boinky.ai Terms of Use

Privacy Policy

Last updated: August 24, 2026

Who we are

Boinky is an AI teammate that works inside the chat platforms your organisation already uses. Boinky is built and operated by Highstack (highstack.co). In this policy, "Boinky", "we", "us" and "our" refer to Highstack as the operator of the Boinky service.

Boinky is provided to organisations, not to individual consumers. Where Boinky is installed into a workspace by a company, that company is generally the controller of the data processed through the service and Highstack acts as its processor. This policy explains what we handle, why, and what choices you and your organisation have.

What data we process

We process the minimum data needed to receive a message, understand it, and reply. That includes:

We do not ask for, and do not want, payment card numbers, government identity numbers or health records. Please do not send them to Boinky.

How we use it

We use the data above to:

We do not sell personal data, and we do not use the content of your messages for advertising or profiling.

AI processing

Boinky generates its replies using large language models provided by a third-party AI service provider. To produce a response, the content of the message — together with the relevant recent conversation context and any file you shared with Boinky — is transmitted to that provider over an encrypted connection and processed there.

We do not use your message content to train our own models, and we do not permit our AI provider to use content submitted through our API access to train its models. Responses are generated by an automated system and may be inaccurate; see our Terms of Use for what that means for how you should rely on them.

Third parties and subprocessors

We rely on a small number of providers to deliver the service. Each one receives only what it needs to perform its function:

We may also disclose data where we are legally required to do so, or where it is necessary to protect the rights, safety or property of Highstack, our customers or the public. If Highstack is involved in a merger, acquisition or asset sale, data may transfer as part of that transaction, subject to this policy.

Data retention

We retain conversation data only for as long as we need it to operate the service — principally to maintain conversational context, to support the customer, and to keep short-lived operational logs for security and debugging. Data that is no longer needed for those purposes is deleted or anonymised.

A customer organisation may ask us to delete the data associated with its workspace at any time by emailing support@boinky.ai. We will action such a request within a reasonable period, except where we are required to retain specific records by law. When a workspace is disconnected or the service is terminated, the associated conversation data is deleted.

Security

Data is encrypted in transit using TLS between the chat platform, our service and our providers. Access to production systems and customer data is restricted to the small number of Highstack personnel who need it to run the service, is protected by strong authentication, and is logged. Credentials and platform tokens are stored as secrets rather than in application code. No system is perfectly secure, but we take these controls seriously and review them as the service grows.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive a copy of it in a portable form. To exercise any of these rights, contact us at support@boinky.ai.

Because Boinky is installed and controlled by your employer or the organisation that runs the workspace, we may need to refer your request to that organisation, or ask you to raise it with them first. We will tell you if that is the case. You also have the right to complain to your local data protection authority.

Children

Boinky is a workplace tool. It is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, contact support@boinky.ai and we will delete it.

International transfers

Our providers operate infrastructure in several countries, which means your data may be processed outside the country where you are located. Where such a transfer takes place, we rely on appropriate safeguards — such as standard contractual clauses — offered by the provider concerned.

Changes to this policy

We may update this policy as the service changes or as the law requires. When we do, we will revise the "Last updated" date at the top of this page. If a change materially affects how we handle personal data, we will make reasonable efforts to notify customer organisations directly. Continued use of Boinky after a change takes effect means you accept the updated policy.

Contact

Questions, requests or complaints about privacy can be sent to support@boinky.ai and we will respond as quickly as we can.