BlokAI Privacy Policy
Last Updated: February 24, 2026
Effective Date: February 24, 2026
1. Introduction
BlokAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services at blok-ai.com and related platforms.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, phone number (optional)
- Payment Information: Credit card details (processed and stored by Stripe, not by us)
- Business Information: Company details, industry, business challenges, goals
- Communications: Messages, inquiries, support requests
2.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent, click patterns
- Device Information: IP address, browser type, operating system, device type
- Cookies and Tracking: Session data, preferences, analytics
- API Logs: Request timestamps, endpoints accessed, response codes
2.3 Third-Party Information
- OAuth Login: If you use Google or other OAuth providers, we receive basic profile information (name, email)
- Analytics: Aggregated usage data from analytics providers
3. How We Use Your Information
3.1 Service Delivery
- Process and fulfill your orders
- Generate AI business analysis reports
- Provide customer support
- Send service-related communications (receipts, reports, updates)
3.2 Improvement and Development
- Improve our AI models and analysis quality
- Develop new features and services
- Conduct research and analytics
- Debug and optimize system performance
3.3 Communication
- Send transactional emails (order confirmations, reports)
- Send marketing communications (with your consent)
- Respond to your inquiries and requests
- Notify you of important changes or updates
3.4 Legal and Security
- Comply with legal obligations
- Prevent fraud and abuse
- Enforce our Terms of Service
- Protect our rights and property
4. How We Share Your Information
4.1 Service Providers
We share information with trusted third-party providers:
- Stripe: Payment processing
- Vercel: Web hosting and serverless functions
- Neon: Database hosting
- Cloudflare: CDN and security
- OpenAI/Anthropic: AI model providers for analysis
- Resend: Email delivery
4.2 Business Transfers
If BlokAI is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4.3 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal process (subpoena, court order)
- Respond to government requests
- Protect our rights, property, or safety
- Prevent fraud or illegal activity
4.4 With Your Consent
We may share information for other purposes with your explicit consent.
4.5 What We DON'T Do
- We DO NOT sell your personal information to third parties
- We DO NOT share your business analysis data with competitors
- We DO NOT use your data for unrelated marketing without consent
5. Data Security
5.1 Security Measures
- Encryption: Data encrypted in transit (TLS/SSL) and at rest
- Access Controls: Role-based access, authentication required
- Secure Infrastructure: Industry-standard cloud providers
- Regular Updates: Security patches and monitoring
- Payment Security: PCI DSS compliant via Stripe
5.2 Limitations
While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security of your information.
5.3 Your Responsibility
- Keep your account credentials confidential
- Use strong, unique passwords
- Enable two-factor authentication when available
- Report suspicious activity immediately
6. Data Retention
6.1 Active Accounts
We retain your information while your account is active and for a reasonable period afterward to:
- Provide ongoing services
- Comply with legal obligations
- Resolve disputes
- Improve our services
6.2 Retention Periods
- Account Data: Retained while account is active + 2 years after deletion
- Payment Records: 7 years (tax and legal requirements)
- Analysis Reports: 3 years for service improvement
- Usage Logs: 90 days for security and debugging
6.3 Deletion
You may request data deletion by contacting us. We will delete or anonymize your data within 30 days, except where retention is legally required.
7. Your Privacy Rights
7.1 Access and Portability
- Request a copy of your personal information
- Receive data in a machine-readable format
7.2 Correction
- Update or correct inaccurate information
- Modify your account details at any time
7.3 Deletion
- Request deletion of your personal information
- Close your account (subject to legal retention requirements)
7.4 Opt-Out
- Unsubscribe from marketing emails (transactional emails still sent)
- Disable cookies (may affect functionality)
- Opt out of analytics tracking
7.5 Object and Restrict
- Object to processing of your information
- Request restriction of processing under certain circumstances
7.6 Withdraw Consent
- Withdraw consent for processing where we rely on consent
7.7 Exercising Your Rights
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Cookies and Tracking Technologies
8.1 What We Use
- Essential Cookies: Required for basic functionality (authentication, session management)
- Analytics Cookies: Track usage patterns and performance
- Preference Cookies: Remember your settings and preferences
8.2 Third-Party Cookies
Our service providers (Stripe, analytics tools) may set their own cookies.
8.3 Cookie Control
You can control cookies through your browser settings. Disabling cookies may limit functionality.
9. International Data Transfers
9.1 Data Location
Your information may be stored and processed in:
- Japan (primary operations)
- United States (cloud infrastructure)
- Singapore (database hosting)
- Other countries where our service providers operate
9.2 Transfer Protections
When transferring data internationally, we ensure appropriate safeguards through:
- Standard contractual clauses
- Service provider agreements
- Compliance with data protection frameworks
10. Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.
11. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to Know: What personal information we collect, use, and share
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of sale of personal information (we don't sell data)
- Right to Non-Discrimination: Equal service regardless of privacy rights exercise
To exercise these rights, contact us at [email protected].
13. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under GDPR:
- Legal Basis for Processing: Contract performance, legal obligations, legitimate interests, consent
- Data Protection Officer: [email protected]
- Supervisory Authority: You may lodge a complaint with your local data protection authority
14. Changes to This Privacy Policy
14.1 Updates
We may update this Privacy Policy from time to time. Changes are effective upon posting.
14.2 Notification
We will notify you of material changes via:
- Email to your registered address
- Notice on our website
- In-app notification
14.3 Continued Use
Your continued use of the Services after changes constitutes acceptance of the updated Privacy Policy.
15. Contact Us
BlokAI
Email: [email protected]
Website: https://blok-ai.com
For privacy-related questions, concerns, or to exercise your rights, please contact us at [email protected].
16. Data Processing Agreement
For business customers requiring a Data Processing Agreement (DPA), please contact us at [email protected].
Version 1.0 | Last Updated: February 24, 2026