-connected features is subject to Google's applicable terms, policies, permissions, quotas, and enforcement. You are responsible for using your Google account and data lawfully and with appropriate authority. Google may restrict, revoke, suspend, or otherwise take action concerning an account, OAuth grant, API project, or integration under its terms and policies. User consent does not waive Boollm's separate obligations as the application developer. See Google's Terms of Service and the Google API Services User Data Policy.

Software and model downloads

Microsoft Store installations receive application updates through Microsoft Store and do not use Boollm's GitHub installer updater. Direct-download editions may check the saz3 Labs GitHub release service, download an approved installer, verify its SHA-256 hash, and offer installation after Boollm closes. Update checks do not upload chats, files, notes, credentials, or models. Downloading a model contacts the model host, such as Hugging Face; importing a local model contacts nothing.

AI output, feedback, and reports

AI output may be inaccurate or inappropriate. Optional thumbs-up/down feedback and correction notes stay on your PC and may be reused as local prompt context; they do not retrain the underlying model. The Report inappropriate AI content control opens an email draft addressed to saz3 Labs containing the concern you enter, provider/model labels, and a short excerpt of the selected response. Nothing is transmitted until you review and send the email. Do not include passwords, API keys, private files, or other secrets. See the AI content reporting page for details.

Security and your choices

Boollm uses HTTPS for supported online services and encrypts the administrator credential-vault payload before storage. You decide which providers, connectors, accounts, schedules, files, and approval modes to enable. Protect your Windows account and local Boollm configuration like a password. Review provider permissions and generated actions, and revoke third-party access with the applicable provider when it is no longer needed.

Children, retention, and changes

Boollm is a developer and productivity tool and is not directed at children under 13. Local information remains until you remove it or uninstall the app. Third-party and account-service retention depends on the enabled service and applicable law. This policy will be updated when Boollm's data practices materially change; the current version is published here and included with the software.

Contact

Questions, privacy requests, and AI content reports may be sent to [email protected].