Privacy Policy

Blyft Inc. ("Blyft", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform at blyft.io (the "Service").

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

We collect the following categories of information:

Account Information: Name, email address, and password when you register. If you sign in via Google or GitHub, we receive your public profile information from those providers.

Usage Data: Pages visited, features used, generation prompts submitted, time spent on the platform, and interaction logs.

Project & Content Data: Prompts, generated code, uploaded assets, project names, and any content you create within the Service.

Payment Information: Billing name, address, and payment card details processed securely by our payment provider (Stripe). We do not store full card numbers.

Device & Technical Data: IP address, browser type, operating system, device identifiers, and referral URLs collected automatically via cookies and similar technologies.

We use your information to:

• Provide, operate, and improve the Service

• Process payments and manage your subscription

• Send transactional emails (receipts, password resets, generation notifications)

• Send product updates and marketing communications (you can opt out at any time)

• Detect and prevent fraud, abuse, and security threats

• Comply with legal obligations

• Analyze usage patterns to improve our AI models (using anonymized, aggregated data only)

• Respond to your support requests

We use cookies and similar technologies to:

• Keep you logged in across sessions (essential cookies)

• Remember your preferences (functional cookies)

• Analyze usage with tools like PostHog and Google Analytics (analytics cookies)

• Measure marketing campaign effectiveness (marketing cookies)

You can control cookie preferences through your browser settings. Note that disabling essential cookies may impair Service functionality. We honor browser Do Not Track signals where applicable.

We do not sell your personal data. We may share your information with:

Service Providers: Third-party vendors who help us operate the Service (e.g., Stripe for payments, AWS for hosting, Resend for email, PostHog for analytics). These providers are contractually bound to protect your data.

Business Transfers: If Blyft is acquired or merges with another company, your data may be transferred as part of that transaction.

Legal Requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of Blyft, our users, or the public.

With Your Consent: We may share data for any other purpose with your explicit consent.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account:

• Account data is deleted within 30 days

• Project data and generated code are deleted within 60 days

• Anonymized usage data may be retained indefinitely for analytics

• Billing records are retained for 7 years as required by tax law

You may request earlier deletion by contacting Founder@blyft.app.

We implement industry-standard security measures including:

• TLS encryption for all data in transit

• AES-256 encryption for sensitive data at rest

• SOC 2-compliant cloud infrastructure

• Regular security audits and penetration testing

• Least-privilege access controls for internal staff

Despite these measures, no system is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication where available.

Depending on your location, you may have the following rights regarding your personal data:

• **Access:** Request a copy of the personal data we hold about you

• **Correction:** Request correction of inaccurate or incomplete data

• **Deletion:** Request deletion of your personal data ("right to be forgotten")

• **Portability:** Receive your data in a machine-readable format

• **Objection:** Object to processing of your data for direct marketing purposes

• **Restriction:** Request that we restrict processing in certain circumstances

To exercise any of these rights, contact us at Founder@blyft.app. We will respond within 30 days. EU/UK users may also lodge a complaint with their local supervisory authority.

Blyft is based in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US, which may have different data protection laws than your country.

For users in the European Economic Area (EEA), UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for international transfers.

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided personal data, we will delete it promptly. If you believe a child has provided us with personal information, please contact Founder@blyft.app.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. We will notify you of material changes by sending an email to your registered address or by posting a prominent notice on the Service. The "Last updated" date at the top of this page reflects when changes were made. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:

Blyft Inc.

Attn: Privacy Team

Email: Founder@blyft.app