Legal

Privacy policy

Last updated: April 2026

This Privacy Policy explains how Blue Box Data ("we", "our") handles personal information when you use our website and services.

Information we collect

  • Account data: name, email, billing details.
  • Usage data: API request metadata (timestamps, models, token counts) — never request bodies unless you opt in.
  • Web analytics: privacy-friendly aggregates only (Plausible).

Why we use it

  • To provide and improve the service.
  • To prevent abuse, comply with law, and bill accurately.
  • To send transactional emails (no marketing without explicit consent).

Sub-processors

We use a small number of vetted sub-processors (cloud, email, payments). The full list is published at /legal/subprocessors and updated 30 days before any change.

Your rights (GDPR / CCPA)

You can access, correct, export, or delete your data at any time from the dashboard, or by emailing privacy@build-blue.uk.

Retention

Account data is retained for the life of your account. Usage logs are kept for up to 90 days unless you configure otherwise. We honor deletion requests within 30 days.

Contact

Data Protection Officer: dpo@build-blue.uk.