Bolt
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- Staff may review your content; the policy does not describe an opt-out.
Bolt can train on your prompts by default, sell datasets, auto-renew with no refunds.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and purchase info, plus logs, device IDs, cookies, and general location from your IP.
Read the exact line
Privacy policy
“We may collect information about the device you use to interact with the Services, such as the name of the device, the device’s unique identifiers (e.g., IDFA or Android ID), and its operating system.”
Training
They run the shop, market to you, and by default may train AI on Bolt prompts unless you opt out.
Read the exact line
Terms of service
“Unless and until you opt out as described in Section 3.5(c), and subject to Sections 3.5(d)-(f), you grant Stackblitz a worldwide, non-exclusive, , , and transferable license”
Sharing
Vendors, affiliates, ad partners, and (if you don’t opt out) parties who license AI datasets.
Read the exact line
Privacy policy
“We may also provide personal information to third-party advertising providers for targeted advertising purposes, so we can provide you with more relevant and tailored ads regarding our services.”
Kept
They keep data as long as they need it for those purposes; no clear in-app delete timer.
Read the exact line
Privacy policy
“We keep your Personal Information for the time necessary for the purposes for which it is processed.”
Controls
You can email for access or deletion, opt out of training in settings, and use ad opt-out links.
Read the exact line
Terms of service
“you may opt out of the uses described in Sections 3.5(a) and 3.5(b) at any time, free of charge and regardless of your plan, through your account settings or by contacting privacy@stackblitz.com.”
Fine print
Subscriptions auto-renew with no refunds.
Read the exact line
Terms of service
“Paid subscriptions renew automatically for successive billing periods until cancelled.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off Bolt model training and dataset licensing
Account settings, or email privacy@stackblitz.com
Cancel auto-renew in account settings
Account settings; cancellation takes effect at the end of the current billing period
or sale/share opt-out
contact@support.shop.bolt.new or privacy@stackblitz.com; shop also lists 1-833-484-9255
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Unless you turn it off, they can use your Bolt prompts, outputs, and related project files to train their AI.
Read the exact line
Terms of service
“you grant Stackblitz a worldwide, non-exclusive, , , and transferable license to use, reproduce, process, adapt, modify, and create derivative works of your Bolt Model Development Content”
For example, a private app you build in Bolt could be used to improve their models after September 2026.
They can also turn eligible Bolt content into datasets and license those datasets to other companies, including for money.
Read the exact line
Terms of service
“you grant Stackblitz a worldwide, non-exclusive, , , and transferable license to prepare, market, license, and distribute datasets derived from Bolt Model Development Content”
For example, snippets from your projects could end up in a paid training dataset sold to another AI lab.
If you cancel mid-month or unused tokens sit unused, you generally do not get money back.
Read the exact line
Terms of service
“Except as required by applicable law, fees are non-refundable, and no refunds or credits are provided for partial billing periods, unused or expired tokens, or downgrades.”
For example, buying extra tokens and then not using them still costs the full amount.
They can shut off your account for any reason or no reason, with or without warning.
Read the exact line
Terms of service
“We also reserve the right to reject, refuse to post, or remove any material that you post or submit for posting on the Sites, and to restrict, suspend, or terminate your access to our Sites or Services at any time, for any reason”
For example, your hosted Bolt app could go offline without a heads-up if they decide to terminate access.
If they get sued because of how you used the service, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to , and Stackblitz, its successors and assigns, and other third parties who contribute to the Sites from any loss, damage, or cost (including attorneys’ fees) resulting from your violation of the Terms.”
For example, if generated code you shipped infringes someone else, they can ask you to cover their lawyers.
The basic license to run the product is not itself a training license; training is a separate opt-out grant.
Read the exact line
Terms of service
“The license in this Section 3.2 does not authorize Stackblitz to use User Content to train, fine-tune, improve, or benchmark artificial-intelligence models”
For example, hosting your files to run the editor is separate from using them to train models.
If they treat your account as in the EEA, UK, or Switzerland, they say they will not use that content for training or dataset licensing.
Read the exact line
Terms of service
“Stackblitz does not use Bolt Model Development Content associated with a Restricted Region Account, including Forge Content, for the purposes described in Section 3.5(a) or Section 3.5(b).”
For example, a user billed in Germany should not have Bolt chats used to train models under these terms.
On the shop side, California-style sale/sharing of data for ads can be turned off by email.
Read the exact line
Privacy policy
“To opt out of our disclosure of your personal information for purposes that could be considered “sales” or “sharing,” please send the request via email to contact@support.shop.bolt.new.”
For example, email that address if you do not want identifiers sent to advertising partners.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
How we got here · grade C · score 42/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
Besides account and purchase details, they collect logs, usage, device IDs, cookies, and location inferred from IP.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Bolt model-development use is on unless you opt out in account settings or by email; EEA/UK/CH accounts are excluded.
Can employees or contractors read your conversations, and when?
They take a license to do quality assurance on individual interactions, with no review opt-out described.
Are you profiled or tracked for advertising?
The shop policy uses third-party analytics and tailored advertising cookies, with industry opt-out links.
Do they sell or share your data, and can you opt out?
They disclose data to ad and analytics partners (a CCPA “sale/share”) and may license de-identified Bolt datasets; opt-outs exist.
What rights do they take over what you type and what the AI makes?
You own your content, but the training/dataset license is worldwide, sublicensable, and transferable unless you opt out.
How long do they keep your data after you delete it, and can you delete it in the app?
Deletion is by contacting them; they keep data as long as needed for the stated purposes, plus legal needs.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They mention physical and electronic safeguards but give no audit or bug-bounty details and no security guarantee.
Is there a real age gate, and are teens protected?
You must be 18 or the age of majority; they rely on your representation, not a described ID check.
Will they tell you when the rules change, and is the policy specific?
The terms are dated and promise at least 15 days’ notice of material changes by email or in-product.
Can they close your account without warning, and can you get your data out first?
They may suspend or terminate at any time for any or no reason, with or without notice; export is only 30 days and not for cause.
If something goes wrong, who pays?
The service is as-is, liability is capped around $100 or a year of fees, and you must indemnify them for your violations.
Do subscriptions renew on their own, and can you get a refund?
Paid plans auto-renew; you can cancel in account settings, but fees and unused tokens are generally non-refundable. Price changes get 15 days’ notice.
The privacy policy is 4,509 words at a college graduate level (Flesch reading ease 39.7); the terms are 8,807 words at a college graduate level.
