Last updated 14 October 2026
Privacy Policy
This policy explains which personal data BlogFleet processes, why we process it, and which rights you have.
1. Who is responsible
BlogFleet is responsible for the processing of your personal data (the "controller"). You can contact us about privacy at hi@blogfleet.app.
2. Data we process
- Account data: your e-mail address, the time of sign-up and confirmation, and login cookies. Our login provider stores only a protected hash of your password. We cannot read your password.
- Business data: the name and website of your startup, information that BlogFleet collects about your business from public websites, your answers to BlogFleet's questions, and your settings.
- Content: your article requests, drafts, reviews, published articles, and the files of your blog.
- Measurement data: page view statistics of your blog, and search statistics from Google Search Console if it is enabled. These statistics are aggregated.
- Billing data: your Stripe customer and subscription identifiers, payment status, invoices, refund requests and their reasons, and dispute status. Stripe processes your card details. We do not receive full card numbers.
- Support data: the messages that you send to us.
- Technical data: our hosting providers record technical logs, such as IP addresses and request times, to operate and protect the service.
3. Why we process the data
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Provide your account, your blog, and the article work | Account, business, content, and measurement data | Contract, Art. 6(1)(b) |
| Take payments and handle refunds, withdrawals, and disputes | Billing data | Contract, Art. 6(1)(b) |
| Keep tax and accounting records | Billing data | Legal obligation, Art. 6(1)(c) |
| Protect the service and prevent misuse | Technical and account data | Legitimate interest in a secure service, Art. 6(1)(f) |
| Answer your messages and requests | Support data | Contract, Art. 6(1)(b), or legitimate interest, Art. 6(1)(f) |
We do not sell your personal data, and we do not use it for advertising.
4. Artificial intelligence
BlogFleet sends information about your business and your articles to OpenAI to research, write, and review articles. Do not enter personal data of other people into BlogFleet unless you are allowed to share it.
BlogFleet makes no decision about you that has legal or similarly significant effects and is based only on automated processing.
5. Service providers
These providers process data for us to run BlogFleet:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and account login | European Union (Ireland) |
| Vercel | Hosting of the BlogFleet application | Global network |
| OpenAI | AI models for research, writing, and review | United States |
| GitHub | Private storage of the source files of your blog | United States |
| Cloudflare | Hosting and delivery of your blog, cookie-free page statistics | Global network |
| Stripe | Payments, invoices, refunds, and disputes | See the Stripe privacy policy |
| Search Console statistics for your blog, only if enabled | United States |
Stripe also processes payment data as an independent controller under its own privacy policy.
6. Transfers outside the EU
Some providers process data outside the European Union and the European Economic Area, for example in the United States. In that case, the transfer relies on a safeguard that the GDPR permits, such as an adequacy decision (for example the EU-U.S. Data Privacy Framework) or the standard contractual clauses of the European Commission.
7. How long we keep data
- Account, business, and content data: while your account exists. Data of archived startups stays until the account is closed.
- After you ask to close your account: we review the request, then we delete the data and remove the blog that BlogFleet hosts for you. We answer within one month.
- Billing records: as long as tax and accounting law requires.
- Support messages: until your request is resolved, and afterwards only as long as we need them as a record of the request.
- Technical logs: for the short periods that our hosting providers set.
9. Visitors of blogs hosted by BlogFleet
When someone visits a blog that BlogFleet hosts, Cloudflare delivers the pages and processes technical data, such as the IP address, to do so. BlogFleet receives only aggregated statistics.
10. Your rights
You have the right to access your personal data, to correct it, to have it deleted, to restrict its processing, to receive it in a portable format, and to object to processing that is based on our legitimate interest.
To use these rights, write to hi@blogfleet.app. We answer within one month.
You can also complain to a data protection supervisory authority, in particular in the EU country where you live or work, or where an infringement occurred.
11. Security
We use encrypted connections (HTTPS), access controls, and separation of the data of each customer account. Card data stays with Stripe.
12. Children
BlogFleet is not intended for people under 18. We do not knowingly collect data of children.
13. Changes to this policy
We update this policy when our processing changes. We tell you about important changes by e-mail.