Privacy Policy

1. Who We Are

Blendsor is an artificial intelligence application designed exclusively for professional colorists. Our mission is to empower your talent with precision technology, always keeping data security as a fundamental pillar.

For complete data controller information, please visit our Legal Notice.

2. Data We Collect

Your Professional Account Data

• Name and email to identify you on the platform
• Salon information (optional)
• Color brand preferences

Your Clients' Data

• Client name (to identify records)
• Color history and applied formulas
• Photos for chromatic analysis (with consent)
• Technical notes: porosity, underlying pigment, previous treatments

Technical Data

• Device and browser information
• Usage logs to improve the service

3. How We Use Your Information

We use data exclusively to:

• Generate precise formulas using our AI algorithms
• Maintain history of each client to ensure consistency
• Improve our algorithms in an aggregated and anonymous way
• Communicate with you about important service updates

4. Security and Storage

We implement enterprise-level security measures:

• Servers in the European Union (Supabase, Frankfurt)
• AES-256 encryption for all photographs
• HTTPS/TLS connections for all communications
• Restricted access only to authorized personnel

Photo Retention

Client images are automatically deleted after 90 days of analysis. You can delete them manually at any time from the application.

5. Third-Party Sharing

Blendsor only shares data with the following third-party services:

• OpenAI: For AI processing (anonymized data, no identifiable information)
• Supabase: Secure storage infrastructure in the EU
• Cloudflare: Application protection and performance
• PostHog: Product analytics to improve the mobile app experience. Data is stored in the EU (Frankfurt). Only anonymized usage data is collected (screen navigation, feature usage), with no personally identifiable information. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• TikTok: For publishing video content through our social media integration. Only content you explicitly choose to share is sent to TikTok. No client data or personal information is shared with TikTok. International transfer: TikTok may transfer data outside the European Economic Area (EEA) to countries without equivalent protection. Such transfers rely on Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR). See TikTok's privacy policy.

OpenAI, Supabase, Cloudflare, and PostHog comply with GDPR and maintain the highest security standards. TikTok's data processing is governed by Standard Contractual Clauses as described above.

6. Your Rights (GDPR)

As a European user, you have the right to:

• Access: Request a copy of all your data
• Rectification: Correct inaccurate information
• Deletion: Delete your account and all associated data
• Portability: Export your data in a standard format
• Objection: Limit certain uses of your information
• Withdraw consent: At any time, without consequences

To exercise any of these rights, contact us at hello@blendsor.com. We will respond within a maximum of 30 days.

7. How to Delete Your Account and Data

You can delete your account and all your data easily:

From the app (recommended)

1. Open Blendsor and go to Settings (gear icon)
2. Tap on Privacy & Security
3. Scroll down to Delete Account
4. Type "DELETE" to confirm and enter your password
5. Your account and all data will be permanently deleted

By email

If you prefer not to use the app, send an email to hello@blendsor.com with the subject "Delete my account" from the email associated with your account. We will process your request within a maximum of 30 days.

Delete only some data

If you only want to delete certain data without deleting your account:

• Client photos: Settings → Privacy → Revoke photo consent
• A client's record: Open the client record → Menu → Delete client
• Export your data: Settings → Privacy → Export my data

8. Client Photos

We understand the sensitivity of your clients' images:

• Only captured with explicit client consent
• Stored encrypted and separate from identifying data
• Used only for chromatic analysis
• You can delete them at any time
• Automatically deleted after 90 days

9. Minors

Blendsor is designed for professionals. We do not intentionally collect data from individuals under 16 years of age. If we detect that we have received information from a minor, we will delete it immediately.

10. Changes to This Policy

We may update this policy occasionally. We will notify you of any significant changes by email or through a notice in the application. We recommend reviewing this page periodically.

11. Contact

If you have questions about this policy or how we handle your data, write to us at hello@blendsor.com.

Complete data controller information is available in our Legal Notice.

You can also exercise your GDPR rights through the Spanish Data Protection Agency.