Privacy Policy
This policy explains how AKZM Digital, a sole trader based in the United Kingdom (“we”, the data controller), collects and uses your personal data when you use BlazonDeck. We follow the UK GDPR and Data Protection Act 2018. Contact us at hello@blazondeck.com.
1. What we collect
- Account data: your email address and authentication details.
- Content: the topics, briefs, uploads and posts you create and save.
- Usage & billing: plan, credit activity, and technical logs (e.g. IP, device, timestamps) for security and reliability.
- Payment data: handled by our payment provider. We don’t store your full card details.
2. How we use it
- To provide and operate the Service (generate, render and save your posts).
- To manage your account, plan, credits and billing.
- To provide support and send service messages (e.g. security, trial ending, payment issues).
- To secure the Service, prevent abuse, and meet legal obligations.
- To improve the Service. We do not sell your personal data.
3. Legal bases
We rely on: contract (to provide the Service you signed up for), legitimate interests (security, prevention of abuse, improving the product), legal obligation (e.g. tax records), and consent where required (e.g. optional marketing).
4. Service providers (processors)
We share data with trusted providers only to run the Service:
- Supabase: authentication and database (your account and saved posts).
- Vercel: hosting.
- OpenAI & fal.ai: AI generation of your text and images.
- Our payment provider: subscriptions, invoices and tax.
- Our email provider: account and service emails.
Some providers are outside the UK/EEA; where they are, transfers are protected by appropriate safeguards (such as Standard Contractual Clauses).
5. Retention
We keep account and content data for as long as your account is active, and for a reasonable period afterwards to meet legal, tax and security needs. You can delete your posts, and you can ask us to delete your account.
6. Your rights
Under UK GDPR you can request to access, correct, delete, restrict or port your data, and object to certain processing. To exercise any of these, email hello@blazondeck.com. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).
7. Cookies and similar technologies
Strictly necessary. We set a cookie to keep you signed in, and a short-lived security token when you connect an Instagram account (it protects that connection from being hijacked). The Service cannot work without these, so they are always on and we don’t ask for consent for them. We also store your light/dark preference on your device.
Analytics. We use Plausible to see which steps of the product people get stuck on. It sets no cookies, stores nothing on your device and collects no personal data. We see counts of events, never individuals. You can still switch it off.
Advertising. We may use advertising cookies from platforms such as Meta, TikTok or Google to measure whether an ad led to a signup. These load only if you allow them, and nothing is loaded before you choose. At the time of writing none are in use.
You can change or withdraw your choices at any time using in the footer. Refusing does not limit anything on the Service.
8. Children
The Service isn’t intended for anyone under 18, and we don’t knowingly collect their data.
9. Changes
We may update this policy; we’ll post the new date above and, for material changes, notify you.
10. Connecting your Instagram (Meta)
If you choose to connect your Instagram account, we use Meta’s Instagram API only to (a) read your basic account details (your Instagram user id and username) and (b) publish the carousels you create, to your account, when you ask us to. We request no other permissions. We never read your messages, followers, or private data.
To publish on your behalf we store an access token issued by Meta, encrypted at rest. We never share it and never use it for anything other than the publishing actions you initiate. You can disconnect at any time from your account settings, and this immediately and permanently deletes the stored token. You can also revoke BlazonDeck’s access from your Instagram app settings. To request deletion of any data associated with the Meta/Instagram connection, disconnect in-app or email hello@blazondeck.com. Our use of Instagram data complies with the Meta Platform Terms and Developer Policies.