Privacy Policy | Blogizi

This Privacy Policy explains how ByteMind, SIA (“Blogizi”, “we”, “us”, or “our”) collects, uses, and protects information when you use https://blogizi.com (the “Website”), the Blogizi dashboard, hosted blogs, APIs, and related services (collectively, the “Service”).

By using the Service, you acknowledge this Privacy Policy. If you do not agree, please do not use the Service.

1. Who We Are

The data controller responsible for your personal data is:

ByteMind, SIA
Registration No. 40203626917
Latvia
Email: info@bytemind.lv

2. Information We Collect

We collect information in three broad categories: information you provide, information collected automatically, and information related to visitors of blogs you publish through Blogizi.

2.1 Information You Provide

Account information: When you sign up or sign in, we collect your name, email address, and profile image (if you use Google sign-in). If you sign in with email, we send a magic link to verify your address.
Project and blog settings: Information you enter in the dashboard, such as project name, blog slug, app domain, GitHub repository URL, branch name, blog description, SEO settings, theme preferences, custom domain details, and social links.
Content you publish: Blog posts, tags, metadata, logos, favicons, cover images, and other materials you upload or submit through the Service.
API keys: We generate and store account API keys so your CLI or integrations can authenticate with Blogizi. You should treat these as secrets.
Payment information: If you subscribe to a paid plan, payments are handled by Creem. We receive billing-related identifiers (such as Creem customer ID and subscription plan) but do not store full payment card numbers on our servers.
Support and communications: Information you send us when you contact support or respond to our emails.

2.2 Information Collected Automatically

Session and authentication data: We use cookies and similar technologies to keep you signed in and secure your session (for example, through NextAuth).
Website usage on blogizi.com: We use Plausible Analytics on the main Website. Plausible is designed to collect aggregated, privacy-friendly traffic data without cross-site tracking or advertising profiles.
Technical and security logs: Our hosting provider and infrastructure may log IP addresses, request timestamps, user agents, and error data needed to operate, secure, and debug the Service.

2.3 Blog Visitor Analytics

If you publish a blog through Blogizi, we collect first-party analytics about visitors to that public blog so we can show you dashboard statistics. This may include:

Pages viewed and session duration
Referrer and traffic source
Approximate country (derived from request headers)
Browser type (derived from user agent)
Pseudonymous identifiers (visitor ID and session ID stored in the visitor's browser)

We filter out known bots where possible. Blog analytics are provided to the blog owner (you), not used to build advertising profiles about visitors.

3. How We Use Information

We use collected information to:

Provide, operate, and maintain the Service
Authenticate users and manage accounts
Host and serve your public blog, sitemaps, and SEO metadata
Process subscriptions and manage billing through Creem
Send transactional emails (such as sign-in links)
Show analytics in your dashboard
Register and manage custom domains with our hosting provider
Store and deliver images you upload (via Cloudflare R2)
Prevent abuse, fraud, and security incidents
Improve the Service and fix bugs
Comply with legal obligations

4. Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process personal data on the following bases:

Contract: To provide the Service you request, including account access, hosting, and paid features
Legitimate interests: To secure the Service, prevent abuse, improve functionality, and measure aggregated website usage, where those interests are not overridden by your rights
Consent: Where required, such as for optional communications or non-essential cookies if we introduce them
Legal obligation: Where we must retain or disclose data to comply with applicable law

5. Third-Party Service Providers

We use trusted processors to run Blogizi. They process data on our instructions and only as needed to provide their services:

Creem — payment processing
Google — OAuth sign-in
Resend — transactional email delivery
MongoDB Atlas — database hosting
Vercel — application hosting and custom domain management
Cloudflare R2 — image storage and delivery
Plausible — privacy-friendly analytics on the main Website

When you use external tools (such as your own AI provider, GitHub, or a CLI on your machine), those services are governed by their own privacy policies, not this one.

6. How We Share Information

We do not sell your personal information. We may share information:

With service providers listed above, under data processing agreements where applicable
With the public, when you publish a blog or content you choose to make public
With blog owners (our customers), when you visit a Blogizi-hosted blog — visit data appears in that customer's analytics dashboard
When required by law, court order, or to protect rights, safety, and security
In connection with a merger, acquisition, or sale of assets, with appropriate safeguards

7. International Data Transfers

We are based in Latvia. Your data may be processed in the European Union and in other countries where our providers operate (for example, the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

8. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

If you delete your account or project, we will delete or anonymize associated data within a reasonable period, except where retention is required by law or for legitimate backup and security purposes.

9. Security

We implement technical and organizational measures designed to protect your information, including encrypted connections (HTTPS), access controls, and secure storage with reputable providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to data portability. Where processing is based on consent, you may withdraw consent at any time.

You may also lodge a complaint with your local data protection authority. In Latvia, this is the Data State Inspectorate (www.dvi.gov.lv).

To exercise your rights, contact us at info@bytemind.lv. We may need to verify your identity before responding.

11. Cookies

We use essential cookies and similar technologies required for authentication, security, and core functionality. The main Website may use Plausible Analytics, which does not use cookies for tracking in the same way as many advertising analytics tools.

Your browser may allow you to block or delete cookies, but some parts of the Service (such as signing in) may not work properly without them.

12. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

13. Public Blogs and Third-Party Sites

Blogs published through Blogizi are public by default. Content you publish, including posts and images, may be indexed by search engines and viewed by anyone on the internet.

Your blog may link to third-party websites. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the “Last updated” date. Where appropriate, we may notify you by email.

15. Contact

For privacy-related questions or requests, contact us at:

ByteMind, SIA
Registration No. 40203626917
Latvia
Email: info@bytemind.lv