Privacy Policy
Effective Date: March 9, 2026 | Last Updated: March 9, 2026
BluBees.ai ("BluBees," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at blubees.ai or use our platform and services (collectively, the "Services"). Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information as described herein.
1. Information We Collect
We may collect the following categories of personal information:
1.1 Information You Provide Directly
-
Account Registration Data: Name, email address, password, company name, job title, and billing information when you create an account.
-
Profile Information: Any additional information you voluntarily add to your profile.
-
Communications: Messages, support requests, feedback, and survey responses you send us.
-
Payment Information: Billing details processed securely through our third-party payment processors. We do not store full payment card numbers.
1.2 Information Collected Automatically
-
Usage Data: How you interact with our platform, including features used, workflows created, integrations configured, and actions performed.
-
Log Data: IP address, browser type and version, operating system, referring URLs, pages viewed, and timestamps.
-
Device Information: Device identifiers, hardware model, and network information.
-
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, analyze usage, and support marketing efforts. See Section 7 for more details.
1.3 Information from Third Parties
-
Integrated Services: When you connect third-party applications or services to BluBees.ai, we may receive data from those services as authorized by you.
-
Business Partners: We may receive information about you from our partners, resellers, or other third-party sources.
-
Publicly Available Sources: We may supplement your information with publicly available data to provide better service.
2. How We Use Your Information
We use the personal information we collect for the following purposes:
2.1 To Provide and Operate Our Services
-
Create and manage your account
-
Process transactions and send related notices
-
Provide customer support and respond to inquiries
-
Enable workflow automations and integrations you configure
-
Ensure the security and integrity of our platform
2.2 To Improve and Develop Our Services
-
Analyze usage patterns to improve product functionality and user experience
-
Conduct research and development for new features
-
Monitor and fix bugs, errors, and performance issues
-
Train and improve internal AI models and automation capabilities using aggregated, de-identified data only — we will never use your identifiable data to train models without your explicit consent
2.3 To Communicate With You
-
Send transactional emails (confirmations, invoices, security alerts)
-
Provide product updates, newsletters, and promotional communications (you may opt out at any time)
-
Conduct surveys and collect feedback
2.4 Legal and Compliance Purposes
-
Comply with applicable laws, regulations, and legal obligations
-
Enforce our Terms of Service and other agreements
-
Protect the rights, property, and safety of BluBees.ai, our users, and the public
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
-
Contractual Necessity (Art. 6(1)(b) GDPR): Processing required to perform our contract with you, including providing the Services.
-
Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate interests, such as improving our product, ensuring platform security, and preventing fraud.
-
Legal Obligation (Art. 6(1)(c) GDPR): Processing required to comply with applicable laws.
-
Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, such as for marketing communications or optional analytics. You may withdraw consent at any time.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Service Providers and Sub-Processors
We engage trusted third-party companies to assist in operating our Services, including cloud hosting providers, payment processors, analytics tools, customer support platforms, and email delivery services. These service providers are contractually obligated to process your data only on our behalf and in compliance with this Privacy Policy and applicable law. An updated list of our sub-processors is available upon request.
4.2 Business Transfers
If BluBees.ai is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website if such a change occurs.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal processes (such as a court order or government request), or to protect the rights, property, or safety of BluBees.ai, our users, or others.
4.4 With Your Consent
We may share your information with third parties when you have given us your explicit consent to do so.
5. Data Retention
We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
-
Account data is retained for the duration of your account and deleted within 90 days following account closure, unless we are required to retain it longer for legal or compliance reasons.
-
Workflow execution logs and automation data are retained for up to 30 days by default; enterprise customers may configure custom retention periods.
-
Backup copies of data may be retained for up to 90 days after deletion.
-
We will retain de-identified, aggregated data indefinitely for analytics and product improvement purposes.
6. International Data Transfers
BluBees.ai operates globally. Your information may be transferred to and processed in countries other than the one in which you reside, including the United States. These countries may have data protection laws that differ from your country of residence.
Where required, we implement appropriate safeguards for international transfers, including:
-
Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA
-
Compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension, as applicable
-
Adequacy decisions where available
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our Services. The types of cookies we use include:
-
Essential Cookies: Required for core platform functionality, authentication, and security. These cannot be disabled.
-
Analytics Cookies: Help us understand how users interact with our platform (e.g., via tools like PostHog or Mixpanel). You may opt out of analytics tracking.
-
Marketing/Advertising Cookies: Used to deliver relevant content and measure campaign effectiveness. You may opt out via our cookie consent manager.
You can manage your cookie preferences through our Cookie Consent Manager or your browser settings. Note that disabling certain cookies may affect platform functionality.
8. Data Security
We take the security of your data seriously and implement industry-standard technical and organizational measures to protect it, including:
-
Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
-
Role-based access controls and least-privilege principles
-
Regular third-party security audits and penetration testing
-
SOC 2 Type II compliance program (in progress)
-
Mandatory employee security and privacy training
-
Incident response procedures with breach notification protocols
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
9. Your Rights and Choices
Depending on your location, you may have the following rights with respect to your personal information:
9.1 Rights for All Users
-
Access: Request a copy of the personal information we hold about you.
-
Correction: Request that we correct inaccurate or incomplete data.
-
Deletion: Request that we delete your personal data, subject to certain legal exceptions.
-
Opt-Out of Marketing: Unsubscribe from marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly.
9.2 Additional Rights for EEA/UK/Swiss Residents (GDPR)
-
Restriction of Processing: Request that we restrict how we use your data.
-
Data Portability: Receive your data in a structured, commonly used, machine-readable format.
-
Object to Processing: Object to certain processing activities, including direct marketing and legitimate interest-based processing.
-
Withdrawal of Consent: Where processing is based on consent, withdraw it at any time.
-
Lodge a Complaint: File a complaint with your local data protection authority (DPA).
9.3 Rights for California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your California rights, contact us at privacy@blubees.ai.
To exercise any of these rights, please submit a request to privacy@blubees.ai. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before fulfilling your request.
10. Children's Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us immediately at privacy@blubees.ai and we will take prompt steps to delete such information.
11. Third-Party Links and Integrations
Our Services may contain links to third-party websites or allow you to connect third-party applications. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you connect to BluBees.ai. Any data you provide to or that is processed by third-party services is governed by their respective privacy policies.
12. AI-Powered Features and Your Data
BluBees.ai integrates AI-powered features to enhance automation and workflow capabilities. When you use AI-assisted features:
-
We may send limited context data (such as workflow structure or configuration) to AI models to generate suggestions or assist with tasks.
-
We do not send credential values, sensitive personal data, or actual workflow payload data to AI services without your explicit opt-in.
-
Data sent to AI services for in-session assistance is not used to train underlying models.
-
Any data transmitted to AI services is deleted within 30 days.
-
You may opt out of AI-assisted features in your account settings.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes, we will provide more prominent notice, such as a notification in our platform or an email to the address associated with your account. Your continued use of our Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
BluBees.ai
Privacy Team
Email: privacy@blubees.ai
Website: https://blubees.ai/privacy
If you are located in the EEA and have concerns about our data processing that we have been unable to resolve, you have the right to lodge a complaint with your local data protection authority.
