BlokAI Privacy Policy

Last Updated: February 24, 2026

Effective Date: February 24, 2026

1. Introduction

BlokAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services at blok-ai.com and related platforms.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, phone number (optional)
  • Payment Information: Credit card details (processed and stored by Stripe, not by us)
  • Business Information: Company details, industry, business challenges, goals
  • Communications: Messages, inquiries, support requests

2.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent, click patterns
  • Device Information: IP address, browser type, operating system, device type
  • Cookies and Tracking: Session data, preferences, analytics
  • API Logs: Request timestamps, endpoints accessed, response codes

2.3 Third-Party Information

  • OAuth Login: If you use Google or other OAuth providers, we receive basic profile information (name, email)
  • Analytics: Aggregated usage data from analytics providers

3. How We Use Your Information

3.1 Service Delivery

  • Process and fulfill your orders
  • Generate AI business analysis reports
  • Provide customer support
  • Send service-related communications (receipts, reports, updates)

3.2 Improvement and Development

  • Improve our AI models and analysis quality
  • Develop new features and services
  • Conduct research and analytics
  • Debug and optimize system performance

3.3 Communication

  • Send transactional emails (order confirmations, reports)
  • Send marketing communications (with your consent)
  • Respond to your inquiries and requests
  • Notify you of important changes or updates

3.4 Legal and Security

  • Comply with legal obligations
  • Prevent fraud and abuse
  • Enforce our Terms of Service
  • Protect our rights and property

4. How We Share Your Information

4.1 Service Providers

We share information with trusted third-party providers:

  • Stripe: Payment processing
  • Vercel: Web hosting and serverless functions
  • Neon: Database hosting
  • Cloudflare: CDN and security
  • OpenAI/Anthropic: AI model providers for analysis
  • Resend: Email delivery

4.2 Business Transfers

If BlokAI is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.3 Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal process (subpoena, court order)
  • Respond to government requests
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activity

4.4 With Your Consent

We may share information for other purposes with your explicit consent.

4.5 What We DON'T Do

  • We DO NOT sell your personal information to third parties
  • We DO NOT share your business analysis data with competitors
  • We DO NOT use your data for unrelated marketing without consent

5. Data Security

5.1 Security Measures

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest
  • Access Controls: Role-based access, authentication required
  • Secure Infrastructure: Industry-standard cloud providers
  • Regular Updates: Security patches and monitoring
  • Payment Security: PCI DSS compliant via Stripe

5.2 Limitations

While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security of your information.

5.3 Your Responsibility

  • Keep your account credentials confidential
  • Use strong, unique passwords
  • Enable two-factor authentication when available
  • Report suspicious activity immediately

6. Data Retention

6.1 Active Accounts

We retain your information while your account is active and for a reasonable period afterward to:

  • Provide ongoing services
  • Comply with legal obligations
  • Resolve disputes
  • Improve our services

6.2 Retention Periods

  • Account Data: Retained while account is active + 2 years after deletion
  • Payment Records: 7 years (tax and legal requirements)
  • Analysis Reports: 3 years for service improvement
  • Usage Logs: 90 days for security and debugging

6.3 Deletion

You may request data deletion by contacting us. We will delete or anonymize your data within 30 days, except where retention is legally required.

7. Your Privacy Rights

7.1 Access and Portability

  • Request a copy of your personal information
  • Receive data in a machine-readable format

7.2 Correction

  • Update or correct inaccurate information
  • Modify your account details at any time

7.3 Deletion

  • Request deletion of your personal information
  • Close your account (subject to legal retention requirements)

7.4 Opt-Out

  • Unsubscribe from marketing emails (transactional emails still sent)
  • Disable cookies (may affect functionality)
  • Opt out of analytics tracking

7.5 Object and Restrict

  • Object to processing of your information
  • Request restriction of processing under certain circumstances

7.6 Withdraw Consent

  • Withdraw consent for processing where we rely on consent

7.7 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking Technologies

8.1 What We Use

  • Essential Cookies: Required for basic functionality (authentication, session management)
  • Analytics Cookies: Track usage patterns and performance
  • Preference Cookies: Remember your settings and preferences

8.2 Third-Party Cookies

Our service providers (Stripe, analytics tools) may set their own cookies.

8.3 Cookie Control

You can control cookies through your browser settings. Disabling cookies may limit functionality.

9. International Data Transfers

9.1 Data Location

Your information may be stored and processed in:

  • Japan (primary operations)
  • United States (cloud infrastructure)
  • Singapore (database hosting)
  • Other countries where our service providers operate

9.2 Transfer Protections

When transferring data internationally, we ensure appropriate safeguards through:

  • Standard contractual clauses
  • Service provider agreements
  • Compliance with data protection frameworks

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

11. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

  • Right to Know: What personal information we collect, use, and share
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt out of sale of personal information (we don't sell data)
  • Right to Non-Discrimination: Equal service regardless of privacy rights exercise

To exercise these rights, contact us at [email protected].

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR:

  • Legal Basis for Processing: Contract performance, legal obligations, legitimate interests, consent
  • Data Protection Officer: [email protected]
  • Supervisory Authority: You may lodge a complaint with your local data protection authority

14. Changes to This Privacy Policy

14.1 Updates

We may update this Privacy Policy from time to time. Changes are effective upon posting.

14.2 Notification

We will notify you of material changes via:

  • Email to your registered address
  • Notice on our website
  • In-app notification

14.3 Continued Use

Your continued use of the Services after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

BlokAI Email: [email protected] Website: https://blok-ai.com

For privacy-related questions, concerns, or to exercise your rights, please contact us at [email protected].

16. Data Processing Agreement

For business customers requiring a Data Processing Agreement (DPA), please contact us at [email protected].


Version 1.0 | Last Updated: February 24, 2026