Privacy Policy

1. Who We Are

BlogSprint ("we," "us," or "our") operates the BlogSprint for WooCommerce WordPress plugin, the BlogSprint for Shopify app, and the blogsprint.io website. Our service generates AI-written blog posts from your store's product catalog.

For privacy questions, contact us at: support@blogsprint.io

2. Information We Collect

2.1 Account Information

When you connect BlogSprint, we collect:

• Your email address (for WooCommerce: provided during setup; for Shopify: your store owner email obtained via the Shopify Admin API)
• Your store URL (WordPress site URL or Shopify store domain)
• Your subscription plan and billing status

2.2 Product Data

To generate blog posts, BlogSprint reads from your store and sends the following to our servers:

• Product names, descriptions, and short descriptions
• Product categories and collections
• Product SKUs

We do not collect order data, customer data, payment information, or any personally identifiable information about your customers.

2.3 Shopify-Specific Data

For Shopify merchants, BlogSprint requests the following access scopes via Shopify OAuth:

• read_products, read_product_listings: To read your product catalog for content generation
• read_content, write_content: To read your blogs and create/publish articles on your behalf

We access your shop name, owner email, and timezone via the Shopify Admin API solely for account setup and scheduling purposes. We do not access customer data, orders, financials, or any other store data beyond what is listed above.

2.4 Generated Content

We store records of posts generated through our service, including post titles, the post ID, and generation metadata (model used, timestamp). We do not store the full content of generated posts on our servers after delivery.

2.5 Billing Information

For WooCommerce merchants, subscription payments are processed by Stripe. For Shopify merchants, subscription payments are processed by Shopify's built-in billing system. We do not store credit card numbers or payment details. We receive billing events (subscription created, renewed, cancelled) to manage your account status.

2.6 Usage Data

We collect basic usage data including API request logs and error logs for debugging and service improvement. These logs are retained for up to 30 days.

3. How We Use Your Information

• To provide the BlogSprint service — generating blog posts from your product data
• To manage your account, subscription, and credit balance
• To send transactional emails related to your account (billing receipts, account notices)
• To debug errors and improve the reliability of our service
• To comply with legal obligations

We do not use your data for advertising, marketing profiling, or any purpose beyond operating the BlogSprint service.

4. Third-Party AI Providers

4.1 OpenAI (Free Plan)

Free plan users' product data is sent to OpenAI (openai.com) for processing via their GPT-4o mini model. OpenAI's data handling is governed by their Privacy Policy and Usage Policies. API data submitted through the OpenAI API is not used to train OpenAI models by default.

4.2 Anthropic (Paid Plans)

Starter, Professional, and Agency plan users' product data is sent to Anthropic (anthropic.com) for processing via their Claude Sonnet model. Anthropic's data handling is governed by their Privacy Policy. API data is not used to train Anthropic models.

We transmit only the minimum product data necessary to generate a relevant blog post. We do not transmit customer personal data, order data, or financial data to AI providers.

5. Third-Party Services

5.1 Shopify

For Shopify merchants, our app is distributed through the Shopify App Store and uses the Shopify Admin API. Your use of Shopify is governed by Shopify's Privacy Policy. BlogSprint is an independent app and is not affiliated with Shopify Inc.

5.2 Stripe

We use Stripe (stripe.com) to process subscription payments for WooCommerce merchants. Stripe is a PCI DSS Level 1 certified payment processor. Your payment information is handled directly by Stripe and is subject to their Privacy Policy.

5.3 Railway

Our backend infrastructure runs on Railway (railway.app). Your data (account records, generation logs) is stored on Railway-hosted PostgreSQL databases. Railway's infrastructure is hosted on cloud providers with industry-standard security practices.

5.4 Vercel

This website is hosted on Vercel (vercel.com) and subject to their Privacy Policy. Vercel may collect standard web analytics (IP address, browser type, pages visited) for hosting and security purposes.

6. Data Retention

• Account data: Retained for the duration of your account. Deleted within 30 days of account deletion upon request.
• Shopify app uninstall: When you uninstall the BlogSprint Shopify app, your Shopify session data and associated account connection are deleted from our servers automatically. Your generated articles remain in your Shopify store as they are stored by Shopify, not by us.
• Generation logs: Post title and metadata retained indefinitely to power your dashboard history. Full post content is not retained server-side.
• API request logs: Retained for up to 30 days for debugging.
• Billing records: Retained for 7 years as required by financial regulations.

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• API token authentication for all plugin-to-server communication
• OAuth 2.0 for Shopify app authentication
• Database access restricted to our application servers
• No storage of plaintext passwords

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Objection: Object to certain uses of your data

To exercise any of these rights, contact us at support@blogsprint.io. We will respond within 30 days.

9. Children's Privacy

BlogSprint is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International Data Transfers

BlogSprint is operated from the United States. If you access our service from outside the United States, your data will be transferred to and processed in the United States. By using our service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions or requests:

• Email: support@blogsprint.io
• Website: blogsprint.io/support