Privacy Policy

At Blendry ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform (the "Service").

By using Blendry, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Username (optional)
• Full name (optional)
• Profile picture/avatar URL (optional)

1.2 Social Media Account Connections

When you connect social media accounts, we collect and store:

• OAuth access tokens and refresh tokens
• Token expiration dates
• Social media usernames and user IDs
• OAuth scopes (permissions granted)
• Platform-specific metadata (e.g., Facebook page IDs, Instagram business account IDs)

We support: Twitter/X, LinkedIn, Instagram, Facebook, TikTok, and YouTube.

1.3 Content and Posts

We store content you create, including:

• Post text content
• Images and media files (stored securely via Supabase Storage)
• Scheduled post information
• Post status and results (success/failure, platform post IDs, URLs)
• AI-generated content and editing history

1.4 Newsletter Subscriptions

If you subscribe to our newsletter from our website, we collect:

• Email address
• Subscription date and status
• Unsubscribe token (for one-click unsubscribe)

1.5 Contact Form Submissions

When you submit our contact form, we collect:

• Name
• Email address
• Company name (optional)
• Message content

1.6 Usage Data

We collect information about how you interact with the Service:

• Feature usage and interaction patterns
• Error logs and debugging information
• Feedback and support messages

1.7 Technical Data

• IP address
• Browser type and version
• Device information
• Session data and authentication cookies

2. How We Use Your Information

We use your information to:

• Provide the Service: Create accounts, authenticate users, connect social media accounts, and post content on your behalf
• AI Content Generation: Generate and adapt social media content using AI providers (Ollama local, OpenAI, Claude, or Gemini)
• Improve the Service: Analyze usage patterns, fix bugs, and develop new features
• Customer Support: Respond to your inquiries and provide assistance
• Marketing Communications: Send newsletters and updates (with your consent, you can unsubscribe anytime)
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and enforce our terms

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 Third-Party Service Providers

• Supabase: Database, authentication, and file storage
• Social Media Platforms: When you authorize us to post on your behalf (Twitter/X, LinkedIn, Instagram, Facebook, TikTok, YouTube)
• AI Providers: Content generation via your chosen AI provider (OpenAI, Anthropic, Google, or local Ollama)
• Email Service: For transactional emails, newsletters, and support communications

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure OAuth token storage
• Row-level security (RLS) policies in our database
• Access controls and authentication

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Export: Export your content and data
• Withdraw Consent: Disconnect social media accounts and revoke OAuth permissions
• Unsubscribe: Opt out of marketing emails (click unsubscribe in any email)
• Object: Object to processing of your data

To exercise these rights, contact us at [email protected]

6. Data Retention

We retain your data as long as your account is active or as needed to provide the Service. You can delete your account at any time, which will:

• Delete your account information
• Remove social media connections and OAuth tokens
• Delete your posts and content
• Remove uploaded media files

Some data may be retained for legal compliance, dispute resolution, or fraud prevention as required by law.

7. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication: Maintain your logged-in session (Supabase auth cookies)
• Preferences: Remember your sidebar state and UI preferences

You can disable cookies in your browser settings, but this may affect functionality.

8. Third-Party Links

Our Service may contain links to third-party websites or services (including social media platforms). We are not responsible for the privacy practices of these third parties. Please review their privacy policies.

9. Children's Privacy

Blendry is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion
• Right to non-discrimination for exercising your rights

12. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access, rectification, and erasure
• Right to data portability
• Right to restrict or object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: [email protected]
• Support: [email protected]