Skip to content
BlogToStart

Legal

Privacy policy

Last updated October 2026

Template notice: this document is a good-faith template describing how BlogToStart actually works. It has not yet been reviewed by legal counsel and should be reviewed before being relied on.

This policy explains what personal data BlogToStart processes when you use the platform, and what happens to data about visitors to websites hosted on BlogToStart.

Data we collect from customers

  • Account data: name, email address, a hashed password, role, and account preferences.
  • Session and security data: session records with browser user-agent and IP address, used to keep you signed in, show your active sessions and protect against abuse.
  • Content: websites, pages, articles, media, settings and revisions you create.
  • Usage and billing: plan, subscription status, usage counts (for example AI credits and articles generated) and billing identifiers from our payment processor. We do not store full card numbers.
  • Integrations: credentials for services you connect (such as Google Search Console) are stored encrypted and used only for that integration.
  • Support: the content of support tickets you open.

AI processing

When you use AI features, the relevant inputs — such as your website idea, site settings, content plans and article text — are sent to the AI model provider configured for the platform to generate a response. We record metadata about each request (model, purpose, token counts, estimated cost, success) to operate limits and monitor quality, not the full prompt. Do not include sensitive personal data in prompts.

Visitors to hosted websites

  • We count page views and affiliate-link clicks to provide analytics to the website owner. We do not set tracking cookies on visitors to do this.
  • If a visitor submits a contact or newsletter form on a hosted website, that information is stored for the website owner, who is responsible for how they use it.
  • Website owners act as controllers for their visitors' data; BlogToStart processes it on their behalf.

Why we use data

To provide and secure the service, process payments, send transactional emails (for example password resets and notifications you've enabled), provide support, comply with law, and improve the product. We do not sell personal data and we do not send marketing emails without consent.

Sharing

We share data with service providers that help us run the platform — hosting, the configured AI model provider, payment processing, email delivery — and with services you choose to connect. We may disclose data where required by law.

Retention

We keep account data while your account is active. When you delete your account, your account and websites are deleted; limited records (such as billing and audit logs) may be retained where required for legal or security purposes.

Your rights

Depending on where you live, you may have rights to access, correct, export, delete or object to processing of your data. You can export your data and delete your account from the dashboard, or contact us for help.

Security

Passwords are hashed, integration credentials are encrypted at rest, sessions use secure HTTP-only cookies, and administrative actions are audit-logged.

Contact

For privacy questions, use the contact page.