Privacy Policy
Last updated: July 8, 2026
This policy explains what blasa.shop collects, why, and your choices. Short version: we collect the minimum needed to build and host your website, we never sell your data, and you can delete everything.
1. What we collect
Account data: your email address (for sign-in links, your site-is-ready notification, and service emails) and your plan/billing status. Business data: the public Google Maps listing you submit — business details, reviews, and photos — which we process to generate your website. Review data is fetched without reviewer personal data. Usage data: anonymous page-view counts for your published site (shown to you as analytics) and standard technical logs (IP-based rate limiting, abuse prevention).
2. How we use it
To generate and host your website, operate your account, process payments, send service emails (sign-in links, site status, a reminder if you haven't claimed your site, usage reports), and protect the service from abuse. Marketing-type emails include an unsubscribe link; transactional emails (sign-in, billing) don't need one.
3. Service providers
We use a small set of processors to run the service: payment processing (Stripe), email delivery (Resend), authentication (Google Firebase), content delivery and security (Cloudflare), product analytics (Google Analytics, Mixpanel), advertising measurement (Google Ads — only if you accept), and data collection from public listings. Each receives only what it needs to perform its function. Our analytics processors receive your account id and plan, never your email address.
4. Storage and retention
Website content and images are stored on our hosting infrastructure for as long as your site exists. Deleting your website from the dashboard removes the site, its generated content, its analytics, and its hosted images. Deleting your account removes your personal data; billing records are retained as required by law.
5. Your rights
You can access, correct, export, or delete your data — most of it directly from the dashboard, or by emailing [email protected]. If you're in the EU/EEA (GDPR) or a similar jurisdiction, these rights are backed by law, and you may also lodge a complaint with your local supervisory authority.
6. Cookies
We use what's needed to keep you signed in and to protect the service, plus privacy-friendly analytics (Google Analytics, Mixpanel) to understand how blasa is used — you can opt out of these from the cookie banner at any time. Advertising cookies (Google Ads, used to measure our ads and show them to people who visited) are set only if you actively accept; if you dismiss or decline the banner, no advertising cookie is ever written. Published websites we host for you are static and set no tracking cookies on visitors; aggregate page views are counted server-side.
7. Changes
We'll post any material changes here and, where appropriate, notify you by email.