Privacy Policy

1. Who We Are

Blendsor is an artificial intelligence application designed exclusively for professional colorists. Our mission is to empower your talent with precision technology, always keeping data security as a fundamental pillar.

For complete data controller information, please visit our Legal Notice.

2. Data We Collect

Your Professional Account Data

• Name and email to identify you on the platform
• Salon information (optional)
• Color brand preferences

Your Clients' Data

• Client name (to identify records)
• Color history and applied formulas
• Photos for chromatic analysis (with consent)
• Technical notes: porosity, underlying pigment, previous treatments

Technical Data

• Device and browser information
• Usage logs to improve the service

3. How We Use Your Information

We use data exclusively to:

• Generate precise formulas using our AI algorithms
• Maintain history of each client to ensure consistency
• Improve our algorithms in an aggregated and anonymous way
• Internally classify your account's usage type (professional or personal) based on your conversations, to adapt the product and our communications (legitimate interest, Art. 6(1)(f) GDPR). This classification is strictly internal, is never shared with third parties, produces no legal effects on you, and you can see it by requesting your data export from the app
• Communicate with you about important service updates

4. Security and Storage

We implement enterprise-level security measures:

• Servers in the European Union (Supabase, Frankfurt)
• AES-256 encryption for all photographs
• HTTPS/TLS connections for all communications
• Restricted access only to authorized personnel

Photo Retention

Photos sent in the chat are automatically deleted after 24 hours. Photos used for analysis (colorimetry, face shape) are automatically deleted after 14 days. Photos the professional saves with a client's formula are kept for 90 days, and the before/after photos in the client's record for the duration of the professional relationship with that client, as a visual history of the service. Any of them can be deleted manually at any time from the application, and they are removed when consent is revoked or the account is deleted.

5. Third-Party Sharing

Blendsor only shares data with the following third-party services:

• AI model providers: For photo analysis and formula generation. Images are sent encrypted and always with the client's consent (safety checklist in the app). These providers do not use your data to train their models and only retain requests temporarily (up to 55 days) for security and abuse-prevention purposes. Where transfers outside the EEA are involved, they rely on Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR).
• Supabase: Secure storage infrastructure in the EU
• Cloudflare: Application protection and performance
• PostHog: Product analytics to improve the mobile app experience. Data is stored in the EU (Frankfurt). We collect usage data (screen navigation, feature usage) and, after sign-in, your account identifier (Supabase user UUID) and email address as a person trait so we can attribute support requests, debug abandoned funnels, and honour deletion requests. We do not send any other personally identifiable information. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You may request erasure of your PostHog profile under Art. 17 — see Section 6.
• TikTok: For publishing video content through our social media integration. Only content you explicitly choose to share is sent to TikTok. No client data or personal information is shared with TikTok. International transfer: TikTok may transfer data outside the European Economic Area (EEA) to countries without equivalent protection. Such transfers rely on Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR). See TikTok's privacy policy.

Our AI providers, Supabase, Cloudflare, and PostHog comply with GDPR and maintain the highest security standards. TikTok's data processing is governed by Standard Contractual Clauses as described above.

6. Your Rights (GDPR)

As a European user, you have the right to:

• Access: Request a copy of all your data
• Rectification: Correct inaccurate information
• Deletion: Delete your account and all associated data
• Portability: Export your data in a standard format
• Objection: Limit certain uses of your information
• Withdraw consent: At any time, without consequences

To exercise any of these rights, contact us at hello@blendsor.com. We will respond within a maximum of 30 days.

7. How to Delete Your Account and Data

You can delete your account and all your data easily:

From the app (recommended)

1. Open Blendsor and go to Settings (gear icon)
2. Tap on Privacy & Security
3. Scroll down to Delete Account
4. Type "DELETE" to confirm and enter your password
5. Your account and all data will be permanently deleted

By email

If you prefer not to use the app, send an email to hello@blendsor.com with the subject "Delete my account" from the email associated with your account. We will process your request within a maximum of 30 days.

Delete only some data

If you only want to delete certain data without deleting your account:

• Client photos: Settings → Privacy → Revoke photo consent
• A client's record: Open the client record → Menu → Delete client
• Export your data: Settings → Privacy → Export my data

8. Client Photos

We understand the sensitivity of your clients' images:

• Only captured with explicit client consent
• Stored encrypted and separate from identifying data
• Used for chromatic analysis and, if the professional saves them, as a before/after visual history in the client's record
• You can delete them at any time
• Chat photos are automatically deleted after 24 hours; analysis photos, after 14 days; photos saved with a client's formula are kept for 90 days; before/after photos, for the duration of the client relationship. All of them are removed when consent is revoked

9. Minors

Blendsor is designed for professionals. We do not intentionally collect data from individuals under 16 years of age. If we detect that we have received information from a minor, we will delete it immediately.

10. Changes to This Policy

We may update this policy occasionally. We will notify you of any significant changes by email or through a notice in the application. We recommend reviewing this page periodically.

11. Contact

If you have questions about this policy or how we handle your data, write to us at hello@blendsor.com.

Complete data controller information is available in our Legal Notice.

You can also exercise your GDPR rights through the Spanish Data Protection Agency.