Privacy policy

Bluicorn provides distribution intelligence for SaaS companies at bluicorn.com. For anything in this policy, including a request to access, correct or delete your data, write to hello@bluicorn.com.

Account

Your email address and a password hash, held by Supabase Auth. We never see your password.

Your product

The URL you submit, the public content we fetch from it, the Product Distribution Genome extracted from that content, and the corrections you make to it.

Competitors

The competitor names and domains you confirm, and public search results indicating where they appear.

Your work

Audits, opportunities, actions and their status history, prepared copy, claims you approve, verification checks and the outcomes you record.

Product events

A small set of named events — sign-up, audit started, action completed and similar — stored in our own database to understand whether the product works. No third-party analytics SDK runs on this site.

Billing

If you pay, your Stripe customer and subscription identifiers and your plan status. Card details go to Stripe and never reach us.

Operational records

Rate-limit counters and error logs, so expensive research cannot be abused and failures can be diagnosed.

We do not use cookies for advertising or third-party analytics. The only cookies set are the session cookies that keep you signed in, which is why this site has no consent banner to click away.

When you submit a URL, Bluicorn fetches a small number of public pages from that address server-side, with a timeout and a size limit, and extracts the visible text and metadata. It does not run scripts from the page, does not attempt to reach anything behind a login, and refuses addresses that resolve to private or internal networks. Submit only sites you are entitled to have analysed.

We process your account and your work because it is necessary to provide the service you asked for. We process billing data to meet our legal and contractual obligations. We process the small set of product events named above on the basis of our legitimate interest in knowing whether the product functions, which is why that set is deliberately small and contains no page-by-page tracking.

Supabase

Database, authentication and file storage.

Vercel

Application hosting and delivery.

Stripe

Payments. Stripe is the merchant of record for Bluicorn purchases and handles tax, fraud and disputes.

Resend

Transactional email, such as confirmation and password-reset messages.

Anthropic

The model that reads fetched website content and proposes a Genome. Content is sent for that purpose only, and is not used to train models.

Brave Search

Public search results used to find competitors and evidence of where they appear.

Each is a processor acting on our instructions. We do not sell personal data, and we do not share it for advertising.

Your data stays while your account exists. Delete your account and the workspace, products, audits, actions, claims, verifications and outcomes go with it, immediately and irreversibly. Records we are obliged to keep for accounting — invoices held by Stripe — survive under their own retention rules.

You can export everything Bluicorn holds about your workspace as JSON from Settings, and delete your account from the same page. You may also ask us to correct anything inaccurate, to restrict or object to processing, or to raise a complaint with your data protection authority. Write to hello@bluicorn.com and we will answer within 30 days.

Every tenant table is protected by row-level security in the database, so one workspace cannot read another’s rows even if the application has a bug. Administrative keys never reach the browser. Expensive operations are rate-limited per account and capped across all accounts. If you believe you have found a vulnerability, please write to hello@bluicorn.com before disclosing it publicly.

If this policy changes materially we will say so on this page and, where the change affects how your data is used, by email. The date at the top is the version you are reading.