Privacy Policy

Last Updated: January 5, 2026

1. Introduction

This Privacy Policy describes how Blypt ("we", "us", "our") collects, uses, and discloses information when you use our web application and related services (collectively, the "Service").

2. Information We Collect

2.1 Account and Authentication Information

  • Identifiers such as name, email address, and profile image (if provided).
  • Authentication data such as session identifiers, IP address, and user agent (stored to help secure accounts and maintain sessions).
  • If you sign in using a social provider (for example, Google or GitHub), we receive basic profile information made available by that provider.

2.2 Content and Data You Provide

  • Lead and list data you create, upload, or import (for example, CSV imports, list rows/columns, enrichment outputs).
  • Prompts, templates, and other inputs you submit for AI or automation features.
  • Integration configuration you create (for example, saved API connections, allowed hosts, and other settings).

2.3 API Keys and OAuth Tokens (When You Connect Integrations)

  • If you choose to store third-party API keys or connect third-party accounts, we store encrypted credentials such as API keys and OAuth refresh tokens.
  • For security, these secrets are stored encrypted in our database .

2.4 Usage and Device Information

  • Usage data and diagnostic information (for example, pages viewed, actions taken, and basic device/browser information).
  • We use analytics tools to understand how the Service is used and to improve it.

3. How We Use Information

  • To provide, operate, and maintain the Service.
  • To authenticate users, maintain sessions, and help keep accounts secure.
  • To process your requests (including enrichment, AI, and integration workflows).
  • To send transactional emails (for example, verification and password reset emails).
  • To provide billing, subscriptions, and credit management functionality.
  • To analyze usage, debug issues, and improve performance and user experience.

4. How We Share Information

We do not sell your personal information. We may share information with third parties in the following situations:

4.1 Service Providers and Processors

  • Payments and subscriptions: We use Lemon Squeezy to manage purchases, subscriptions, and related billing records.
  • Email delivery: We use Resend to send emails such as verification and password reset messages.
  • Analytics: We use Vercel Analytics to understand usage and improve the Service.
  • Storage: Uploaded files may be stored via S3-compatible object storage (for example, Cloudflare R2).
  • Queues and job processing: We may use managed queueing/caching services (for example, Upstash) to run background jobs.

4.2 AI and Enrichment Providers (At Your Direction)

When you run AI or enrichment features, the Service may transmit relevant inputs (such as row data and prompts) to the selected provider(s) to generate results. Depending on your configuration, providers may include OpenAI, Google Gemini, Anthropic, DeepSeek, and other supported services.

4.3 Legal and Safety

We may disclose information if required to comply with applicable law, enforce our policies, or protect the rights, property, or safety of users or the Service.

5. Cookies and Local Storage

  • We use cookies for authentication/session management (for example, to keep you signed in).
  • Certain features may store tokens or preferences locally in your browser (for example, in localStorage) to enable integrations.

6. Data Security

  • We use technical safeguards designed to protect information, including encryption for stored secrets.
  • No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Data Retention

We retain information for as long as necessary to provide the Service and for legitimate business purposes such as compliance, dispute resolution, and enforcement. You can delete or export certain content from within the Service where available.

8. Your Rights and Choices

  • You can access and update certain account information within the Service.
  • You can disconnect integrations you have connected (where supported).
  • You can request deletion of your account by contacting us (see the Contact section).

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: