Privacy Policy | BlogCrew

Quick Summary

We take our obligation to protect your privacy seriously.

This document provides a comprehensive overview of how BlogCrew processes your Personal Data.

What you should know: You always remain in control of your data.

To whom does this notice apply?
This notice applies to any individual whose Personal Data BlogCrew may collect, use, or otherwise process during their use of our Platform.

What information do we collect about you?

Your (professional) identification details and account information
Your payment information when you select a paid plan
Information about how you use the Platform (including credit and usage metering)
Workspace content you create or upload (briefs, articles, images, knowledge materials, agent configuration)
AI prompts and generated outputs when you use AI features
Data from research connectors you connect (such as Google Search Console), and content you send to publish destinations you configure

Why do we collect this information?
We collect your information in order to provide access to the Platform in an optimal way, in accordance with our Terms and Conditions, through a personalized user profile and workspace.

Who has access to your data?

Only the relevant part of BlogCrew's team has access to the information you provide us with.
We use suppliers and service providers (hosting, authentication, AI, email, payments, and similar). These parties process data in accordance with our purposes and contractual obligations.
We may commission a third party to process your data only for the purposes listed herein and under appropriate data processing terms.

What do you control?

At any moment, you can request to modify, erase, or get a copy of your data. Contact us at support@blogcrew.ai.
You can request an export of your data in a machine-readable format by contacting support.
You control which publish destinations and research connectors you enable.

What do we do to protect your data?

We adopted appropriate safety measures on a technical and an organizational level.
Your data is stored on high-security servers with a focus on European Union hosting where practicable.
BlogCrew may use operational data to improve and secure the Platform in a GDPR-compliant manner.
AI prompts are used to provide generation features and are not used by BlogCrew to train foundation models.
When you collaborate in workspaces, data access is controlled through role-based permissions.

Article 1 – General

BlogCrew (hereinafter, "we", "us", "our", "BlogCrew"), assumes responsibility for the processing of your Personal Data as "Controller" for account and Platform administration, including the use of our Platform (hereinafter: "Platform").
In this document, "Personal Data" shall mean any information relating to you as an identified or identifiable natural person and user of the Platform.
BlogCrew processes Personal Data in accordance with the legislation in force, and, in particular, Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of Personal Data and the free movement of such data, applicable from 25 May 2018 (hereinafter the "GDPR").
Access to or use of our Platform implies your full and unreserved understanding of this document. This means that you were fully informed about how BlogCrew collects, uses, and processes your Personal Data, in accordance with the provisions of this document and for the purposes listed herein.

Article 2 – What Personal Data Does BlogCrew Collect

2.1 BlogCrew may process, for the purposes mentioned in Article 3, the following categories of Personal Data of you as a user of our Platform:

Data	Details	Context
Category 1: Account and identification data	Name, email address, authentication identifiers (for example via magic link / OTP or OAuth). Optional profile details.	When creating an account or signing in to use the Platform.
Category 2: Payment information	Payment method details and billing identifiers (processed by our payment provider), VAT number where applicable	When selecting a paid subscription plan.
Category 3: Usage and metering data	Features used, pipeline credit consumption, AI action usage, image storage usage, preferences, logs of agent runs, and related analytics	When you use the Platform.
Category 4: Workspace content	Briefs, articles, SEO metadata, keywords, clusters, knowledge-base materials, agent/crew configuration, approvals, and related workspace records	When you create or import content in a workspace.
Category 5: Files and media	Uploaded images, AI-generated hero images, and other media stored in your image library	When you upload or generate media.
Category 6: Connector and publish data	Tokens and configuration for research connectors (for example Google Search Console) and publish destinations (webhook, Zapier, WordPress, Shopify, Wix, internal blog); content payloads sent to those destinations	When you connect integrations and publish or sync data.

Article 3 – The Legal Basis and Purposes of Data Processing

We only process your data when we have a specific purpose and lawful basis to do so and only process what is relevant for each specific purpose.

3.1 General Purposes

Data	Legal Basis	Purpose
Category 1: Account and identification data	Performance of a contract; Terms and Conditions	Create and manage your account and workspace access.
Category 2: Payment information	Performance of a contract; Terms and Conditions	Payment and invoicing for paid plans.
Category 3: Usage and metering data	Legitimate interest; performance of a contract	Enforce plan limits, provide support, improve and secure the Platform.
Category 4: Workspace content	Performance of a contract	Host, process, and display your content so agents and teammates can work on it.
Category 5: Files and media	Performance of a contract; legitimate interest	Store and display media for content production.
Category 6: Connector and publish data	Performance of a contract	Provide research connectors and deliver content to destinations you configure.

3.2 Direct Marketing

If BlogCrew has obtained your electronic contact details in the context of providing our services, BlogCrew may use your electronic contact details to send you, via email, promotional material regarding similar services we may offer. This is based on BlogCrew's legitimate interest.

Other promotional material concerning non-similar services will only be sent if you have given prior consent.

We will offer a GDPR-compliant way to opt out at any time, free of charge, for example by clicking unsubscribe in promotional emails or by emailing support@blogcrew.ai.

3.3 Transfer to Third Parties

BlogCrew treats Personal Data as confidential information and will not disclose it to third parties except as specified in this document or as required by law.

BlogCrew may disclose Personal Data to suppliers and service providers to the extent necessary to operate the Platform (hosting, authentication, AI inference, email delivery, payments, analytics, and similar). Those parties may only use the data for our purposes and under contractual obligations.

BlogCrew will not sell your Personal Data.

In the event of reorganization, transfer of activities, or insolvency, Personal Data may be transferred to new entities or third parties. BlogCrew will inform you in advance where reasonably possible.

3.4 Legal Requirements

In extraordinary circumstances BlogCrew may be obliged to transfer Personal Data following a court order or to comply with imperative laws and/or regulations. Where reasonably possible, we will try to inform you beforehand, unless legally constrained.

3.5 AI-Powered Features

BlogCrew uses artificial intelligence providers (including but not limited to Mistral AI and Anthropic, depending on configuration) to help generate briefs, drafts, reviews, images, keywords, and related outputs. When you use AI features:

Prompt Processing: Your prompts and relevant workspace context are processed by the AI provider to generate outputs. BlogCrew does not use your prompts to train foundation models.
Operational Retention: We may retain generated outputs and run logs in your workspace so you can edit, approve, and audit work. Provider-side retention is governed by our agreements with those providers.
Content Ownership: You retain ownership of AI-generated content as described in our Terms & Conditions.
Data Sharing: Temporary sharing with AI providers is necessary to provide the feature and is done under appropriate processing terms.

3.6 Third-Party Integrations and Publish Destinations

BlogCrew offers integrations such as:

Publish destinations: Webhooks, Zapier, WordPress, Shopify, Wix, and BlogCrew internal blog
Research connectors: Google Search Console and related Google OAuth services
Other services: As we may add to the Platform

Important notes:

When you enable an integration, you act as the data controller for any Personal Data shared with that integration provider.
BlogCrew acts as a data processor when transmitting content to destinations you choose; once data reaches the destination, that provider becomes a separate controller (or processor for its own customers).
Each provider has its own privacy policy and terms. You are responsible for reviewing them.
BlogCrew is not responsible for the privacy practices of third-party integration providers.

3.7 Workspace Collaboration

When you share a workspace:

Workspace content is accessible to members according to their role and permissions.
Workspace owners and administrators control member access.
The workspace owner is typically the controller of workspace content. Members must respect confidentiality and use data only for legitimate workspace purposes.
When you leave a workspace, your access is revoked; content you created may remain for other members depending on settings.

Article 4 – The Duration of the Processing

BlogCrew will store Personal Data for the duration necessary to achieve the purposes listed in Article 3, including for as long as essential for the contractual relationship.

BlogCrew may also store Personal Data to comply with applicable laws (including invoicing, accounting, tax, and regulatory requirements). The retention periods below do not apply where law requires shorter or longer retention.

Retention Periods

Data	Retention Period
Category 1: Account and identification data	Retained for 90 days after deletion of your user profile (end of contractual relationship).
Category 2: Payment information	Retained for seven (7) years after deletion of your user profile, or as required by law / payment provider.
Category 3: Usage and metering data	Retained for two (2) years after deletion of your user profile.
Category 4: Workspace content	Retained for the duration of the workspace/account relationship; deleted or anonymized within 90 days after account deletion unless law requires longer retention.
Category 5: Files and media	Retained until you delete them or your account ends; deleted within 90 days of account deletion unless law requires otherwise.
Category 6: Connector and publish data	Credentials and configs retained while connected; revoked/deleted when you disconnect or delete the account. Publish delivery logs may be retained for operational and security purposes for up to two (2) years.

Article 5 – Your Rights

5.1 Right of Access and Right to Obtain a Copy

At any time, you have the right to freely obtain access to your Personal Data, as well as to be informed about the purpose of the processing.

5.2 Right to Rectification, Erasure or Restriction

You always have the right to ask to rectify your Personal Data when you think it is inaccurate.

You can also request restriction of processing if you think that your data is inaccurate and you have notified us of this.

In addition, you have the right to ask to erase your Personal Data insofar as it is not possible to anonymize it.

5.3 Right to Object

You have the right to object to the processing of your Personal Data when you have and provide serious and legitimate reasons to do so.

You also have the right to object to the use of your Personal Data for direct marketing purposes. In such case, you do not need to provide specific reasoning.

5.4 Right to Data Portability

You have the right to obtain your Personal Data in a structured, commonly used format and/or to transfer this data to another controller. Contact support@blogcrew.ai. We will provide data in a machine-readable format (such as JSON or CSV) within 30 days of your request.

When processing is based on your prior consent, you have the right to withdraw this consent at any time.

5.6 Automated Decisions and Profiling

You have the right to request not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

5.7 Exercising Your Rights

You can exercise your rights by contacting us with a copy of the essential parts of your ID, such as name and date of birth, as attachment, by email to support@blogcrew.ai.

We will respond within 30 days of receipt.

5.8 Right to File a Complaint

You have the right to file a complaint with the supervising Data Protection Authority in your jurisdiction.

This is without prejudice to proceedings before the civil courts. If you are from an EU Member State, you may file a complaint with your national data protection authority (a list is available here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm).

If you have suffered damage as a result of the processing of your Personal Data, you may file a claim for compensation.

Article 6 – Safety and Confidentiality

BlogCrew has adopted technical, organizational, and physical safety measures to avoid destruction, loss, forgery, adjustment, unauthorized access, or accidental disclosure of Personal Data to a third party, as well as unauthorized processing.

If a breach affecting your Personal Data occurs, BlogCrew will inform you without undue delay, including a summary description of the potential impact and recommended mitigation measures where appropriate.

BlogCrew shall not be liable for direct or indirect damages caused by wrongful or improper use of Personal Data by a third party.

You also share responsibility for maintaining privacy and security, for example by not allowing third parties insight into your confidential communications or credentials.

Article 7 – Cookies

BlogCrew uses cookies and similar technologies as described in our separate Cookie Policy. That policy explains essential, functional, and analytics cookies, third-party cookies, and how you can manage them.

Article 8 – Data Processing Agreement

8.1 Scope

When you store workspace content on BlogCrew and instruct us to process or publish it, you act as the data controller for that content (and for any Personal Data contained in it). BlogCrew acts as the data processor for hosting and processing that content on your instructions. This section outlines that relationship.

For your BlogCrew account data (Category 1–3), BlogCrew acts as an independent controller as described above.

8.2 Processing Details

Subject Matter: Hosting and processing of workspace content (briefs, articles, media, knowledge materials, agent configuration) and delivery to destinations you configure.

Duration: For the duration of your use of the Platform and as specified in Article 4.

Nature and Purpose: Storing content, running AI and pipeline jobs you request, collaborating in workspaces, and publishing to configured destinations.

Types of Personal Data: Any Personal Data you choose to include in workspace content or connector payloads, as determined by you.

Categories of Data Subjects: Individuals whose Personal Data appears in content you create, import, or publish (for example people named in articles), as determined by you.

8.3 Our Obligations as Data Processor

BlogCrew agrees to:

Process Personal Data only on documented instructions from you (the data controller)
Ensure that persons authorized to process Personal Data are subject to confidentiality obligations
Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk
Assist you in responding to requests from data subjects exercising their rights
Assist you in ensuring compliance with data protection impact assessments and prior consultation obligations where applicable
Delete or return Personal Data upon termination of the service, unless required to retain it by law
Make available to you all information reasonably necessary to demonstrate compliance with GDPR processor obligations

8.4 Your Obligations as Data Controller

As the data controller for workspace content, you are responsible for:

Ensuring you have a lawful basis for processing Personal Data contained in your content
Obtaining necessary consents from data subjects where required
Providing data subjects with appropriate privacy notices
Responding to data subject requests regarding their Personal Data
Ensuring compliance with applicable data protection laws
Special Categories of Data: If you include sensitive personal data in content, you are responsible for ensuring you have a lawful basis and explicit consent where required

8.5 Sub-Processors

BlogCrew engages the following sub-processors to assist in providing our services:

Supabase: Database, authentication, and file storage services
Vercel: Hosting and infrastructure services
Resend: Email delivery services (where used)
Mistral AI / Anthropic: AI inference for content generation and related features
Google: OAuth, Search Console research connectors, and image-related services where enabled
Stripe: Payment processing for paid plans (when billing is enabled)
Destination providers you choose: Webhook endpoints, Zapier, WordPress, Shopify, Wix, and similar (user-configured)

Sub-Processor Updates: We may add or replace sub-processors from time to time. We will inform you of intended changes concerning addition or replacement of sub-processors, giving you the opportunity to object. If you object to a new sub-processor, you may terminate use of the affected service.

All sub-processors under our control are contractually bound to process Personal Data only in accordance with our instructions and applicable data protection laws. User-configured destinations are selected and controlled by you.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: support@blogcrew.ai

See also our Terms & Conditions and Cookie Policy.