1. Two Categories of Individuals
A. Customers, the businesses (for example, real estate agencies) who subscribe to our Service.
B. End Leads, individuals who fill out a form on our Customer's own website (a homebuyer or seller, for example). We process this data on behalf of our Customer, not for our own independent purposes. Our Customer is the data controller for this data; we are the processor. See our Data Processing Agreement for the formal allocation of responsibilities.
2. Information We Collect
2.1 From Customers (our direct users)
- Name, email, company name, billing details (processed by our payment provider)
- Integration settings, support communications, and Slack or CRM credentials stored in encrypted form within our automation environment
2.2 About End Leads (processed on Customer's behalf, not collected by us directly)
- Name, email, phone number, message or inquiry text, submitted via Customer's own website form
- AI derived classification: intent (buyer or seller), estimated budget tier, urgency
- Growth plan only: enriched company or profile data, where the lead provided a business email
We do not sell End Lead data to any third party, and we do not use it for our own marketing purposes. It is processed solely to deliver the Service to our Customer.
3. How We Use Information
Customer data: to provide, bill for, and support the Service.
End Lead data: solely to generate the AI intent and budget classification, deliver the alert to Customer, and, where applicable, enrich the profile and draft a follow up email, all as instructed by, and for the sole benefit of, our Customer.
4. Sub-Processors and Service Providers
We use the following providers strictly as needed to deliver the Service:
- Anthropic (Claude API), receives lead name, message text, and inferred budget signals to generate classification and email drafts. Per Anthropic's commercial terms, inputs and outputs sent through the API are not used to train Anthropic's models by default.
- n8n, runs the automation and stores integration credentials in encrypted form. Starter and Growth production workflows are configured to minimize retained successful-execution payloads.
- Slack and our email delivery provider (e.g., Resend), receive lead summary data to deliver alerts
- Our enrichment data provider (Growth plan), receives company domain or name to return firmographic data
- Customer's own CRM (Follow Up Boss, HubSpot, or Salesforce, Growth plan), data is pushed using Customer's own API credentials; Customer's own privacy practices govern data once inside their CRM
- Bitwarden Send, may be used during onboarding for short-lived encrypted transfer of Customer integration credentials. End Lead Data is not placed in Bitwarden Send.
This list is kept current on this page, and Customers will be notified of material additions to it in advance.
5. Data Retention
Starter and Growth do not use a separate Blade Agent AI lead database as the long-term system of record. Successful production execution payloads are configured not to be retained in the normal workflow history. Limited diagnostic or failed-execution data may be retained for up to 7 days when necessary to troubleshoot delivery, then deleted unless a longer period is required by law or agreed with Customer.
Lead data delivered to Customer's Slack, email provider, or CRM is retained according to Customer's settings and those providers' terms. Integration credentials are retained for the active subscription and deleted or disabled within 30 days after termination, unless retention is required by law.
6. Data Security
- Data minimization: no separate long-term Blade Agent AI lead database is required for Starter and Growth
- Slack and CRM credentials are stored using n8n's encrypted credential storage and a deployment-specific encryption key
- HTTPS/TLS for all data in transit
- Successful production payload logging is minimized, and administrative access is limited to personnel who need it to configure or support the Service
- Onboarding pages do not request raw integration credentials; Customers may use a short-lived secure-share link instead
No method of transmission over the internet or electronic storage is completely secure. While we follow generally accepted industry practices to protect the information we handle, we cannot guarantee its absolute security.
7. Rights of End Leads
Because End Leads did not sign up directly with us, requests from them regarding their data (access, deletion, correction) should generally be directed to our Customer, the data controller, who owns the underlying relationship. We will assist our Customer in fulfilling such requests. If an End Lead contacts us directly, we will forward the request to the relevant Customer and assist as required by applicable law.
8. Rights of Customers
Customers may request access to, correction of, or deletion of the account and integration data we control by contacting info@bladeagentai.com. End Lead records already delivered to Customer's Slack, email, or CRM must generally be managed in those destinations.
9. Cookies and Tracking Technologies
Our marketing website does not currently use advertising or third party analytics cookies. It loads fonts from Google Fonts, which may involve a standard connection to Google's servers to serve font files. Our setup page is configured with no-store and no-referrer protections and does not collect raw integration credentials. If these practices change, we will update this section first.
10. Do Not Track
Because we do not currently use tracking cookies or cross site analytics, we do not respond differently to browser "Do Not Track" signals. If our tracking practices change, we will update this section to explain how we handle such signals.
11. Links to Other Websites
Our website and communications may contain links to third party sites, such as a Customer's CRM provider or a scheduling tool. We do not control and are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any site you visit.
12. Marketing Communications From Us
We may email our Customers (not End Leads) product updates or occasional relevant offers. Every such email includes a way to unsubscribe, and unsubscribing does not affect transactional emails needed to operate your account, such as billing or security notices.
13. International Considerations
Company currently operates only in the United States and Canada; we do not currently knowingly process End Lead Data of individuals located in the EU or UK. If Customer's End Leads include California residents, standard CCPA obligations apply to Customer as the controller; we support this as processor through our security and sub-processor commitments described above. Before Company or Customer expands processing to EU/UK individuals, this section will be updated with appropriate transfer mechanisms (for example, Standard Contractual Clauses), reviewed with counsel.
14. Children's Privacy
The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal information from anyone under 18.
15. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify Customers and update the "Effective" date at the top of this page.
16. Contact
Questions about this Policy can be sent to info@bladeagentai.com.