Privacy Policy

1. Who We Are

BlogSprint ("we," "us," or "our") operates the BlogSprint for WooCommerce WordPress plugin and the blogsprint.io website. Our service generates AI-written blog posts from your WooCommerce product catalog.

For privacy questions, contact us at: support@blogsprint.io

2. Information We Collect

2.1 Account Information

When you connect the BlogSprint plugin, we collect:

• Your email address
• Your WordPress site URL
• Your subscription plan and billing status

2.2 Product Data

To generate blog posts, the plugin reads from your WooCommerce store and sends the following to our servers:

• Product names, descriptions, and short descriptions
• Product categories and attributes
• Product SKUs

We do not collect order data, customer data, payment information, or any personally identifiable information about your customers.

2.3 Generated Content

We store records of posts generated through our service, including post titles, the WordPress post ID, and generation metadata (model used, timestamp). We do not store the full content of generated posts on our servers after delivery.

2.4 Billing Information

Subscription payments are processed by Stripe. We do not store credit card numbers or payment details. We receive billing events (subscription created, renewed, cancelled) from Stripe to manage your account status.

2.5 Usage Data

We collect basic usage data including API request logs and error logs for debugging and service improvement. These logs are retained for up to 30 days.

3. How We Use Your Information

• To provide the BlogSprint service — generating blog posts from your product data
• To manage your account, subscription, and credit balance
• To send transactional emails related to your account (billing receipts, account notices)
• To debug errors and improve the reliability of our service
• To comply with legal obligations

We do not use your data for advertising, marketing profiling, or any purpose beyond operating the BlogSprint service.

4. Third-Party AI Providers

4.1 OpenAI (Free Plan)

Free plan users' product data is sent to OpenAI (openai.com) for processing via their GPT-4o mini model. OpenAI's data handling is governed by their Privacy Policy and Usage Policies. API data submitted through the OpenAI API is not used to train OpenAI models by default.

4.2 Anthropic (Paid Plans)

Starter, Professional, and Agency plan users' product data is sent to Anthropic (anthropic.com) for processing via their Claude Sonnet model. Anthropic's data handling is governed by their Privacy Policy. API data is not used to train Anthropic models.

We transmit only the minimum product data necessary to generate a relevant blog post. We do not transmit customer personal data, order data, or financial data to AI providers.

5. Third-Party Services

5.1 Stripe

We use Stripe (stripe.com) to process subscription payments. Stripe is a PCI DSS Level 1 certified payment processor. Your payment information is handled directly by Stripe and is subject to their Privacy Policy.

5.2 Railway

Our backend infrastructure runs on Railway (railway.app). Your data (account records, generation logs) is stored on Railway-hosted PostgreSQL databases. Railway's infrastructure is hosted on cloud providers with industry-standard security practices.

5.3 Vercel

This website is hosted on Vercel (vercel.com) and subject to their Privacy Policy. Vercel may collect standard web analytics (IP address, browser type, pages visited) for hosting and security purposes.

6. Data Retention

• Account data: Retained for the duration of your account. Deleted within 30 days of account deletion upon request.
• Generation logs: Post title and metadata retained indefinitely to power your dashboard history. Full post content is not retained server-side.
• API request logs: Retained for up to 30 days for debugging.
• Billing records: Retained for 7 years as required by financial regulations.

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• API token authentication for all plugin-to-server communication
• Database access restricted to our application servers
• No storage of plaintext passwords

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Objection: Object to certain uses of your data

To exercise any of these rights, contact us at support@blogsprint.io. We will respond within 30 days.

9. Children's Privacy

BlogSprint is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International Data Transfers

BlogSprint is operated from the United States. If you access our service from outside the United States, your data will be transferred to and processed in the United States. By using our service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions or requests:

• Email: support@blogsprint.io
• Website: blogsprint.io/support