This notice explains what personal data Basal Blogs ("we", "us") collects, how we use it, and the choices you have. It applies to visitors, account holders, and the subscribers on customer lists that account holders manage through the Service.
1. Data we collect
- Account data: name, email address, and authentication data, via Firebase Authentication (Google sign-in or email/password).
- Content you create: blog posts, images, tags, and API keys associated with your account.
- Customer list data: if you use the Customers/Campaigns feature, the names and email addresses of subscribers you add, and email delivery/engagement metadata.
- Billing data: plan and subscription status. Card and payment details are collected and processed directly by Paddle, our payment processor — we do not receive or store your card number.
- Usage data: basic technical logs (e.g. API request metadata) needed to operate, secure, and rate-limit the Service.
2. How we use it
- To provide, maintain, and secure the Service and your account;
- To send transactional email (welcome, verification, billing/upgrade confirmations);
- To send campaign emails you schedule to your own customer lists, on your instruction;
- To process payments and manage subscriptions via Paddle;
- To generate AI-assisted content and images at your request (see Section 4);
- To comply with legal obligations.
3. Sub-processors
We rely on the following third parties to operate the Service:
- Google Firebase — authentication and database (Firestore) hosting.
- Cloudflare R2 — storage for uploaded and AI-generated images.
- Paddle.com Market Limited — payment processing and billing, acting as merchant of record.
- Resend — transactional and campaign email delivery.
- Alibaba Cloud (DashScope/Qwen) — AI text and image generation, when you use those features. Prompts and generated content are sent to this provider for processing.
- Tavily — web search results, when you use the Task/research feature. Your task instructions are sent to this provider to retrieve search results.
4. AI features
If you use AI-assisted drafting, image generation, or the research Task feature, the text you enter and content derived from it (including web search queries) is sent to our AI and search providers listed above to generate a response. Do not enter sensitive personal data you do not want processed by these providers.
5. Customer list subscribers
If you manage a customer list, you are the data controller for the subscribers you add, and are responsible for having a lawful basis to email them and for honoring unsubscribe requests. We act as a data processor for that data: subscriber records (including an unsubscribe token) are never client-readable and are only accessible through the Service's own campaign-sending flow. Every campaign email includes a working unsubscribe link.
6. Data retention
We retain account and content data for as long as your account is active. If you delete your account, we delete or anonymize your data within a reasonable period, except where retention is required for legal, billing, or security purposes.
7. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us at info@thebasallabs.com to exercise these rights.
8. Security
We use industry-standard measures to protect your data, including scoped access controls, hashed API keys, and encrypted storage credentials. No system is completely secure, and we cannot guarantee absolute security.
9. Changes to this notice
We may update this notice from time to time; the "Last updated" date above reflects the latest revision.
10. Contact
Questions about this notice can be sent to info@thebasallabs.com.