Privacy Policy

1. Who we are

Bloffee (“Bloffee”, “we”, “us”) is a blog-automation platform operated by Be-Found. Be-Found is currently in the process of incorporation (“in oprichting”) in the Netherlands; a Chamber of Commerce (KVK) number and VAT (BTW) number will be published here as soon as registration is complete. Until then, you can reach us at coffee@bloffee.com for any question about this policy or about who is legally responsible for your data. Registered address: Rielsedijk 3, 5051PH Goirle, Nederland.

2. What data we collect

• Account data: name, email address, company name, and login credentials when you create a Bloffee account.
• Content data: the brand information, topics, keywords, and any source material you provide us so our platform can generate blog content on your behalf, plus the content our platform generates and publishes for you.
• Billing data: billing name, address and transaction history. Card details themselves are collected and stored by our payment processor (Stripe), never by us directly.
• Usage data: pages visited, features used, device/browser type, and IP address, collected through privacy-respecting analytics (see “Cookies and analytics” below).
• Communications: messages you send us through our contact form, demo bookings, or support emails.

3. Why we process your data and our legal basis

• To provide the service you signed up for (contract performance) — creating your account, generating and publishing content, billing you.
• To keep the platform secure and improve it (legitimate interest).
• To send you product updates or marketing emails, only where you have opted in (consent); you can withdraw this consent at any time.
• To comply with legal obligations, such as tax record-keeping.

4. Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf (our “processors”), under contract, and only to the extent needed to run the platform:

• Stripe — payment processing.
• Resend — transactional and marketing email delivery.
• Cloudinary — image hosting and delivery for generated content.
• Railway — cloud hosting and database infrastructure.
• OpenAI and/or Anthropic — AI models used to help generate blog content. Content you submit for content generation may be sent to these providers for processing. We do not permit these providers to use your content to train their general-purpose models beyond what is contractually necessary to provide the service, and we do not control their independent privacy practices — we encourage you to review their policies if you have concerns.

Some of these providers are located outside the European Economic Area (notably the United States). Where that is the case, we rely on appropriate safeguards such as the EU Standard Contractual Clauses to ensure your data remains protected.

5. How long we keep your data

We keep account and content data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution requirements. You can ask us to delete your account and associated data at any time (see “Your rights” below); we will do so unless legally required to retain specific records.

6. Your rights

Under the GDPR/AVG, you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data; restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time where processing is based on consent; and lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your data properly. To exercise any of these rights, email coffee@bloffee.com. We will respond within the timeframes required by law.

7. Cookies and analytics

We use privacy-friendly, cookie-free analytics (Plausible and a self-hosted analytics script) to understand how visitors use our site. These tools do not use tracking cookies and do not collect personally identifiable information for advertising purposes. If this changes in the future, we will update this page and request consent where required.

8. Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. No system can be guaranteed 100% secure, and we cannot promise that data transmission over the internet is entirely risk-free — but we take security seriously and will notify you and, where required, the relevant authorities in the event of a data breach affecting your personal data.

9. Children

Our service is intended for businesses and professionals. We do not knowingly collect personal data from children under 16.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new “last updated” date. Material changes will be communicated by email where appropriate.

11. Contact

Questions about this policy or your data: coffee@bloffee.com, Rielsedijk 3, 5051PH Goirle, Nederland.