Privacy Policy

Who we are

BlobMap is a software product that helps organisations understand what their teams are actually doing. We are a small team building in the open.

Questions about privacy? Email us at privacy@blobmap.com.

What data we collect

We collect only what is necessary to provide the service:

• Email address and display name when you create an account
• Work items ("blobs") and relationships that you or your team enter into BlobMap
• Basic usage data — pages visited, actions performed — to help us improve the product
• Organisation and team metadata (names, membership)

We do not collect payment information directly — payments are processed by Stripe, who have their own privacy policy.

How we use your data

Your data is used exclusively to:

• Provide and operate the BlobMap service
• Send transactional emails (password resets, invitations)
• Understand how the product is used so we can improve it
• Respond to support requests

We never sell your data. We never share it with third parties for marketing purposes.

Data storage and security

All data is stored on servers in the EU. We use Supabase as our database and infrastructure provider, which provides encryption at rest and in transit.

Access to production data is restricted to authorised team members only, and only for the purpose of supporting customers or diagnosing issues.

Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days. Organisation data may be retained for a further 90 days in encrypted backups before permanent deletion.

Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Object to processing of your data

To exercise any of these rights, email privacy@blobmap.com. We will respond within 30 days.

Cookies

We use a single session cookie to keep you logged in. We do not use advertising cookies or tracking cookies. We do not use third-party analytics that set their own cookies (like Google Analytics).

Changes to this policy

If we make material changes to this policy, we will notify users by email and update the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.