All apps

Is Bolt.new safe with your data?

B
Bolt.new icon

Bolt.new

StackBlitz

61/100

Good disclosure · high confidence

Bolt.new earns a B (61/100) because it discloses most of its data practices.

Dealbreaker flag

  • D1.4: you grant Stackblitz a worldwide, non-exclusive, royalty-free, sublicensable, and transferable license to use, reproduce, process, adapt, modify, and create derivative works of your Bolt Model Development Content

#29

of 216 apps ranked

61

score · Coding avg 51

+10

vs category average

Grade scaleA · 70–100B · 60–69C · 48–59D · 35–47F · 0–34

Bolt.new trains models on Bolt prompts and code by default with a free account-level opt-out, but the Terms take a sublicensable and transferable licence over that content, the retention section names no period, and nothing is said about security controls or breach notification.

What Bolt.new's privacy policy and terms of service say about your data

Training with an opt-out

Prompts, code, interaction data and project files submitted to Bolt AI Features may be used to train StackBlitz models and to build de-identified datasets licensed to third parties for money, unless the user opts out through account settings or by emailing privacy@stackblitz.com; opt-outs are implemented within fifteen days and EEA, UK and Swiss accounts are excluded entirely.

Content licence goes beyond the service

The Terms require a worldwide, sublicensable and transferable licence to use, reproduce, adapt and create derivative works of Bolt Model Development Content for model training and dataset licensing, a grant far wider than operating the product.

Forge trades data for a discount

Bolt Forge is offered on eligible plans on the condition that prompts, output and project files are used for training and licensed datasets, the ordinary opt-out does not apply while Forge is on, and the policy values a participating user's data at about $6.50 per month.

Retention and security left open

Data is kept for as long as necessary with no stated period, account closure data is deleted within a reasonable period rather than a set number of days, and the policy names no encryption, access control or breach notification commitment.

What the policy is silent or vague on

  • Not stated: your ownership of generated outputs
  • Not stated: shorter retention for AI conversation logs
  • Not stated: a data-minimisation commitment
  • Not stated: a standard for government and law-enforcement access

Bolt.new privacy rating

Training-data use2 of 4 disclosed
Keeps user inputs out of model training, or makes training opt-inPartial
Names a way to opt out of or into trainingDisclosed
Says whether training use differs by plan or tierDisclosed
Lets the user keep ownership of generated outputsSilent
Data-subject rights2 of 5 disclosed
Grants a right to access your dataDisclosed
Grants a right to delete your dataPartial
Offers data portability in a usable formatPartial
Grants a right to correct your dataPartial
Grants a way to object to or opt out of processingDisclosed
Retention and deletion0 of 4 disclosed
States a retention period for your dataPartial
States a deletion timeline after closure or requestPartial
Sets a shorter retention for AI conversation logsSilent
Commits to collecting only the data it needsSilent
Third-party sharing3 of 5 disclosed
Lists the categories of third parties it shares withDisclosed
References a sub-processor list or data processing agreementDisclosed
Does not sell or share data for advertising, or offers opt-outPartial
Names a safeguard for international data transfersDisclosed
States a standard for government and law-enforcement accessSilent
Transparency3 of 4 disclosed
Discloses that you are interacting with AIDisclosed
Marks AI-generated or synthetic outputNot applicable
Enumerates the categories of data it collectsDisclosed
Maps processing purposes to legal basesPartial
Is versioned and dated, with change noticeDisclosed
Sensitive data and children2 of 2 disclosed
Discloses automated decisions and a human-review pathNot applicable
Limits the use of special-category dataDisclosed
Governs biometric data specificallyNot applicable
States protections for children's dataDisclosed
Security and accountability1 of 3 disclosed
Describes its security safeguardsSilent
Commits to breach notificationSilent
Names a certification or a privacy contactDisclosed
DisclosedPartialSilentAdverseNot applicable

Details

Category
Coding
Modalities
text
Processes biometrics
No
Policy last updated
2026-09-22
Region scored
Global / US-default
Last assessed
2026-10-13

Documents examined

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.

Is Bolt.new safe with your data? Grade B | VerifyWise