Privacy Policy

Last updated: October 10, 2026

Overview

Alchemy Inside is a service of Boffo Digital LLC, a Texas limited liability company. "We" and "us" on this page mean Boffo Digital LLC.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit alchemyinside.com or purchase our products and services.

Information We Collect

Information You Provide

  • Contact information: Name, email address when you sign up for our newsletter, purchase products, or contact us
  • Purchase information: Email and payment details, processed by our payment processor. We never see or store your full card number.
  • Communication data: Messages you send through our contact form

Information Collected Automatically

  • Usage data: Pages visited, time spent on pages, referring URLs
  • Device information: Browser type, operating system, screen resolution

How We Use Your Information

  • To deliver products and services you've purchased
  • To send our newsletter (with your consent)
  • To respond to your inquiries
  • To improve our website and products
  • To send transactional emails related to your purchases

The Practice Diagnostic in AI Assistants

The plugin and MCP server have their own policy, with what they collect, who receives it and how long it's kept: Privacy Policy: the Practice Diagnostic in AI Assistants. In short:

You can run the free Practice Diagnostic in an AI assistant, such as through our plugin or our MCP server at mcp.alchemyinside.com. When you do, the assistant sends us only what scoring needs: your practice type, your annual revenue band and your 12 multiple-choice answers. We use them to compute your results, then discard them. We don't store your answers, don't log them, and don't receive your name, email or any patient information; the diagnostic never asks for them, and you shouldn't share them. Cloudflare, which hosts the server, processes each request's IP address to deliver it and to apply a rate limit.

Logs. Our Cloudflare Workers (the MCP server and the worker that handles our forms) keep short-lived operational logs: request metadata such as the time, the path, the response status and the IP address, used only to keep the service running and to investigate abuse. The MCP server never logs tool arguments, so your answers are not in them. Cloudflare deletes these logs automatically after at most 7 days.

Your results link. The link the assistant gives you opens your results on alchemyinside.com. Your answers ride in the part of the link after the #, which your browser does not send to our server; the page scores them in your browser and saves them there, so they come back if you return. Opening it counts as finishing the diagnostic, and, subject to your cookie choice (see Cookies), the page sends Google Analytics two events: scorecard_completed, with the area to look at first, the recommended sprint, the estimated range, the total score, your practice types and revenue band, and scorecard_agent_results, which records that the results came from an AI assistant, with the area to look at first. Neither includes your individual answers, your name or your email. From there this policy's other sections apply. The assistant you use handles your conversation under its own privacy policy.

Third-Party Services

We use the following third-party services that may collect data:

  • MailerLite: Newsletter and follow-up email, only when you opt in
  • Postmark: Transactional email delivery, such as your scorecard breakdown
  • Cloudflare: Form handling and spam protection (Turnstile)
  • Stripe: Payment for the Found Money Audit. Stripe collects your card details; we receive your name, email, practice name and website, and the payment status
  • Cal.com: Scheduling, when you book a call
  • Google Analytics: Aggregate site usage. In the EEA, the UK and Switzerland, nothing is measured until you accept. Elsewhere, measurement is on by default and Decline turns it off. No advertising cookies, ever, and we never track you across other sites.

Each of these services has their own privacy policy governing their use of your data.

Data Security

We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Unsubscribe from our newsletter at any time
  • Opt out of non-essential cookies

Cookies

We use essential cookies to ensure our website functions properly, and Google Analytics to understand how the site is used. In the EEA, the UK and Switzerland, analytics stay off until you accept. Everywhere else they are on by default, and Decline turns them off for good on that browser. We use no advertising cookies and do not track you across other sites. You can change your choice at any time from the banner link in the footer.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated date.

Contact Us

If you have questions about this Privacy Policy, please contact us at hello@alchemyinside.com.