Privacy Policy

Last updated: February 25, 2026

1. Introduction

LoadBolt ("we", "us", "our") operates the LoadBolt platform at loadbolt.dev. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and organization name through our authentication provider (Auth0).

Billing Information

Payment details (credit card numbers, billing addresses) are collected and processed directly by Stripe. We do not store your full payment card details on our servers. We receive and store your Stripe customer ID, subscription status, and plan information.

Test Data

We store the k6 test scripts you create, test configurations (virtual users, duration, variables), and test run results (response times, error rates, throughput metrics). Test scripts may contain URLs and configuration for your target systems.

Usage Data

We track VU-minutes consumed, number of test runs, and other usage metrics for billing and plan enforcement purposes.

Domain Verification

When you verify domain ownership, we store the verified domain names associated with your organization.

3. How We Use Your Information

To provide and operate the load testing service
To process payments and manage subscriptions
To enforce plan limits and usage quotas
To verify domain ownership for security purposes
To communicate with you about your account and service updates
To detect and prevent abuse, fraud, and unauthorized access

4. Third-Party Services

We use the following third-party services that may process your data:

Auth0 (Okta) — Authentication and identity management. Processes your email, name, and login credentials. Auth0 Privacy Policy
Stripe — Payment processing and subscription management. Processes your payment information and billing details. Stripe Privacy Policy
Amazon Web Services (AWS) — Cloud infrastructure for test execution, script storage, and data processing. Your test scripts and results are stored in AWS (US East region). AWS Privacy Notice
Neon — Managed PostgreSQL database hosting. Stores account data, test configurations, and run metadata. Neon Privacy Policy
Vercel — Web application hosting and deployment. Vercel Privacy Policy

5. Data Retention

Test results and run data are retained indefinitely while your account is active.
Account information is retained as long as your account is active. Upon account deletion, your data will be removed within 30 days.
Test scripts are retained as long as the associated project exists in your account.
Billing records may be retained as required by law and Stripe's data retention policies.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encrypted database connections, and access controls. Test scripts are stored in private S3 buckets with server-side encryption. However, no method of transmission or storage is 100% secure.

7. Cookies

We use essential cookies for authentication session management (provided by Auth0). We do not use advertising or tracking cookies. No third-party analytics cookies are used.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Delete your personal data (account deletion)
Export your data in a portable format
Object to processing of your data for certain purposes

To exercise any of these rights, contact us at privacy@loadbolt.dev.

9. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information to third parties.

10. European Residents (GDPR)

If you are in the European Economic Area, our legal basis for processing your data is: contract performance (to provide the Service), legitimate interests (security, fraud prevention), and consent (where applicable). Data is transferred to the United States where our infrastructure is hosted.

11. Children

The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. The "Last updated" date at the top reflects the most recent revision.

13. Contact

For questions about this Privacy Policy, contact us at privacy@loadbolt.dev.