Privacy

This page explains what information BlowMind (BlowMind Corporation) handles, why, and what you can do about it. The short version: your data works for you and only for you. We don’t sell it, we don’t use it for anyone else, and we don’t train AI on it.

1. Two roles

• Your account. For the information you give us to have an account (your name, email, the organisation you belong to), we decide how it’s used, as described here.
• Your organisation’s content. For what an organisation puts into BlowMind, including details about its partners and the answers they send, the organisation decides. We handle it on the organisation’s behalf and only to run BlowMind for it.

2. What we handle

• Account details: your email address, the name you give in your profile, and your sign-in. Passwords are handled by our authentication provider and stored only in hashed form. Partners sign in to the portal with one-time links sent to their email.
• Organisation details: its name and logo, its members and their roles.
• Content: folders, Minds, lines, lookup tables, formulas, notes, and files you import. We read an imported workbook to bring its contents in.
• Partner details and answers: partner names and email addresses an organisation enters, and what partners submit through links or the portal.
• Technical information: the IP address of requests to partner links, held briefly in memory to stop abuse; and the standard request logs our hosting provider keeps.
• Cookies and browser storage: a cookie that keeps you signed in, and browser storage for display preferences such as column widths. We use no advertising or tracking cookies and no third-party analytics.

3. How we use it

• to run BlowMind for your organisation: store your work, compute it, and show each person only what they may see;
• to send the emails BlowMind needs, such as sign-in links and invitations;
• to keep BlowMind secure and stop abuse;
• to help you when you ask us for support.

We never use one organisation’s data, or its partners’ answers, for another organisation. That includes price benchmarks, vendor or customer suggestions and rankings, whether anonymised or aggregated or not. Anything built on shared data would be opt-in for every party whose data it uses, explained in advance, and off unless they turn it on. We never sell data. See Terms of Use, section 5.

4. AI

Some features send the part of your content they need to our AI provider, Anthropic, to produce a result for your request. These include writing a formula or Function from your description, proposing how to read an imported workbook, and building a structure. Under Anthropic’s commercial terms, this content is not used to train its models. We don’t train models on your data either.

5. Who else handles it

• Supabase: database and authentication. Your data is stored in the United States (us-east-1).
• Vercel: hosting of the BlowMind application.
• Resend: delivery of BlowMind’s emails, such as sign-in links and invitations. It handles the recipient’s email address and the message.
• Anthropic: AI features, as described above.

Each works for us under its own terms and only to provide its service. If we add a provider that handles your data, we’ll update this page first.

6. Who can see your data

• Within your organisation, owners decide who sees which folders. Viewers can read but not change.
• A partner sees only the lines and columns sent to them. Columns marked private never travel. Suggestions offered while a partner types come only from what that partner can already see.
• Our staff open an organisation’s data only to fix a problem it has asked us to look at, or when the law requires it.

7. How long we keep it

We keep your organisation’s data while the organisation uses BlowMind. When something is deleted, it’s removed from the live system; copies in backups are removed within 7 days. When an organisation asks us to delete it, we delete all its data, except anything the law requires us to keep.

8. Your choices and rights

• You can update your profile, export Minds to Excel, and ask us for a full export of your organisation.
• You can ask us to access, correct or delete information about you. If you’re a partner, you can also ask the organisation that sent you the request; it decides about its own content.
• Depending on where you live, you may have further rights under local law, such as to object or to complain to a data protection authority.

Write to [contact email].

9. Security

Organisations are kept separate in the database, connections are encrypted, and partner links use long random codes. A link is the permission to answer, so share it only with the intended person; an organisation can close a request or set an expiry date on a link. No system is perfectly secure; if we learn of a breach affecting your data, we’ll tell you without undue delay.

10. Children

BlowMind is for businesses and isn’t meant for anyone under 16.

11. Changes and contact

If we change this page in a way that matters, we’ll tell your organisation’s owners before the change takes effect. Questions: [contact email] · BlowMind Corporation, [Registered address].