Privacy policy
Last updated: 31 October 2026
Boogie Data (boogiedata.com) is operated by ReadyDone, LLC ("we"). This policy explains what personal data the site and the Boogie Data API and MCP server handle, and why. Questions: info@boogiedata.com.
The short version
- We collect as little as we can to run the service and protect it from abuse.
- We do not sell or rent personal data, and we do not share it for advertising.
- This site has no trackers, analytics, advertising or third-party scripts, and sets no cookies.
Who is responsible
ReadyDone, LLC is responsible for the personal data described here. Contact us at info@boogiedata.com.
What we handle
- Email you send us. If you write to info@boogiedata.com, including a request to hear about the launch, we keep your address and message so we can answer you and, if you asked, send one launch email. The waitlist form is described in the Waitlist section below.
- Account email. When accounts open, you give an email address to get an API key. Our account database stores only a one-way hash of it, which is how we recognise your account. The plain address is used only to send account messages such as your verification link. Before sign-up opens, this policy will name the email provider that sends those messages and say how long it keeps the address. Sign-up is not open yet.
- API keys. Keys are stored only as SHA-256 hashes. We cannot read your key back; if you lose it, rotate it. Our ordinary logs never contain a plaintext key.
- Request records. For each API or MCP call we record the time, the key and account that made it, the operation, the dataset and slice, the number of rows returned and any amount charged. We use these records for quotas, billing and abuse prevention. They do not contain your IP address or the contents of your requests beyond those fields.
- IP address prefixes. Rate limits are applied per IP prefix (an IPv4 address, or the first half of an IPv6 address). To slow down key guessing we keep up to ten recent failed authentication timestamps per prefix, deleted automatically once they expire.
- Feedback and query rationale. If you or your agent send feedback, or attach an optional rationale to a query, we keep that text for 180 days and then delete it. Credentials are stripped from it before it is stored, and it is never stored alongside an IP address or shown to other customers. Please do not put personal or secret information in it.
- Payments. When paid plans open, a payment processor (Stripe) will handle card details; we will not receive or store full card numbers. We keep a record of what you bought and when.
Waitlist
If you join the waitlist on this site, we store:
- the email address you enter, and a normalised copy (lower case, without anything after a "+" in any address and, for Gmail, without dots) so that the same person is listed once;
- the group you chose, if you chose one (for example "Card or comic dealer");
- when you joined, and whether you joined on this site or through the API.
We do not store your IP address, browser details or the page you came from with it. To stop abuse the form is rate limited per IP address (for IPv6, per first half of the address). The waitlist's counters are named by a one-way hash of that address made with a secret key, not by the address, and hold only a count for the current minute and the current day; each counter is deleted when its minute or day ends. Like every request to our API, the form also passes Cloudflare's per-minute request limit (see Cloudflare, below).
We use the address to email you when the Boogie Data API and MCP server open, and occasionally about new data and features. Every email has an unsubscribe link. We do not share or sell the list, and the form sends no confirmation email. The list is stored in our Cloudflare database (see who else handles it, below).
We keep your address until you unsubscribe or ask us to delete it: write to info@boogiedata.com from the address you joined with.
Why we use it
- To answer your email and, if you asked, tell you once when we launch.
- To email the people on the waitlist when the API and MCP server open, and occasionally about new data and features, because they asked for it. Every email has an unsubscribe link.
- To provide the API and MCP server you use, including quotas and billing.
- To protect the service, our customers and ourselves from abuse.
- To keep the records the law requires, such as purchase records.
How long we keep it
- Feedback and query rationale: 180 days, then deleted automatically.
- Failed-authentication timestamps: deleted automatically once they expire.
- Notify-me and other email: until you ask us to delete it, or once the launch email has been sent and we no longer need it to answer you.
- Waitlist: until you unsubscribe or ask us to delete it (write to info@boogiedata.com).
- Account and purchase records: while your account is open, and purchase records for as long as the law requires.
Who else handles it
- Cloudflare hosts the site and the API, provides DNS and forwards email sent to info@boogiedata.com. It also stores the waitlist. It processes requests, including IP addresses, to deliver and secure the service, under its own privacy policy. We do not use Cloudflare's analytics or any other visitor-tracking product on this site.
- Stripe will process payments when paid plans open.
- We do not sell personal data or share it for advertising.
Our service providers may process data outside your country. Where the law requires it, we rely on the safeguards those providers offer for international transfers.
Your rights
You can rotate or revoke your API key at any time. You can ask us for a copy of your personal data, or ask us to correct or delete it, by writing to info@boogiedata.com; we may keep records we are required to keep, such as purchase records, for as long as the law requires. You may also complain to your local data protection authority.
Security
Our account database stores API keys and account emails only as hashes (the waitlist keeps the address you enter; see Waitlist, above), request records hold no IP addresses, and the site loads no third-party code. See Security for more.
Children
The service is for businesses and adults. It is not directed at children, and we do not knowingly collect children's personal data.
Changes
If this policy changes, we will update this page and its date before the change takes effect.
Contact
ReadyDone, LLC · info@boogiedata.com