Privacy Policy

Account information: name, email, password (hashed), company name, country and currency. Business data you enter into the systems (e.g. customers, invoices). Service information: for a formation order, the data you provide such as founder name, phone, national address, date of birth and business activity.

Payment information is processed by our payment provider (Stripe). We do not store card numbers. Technical information: log data, device/browser type and IP address for security and abuse-prevention, plus essential language/theme cookies for the app to function.

Usage and advertising information: we record anonymous analytics on our own site, covering the pages you visit, the country and city inferred from your connection without storing your IP address, your device type, operating system and browser, and the ad campaign tags that brought you. If you accept advertising cookies, we use the TikTok Pixel and the TikTok Events API to measure how our ads perform.

We use information to operate and provide the Services, process payments, deliver the formation service, secure the platform and prevent abuse, communicate with you about your account and orders, and comply with our legal obligations.

We do not sell, rent, or trade your personal or company information. We do not share it with third parties for their marketing. Access is limited to authorized personnel who need it to operate the Services.

We may disclose information only in the following cases: (a) to comply with the law, a valid legal request, court order, or competent government authority; (b) to our essential service providers (e.g. payment processing, hosting) strictly to the extent needed to operate the Services and under confidentiality obligations; (c) to the extent necessary to deliver the formation service, to the relevant government authorities and registered agent, and only the information required to form your entity; (d) to protect our rights or safety, or to prevent fraud and illegal activity.

(e) to our advertising partner TikTok, only if you accept advertising cookies: events on our site such as viewing a service or completing a purchase and its value, the ad click identifier, IP address and browser type, and your email address and phone number after one-way hashing (SHA-256) so they cannot be read. The sole purpose is measuring and improving our ads, and we do not sell this data.

Each company's data is strictly isolated from others via database row-level security, with encryption in transit and strict access controls. However, no system is 100% impenetrable, and you are responsible for protecting your credentials.

We keep your data while your account is active and as needed to provide the Services and comply with the law. You may request deletion of your data, subject to any legal retention requirements.

You have the right to access, correct, update, or request deletion of your data. To exercise these rights, contact us at contact@blumbase.com.

Your data may be processed in the United States and other countries where our providers operate, and we take reasonable steps to protect it. We use essential cookies (authentication, language, theme, currency) to run the site, and advertising cookies (the TikTok Pixel) only after you consent through the consent prompt. You can withdraw consent at any time from the “Privacy settings” link at the bottom of the site, and the site keeps working fully if you decline.

The Services are not directed to individuals under 18, and we do not knowingly collect their data.

We may update this policy from time to time and will notify you of material changes by a reasonable means.