Privacy & Security

Privacy Policy

This Privacy Policy (the "Privacy Policy" or "Policy") describes the types of information Booth Software Limited and its affiliates ("booth," "we," "our," or "us") collect and process from and about you when you use our social media platform and related services.

Your privacy matters to us. This policy explains what information we collect, how we use it, and the choices you have regarding your personal data.

Company:
Booth Software Limited
Address:
71-75 Shelton Street
Covent Garden, London
United Kingdom, WC2H 9JQ
Effective Date:
September 22, 2025
Privacy Contact:
support@booth.boo

Information We Collect

Account & Profile Information

  • • Full name, email address, username, and password (encrypted)
  • • Profile picture, bio, location, and other profile details you choose to share
  • • Account settings, privacy preferences, and notification choices
  • • Authentication data including login timestamps and device sessions

Content & Social Activity

  • • Posts, comments, reactions (likes, shares), and direct messages
  • • Media uploads (photos, videos) including metadata and AI analysis results
  • • Hashtags, mentions, and links you share or interact with
  • • Following/follower relationships, blocked and muted users
  • • Saved posts, bookmarks, and personalized lists

Usage & Interaction Data

  • • Features used, pages visited, time spent on platform
  • • Search queries, feed interactions, and content preferences
  • • Click patterns, scroll behavior for content recommendation algorithms
  • • Real-time messaging activity and typing indicators
  • • Report submissions and content moderation interactions

Technical & Device Information

  • • IP address, browser type and version, operating system
  • • Device identifiers, screen resolution, and hardware specifications
  • • Network information, connection speed, and ISP details
  • • Session data, cookies, and local storage information
  • • Crash reports, error logs, and performance analytics

Analytics & Third-Party Data

  • • Google Analytics data (with consent) for platform optimization
  • • Pusher connection metadata for real-time messaging delivery
  • • Stripe payment identifiers (no financial data stored)
  • • AI service interactions for content moderation and assistance
  • • Location data (only if explicitly enabled by user)

How We Use Information

Platform Operation & Service Delivery

  • • Create and maintain your account, authenticate logins
  • • Display your posts, comments, and profile to other users
  • • Enable real-time messaging and notifications
  • • Process follows, likes, shares, and other social interactions
  • • Provide customer support and respond to your inquiries

Personalization & Recommendations

  • • Curate your personalized feed based on interests and interactions
  • • Suggest users to follow and content you might like
  • • Recommend hashtags, trending topics, and popular posts
  • • Customize notification frequency and types
  • • Remember your preferences and settings across sessions

Safety, Security & Content Moderation

  • • Detect and prevent spam, harassment, and abusive behavior
  • • Automatically moderate NSFW content using AI analysis
  • • Investigate reports and enforce community guidelines
  • • Prevent fraud, unauthorized access, and security threats
  • • Monitor for suspicious activity and bot accounts

Communication & Marketing

  • • Send transactional emails (password resets, notifications)
  • • Share platform updates, new features, and policy changes
  • • Deliver marketing communications (with opt-out option)
  • • Conduct user surveys and gather feedback
  • • Provide customer support via email or in-app messaging

Analytics & Platform Improvement

  • • Analyze user behavior to improve platform performance
  • • Generate insights about feature usage and engagement
  • • Monitor system reliability, load times, and error rates
  • • Research trends to develop new features and improvements
  • • Comply with legal obligations and regulatory requirements

Sharing & Disclosure

We do not sell your personal data. Limited sharing may occur with trusted service providers (hosting, analytics, Stripe) bound by confidentiality. We may disclose information if legally required or to protect our rights and users.

Data Retention

Account data: Until deletion requested or account inactive for 3 years

Posts and content: Until user deletes or account closure

Analytics data: 26 months (Google Analytics standard)

Server logs: 90 days for security and debugging purposes

Your Rights

Access, correct, or delete personal data

Export your data

Object to or restrict certain processing

Withdraw consent where processing is based on consent

To exercise your rights:

• Email support@booth.boo with your request

• Use your account Settings for data export/deletion

• We respond within 30 days

• You can lodge complaints with your local data protection authority

Cookies

Cookies are used to keep you signed in, remember preferences, and analyze traffic. Consent is requested from non-authenticated users. Manage cookies via your browser or consent banner.

Security

We implement encryption, secure servers, and backups to protect your information. No system is entirely foolproof, but we continuously improve safeguards.

Payments

Payments are processed via Stripe. Only Stripe-related identifiers are stored, no financial data. No refunds unless legally required.

International Transfers

Data may be processed outside your country. Where required, appropriate safeguards are used for cross-border transfers.

Children's Privacy

booth is not directed to children under 13 (or local age of consent). We may ask for age verification and will immediately delete accounts of users under 13 upon discovery. Contact us to remove data if collected from a child.

Data Breaches

In the unlikely event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovering the breach and report to relevant authorities as required by law.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United Kingdom. Any disputes relating to this policy will be resolved in the courts of the United Kingdom.

Real-time Messaging

We use Pusher to deliver real-time messaging in our platform. While your messages are stored on our servers, Pusher handles the live delivery of message content and connection metadata (such as your session and IP address) to enable instant updates. For information on how Pusher handles data, please see Pusher's Privacy Policy.

Content Moderation

We use Google products to automatically detect and moderate NSFW content in public posts. Images are analyzed to determine if they contain inappropriate content, and may be blurred or flagged accordingly. This processing helps maintain a safe environment for all users.

AI Assistance

When users request AI assistance in threads, we may share thread content and comments with our AI service provider to provide relevant responses. This includes post content, comments, and usernames. Other participants' content may be included in the context shared with the AI service.

Changes to This Policy

We may update this policy. Updated versions are posted here with the revised "Last updated" date.

Contact

Have questions about our privacy practices? We're here to help.