// legal

Privacy Policy

Last updated: June 12, 2026

CfxKit is a desktop IDE for FiveM and RedM server development, made by Boltise Private Limited (“Boltise”). This policy explains what we collect when you use the app and the cfxkit.com website, what never leaves your machine, and how to get your data removed. We try to keep it short and honest.

What we collect

• Account data. You sign in with Discord, Google, or email through Supabase Auth. We store your email address, the identity returned by your OAuth provider, and your display name.
• Billing data. Paid plans are sold and billed by Paddle, our authorized reseller and Merchant of Record. Paddle processes your payment details. We never see or store card numbers. We keep a record of your plan and subscription status.
• Telemetry. We use PostHog for product analytics and Sentry for error and crash reports, so we can see what breaks and what gets used.

What stays on your machine

• Your own AI API keys. If you bring your own keys, they are stored locally on your machine and are never sent to Boltise servers.
• Your project files and server code. CfxKit works on files on your disk.
• The local database. Projects, settings, recent files, and activity logs live in a local SQLite file.

Hosted AI processing

On paid tiers, hosted AI requests are proxied through Boltise infrastructure (Supabase edge functions) to AI model providers. Your prompts, and any code or context you attach to them, are processed to generate a response. That is the only reason they are processed. If you use your own API keys instead, requests go from your machine to your provider and skip our infrastructure.

Third-party processors

• Supabase. Authentication and our Postgres database, where account data lives.
• Paddle (Paddle.com Market Ltd.). Our Merchant of Record; processes payments and handles billing for paid plans.
• PostHog. Product analytics.
• Sentry. Error and crash reporting.
• AI model providers. Only on paid tiers, to process hosted AI requests as described above.

Data retention & deletion

We keep account data for as long as your account exists. To delete your account and the data we hold about you, email support@cfxkit.com from the address on your account. Anything stored only on your machine, including API keys and project files, is yours to delete at any time.

Your rights

You can ask us for a copy of the data we hold about you, ask us to export it, or ask us to delete it. Email us and we will handle it. Depending on where you live, local law may give you additional rights, and we honor those too.

Changes

If we change this policy, we will post the new version here and update the date at the top. If a change meaningfully affects how we handle your data, we will tell you before it takes effect.

Contact

CfxKit is operated by Boltise Private Limited. Questions about this policy go to support@cfxkit.com.