Document Effective Date: 10.11.2025
Privacy Policy
This Privacy Policy explains how Blazeauth collects, uses, and protects personal data when you access or use the Service.
DEFINED TERMS
means this Blazeauth Privacy Policy.
means Vladislav Nikitin, sole proprietor (individual entrepreneur) doing business as “Blazeauth” with principal place of business in the Russian Federation.
means the business entity or sole proprietor that creates or manages an Account and uses the Service solely for business or professional purposes and not as a consumer.
means any individual who accesses the Service through an Account, including the Customer and the Customer’s authorized users.
means the hosted Blazeauth software-as-a-service platform and related Sites, dashboards, interfaces, tools, APIs/SDKs, documentation, and other materials that the Company makes available from time to time.
means the websites and web pages the Company operates in connection with the Service (including any subdomains and successor domains).
means a registered account in the Service created using an email address or a supported OAuth provider (such as Google or GitHub).
means any information relating to an identified or identifiable natural person, to the extent such information is protected as personal data under Applicable Law.
means the laws of the Russian Federation and, where relevant, other data protection laws that may apply to the Company’s processing of Personal Data.
Scope and Role of the Company
Section 1
Scope of this Privacy Policy
1.1
This Privacy Policy applies to Personal Data that the Company processes in connection with the Service and the Site, including when you register an Account, sign in using email or OAuth, or otherwise interact with the Service for business purposes.
Business Use Only
1.2
The Service is intended solely for business and professional use. It is not intended for household or purely personal use by consumers.
Controller and Processor Roles
1.3
For Personal Data that the Company collects directly from Users (for example, Account data), the Company generally acts as a data controller. When a Customer submits Personal Data of its own end users to the Service, the Company processes such data as a data processor on behalf of the Customer, in accordance with the Terms and any applicable data processing agreement.
Personal Data We Collect
Section 2
Account and Authentication Data
2.1
When you register or sign in to the Service, we collect information such as your email address, name (if provided), and information about the authentication method you chose (email-based authentication or OAuth with providers such as Google or GitHub). We also process identifiers and tokens that are necessary to authenticate you securely.
Technical and Usage Data
2.2
When you access the Service, we may automatically receive technical data such as IP address, browser type, device and operating system information, timestamps of access, and basic usage logs. This information is used for security, abuse prevention, diagnostics, and to ensure the stable operation of the Service.
Content and Configuration Data
2.3
In the course of using the Service, you may submit configuration data, project settings, and other information that may incidentally contain Personal Data. The Customer is responsible for ensuring that any such data is collected and submitted in compliance with Applicable Law.
How We Use Personal Data
Section 3
Provision and Operation of the Service
3.1
We use Personal Data to create and maintain Accounts, provide access to the Service, authenticate Users, operate core features, and provide customer support, all in accordance with the Contract between the Customer and the Company.
Security, Abuse Prevention, and Analytics
3.2
We use technical and usage data to protect the Service and Users from fraud, abuse, and security incidents, to monitor availability and performance, and to improve the reliability and stability of the Service.
Service-Related Communications
3.3
We may use your email address and other contact details to send important service-related messages, such as verification emails, security notifications, changes to the Service or to this Privacy Policy, and other communications that are necessary for the operation of the Service. We do not use your email address for advertising or mass marketing campaigns.
Legal Obligations and Protection of Rights
3.4
We may process Personal Data where required to comply with Applicable Law or to protect our lawful rights, the rights of Customers, Users, or third parties, for example in connection with the detection and investigation of misuse or legal claims.
Personal Data Sharing
Section 4
No Sale or Sharing for Advertising
4.1
The Company does not sell Personal Data and does not share Personal Data with third parties for their independent advertising or marketing purposes.
Service Providers and Infrastructure
4.2
The Company may use third-party service providers (for example, hosting, infrastructure, email delivery, or error monitoring providers) that process Personal Data strictly on the Company’s instructions and solely for the purposes described in this Privacy Policy. Such providers are required to protect Personal Data with appropriate safeguards.
Legal Requirements
4.3
We may disclose Personal Data if required by Applicable Law or a valid legal process, or when we believe in good faith that such disclosure is reasonably necessary to protect the rights, property, or safety of the Company, Customers, Users, or the public.
Data Retention and Deletion
Section 5
General Retention
5.1
We retain Personal Data for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with Applicable Law, and resolve disputes. Retention periods may vary depending on the type of data and the context of processing.
Account Deletion by the User
5.2
The Service provides a way to delete your Account, or you may request deletion of your Account by contacting the Company using the contact details provided on the Site. After the Account is deleted, access to the Account is disabled and Personal Data associated with the Account is deleted or anonymized within a reasonable period, unless Applicable Law requires a longer retention period.
Backups and Logs
5.3
Copies of Personal Data may remain for a limited time in system backups and security logs that are maintained for the stability and security of the Service. Such copies are automatically deleted in accordance with our standard retention schedules.
Cookies and Similar Technologies
Section 6
Cookies Used by the Service
6.1
The Service may use cookies and similar technologies that are necessary for authentication, maintaining your session, and ensuring the security and proper functioning of the Service. These cookies are generally set when you sign in or interact with the Service and are not used for advertising.
OAuth and Third-Party Cookies
6.2
When you choose to sign in using a third-party OAuth provider such as Google or GitHub, that provider may set its own cookies or similar technologies. The processing of data by such providers is governed by their own privacy policies, and we recommend that you review those policies separately.
Data Security
Section 7
Security Measures
7.1
The Company implements reasonable technical and organizational measures designed to protect Personal Data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of information.
Your Rights, Changes, and Contacts
Section 8
Your Rights and Choices
8.1
Subject to Applicable Law, you may have the right to request access to your Personal Data, to correct inaccurate Personal Data, to delete Personal Data, or to object to certain processing. Many of these actions can be performed directly through your Account settings; otherwise, you may contact the Company using the contact details provided on the Site.
Changes to this Privacy Policy
8.2
The Company may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on the Site and update the effective date, and we may also send a service-related notification to your email address or through the Service interface.
Contact Details
8.3
If you have questions about this Privacy Policy or our processing of Personal Data, you can contact the Company using the contact email address indicated on the Site or in your Account dashboard.