Your privacy,
plainly explained.

Who we are

blinkl.io is published by BLINKL SAS, a French simplified joint-stock company, registered with the Paris Trade and Companies Register under number 932 158 461, with its registered office at 15, rue des Halles, 75001 Paris, France.

For the purpose of the General Data Protection Regulation (GDPR), BLINKL SAS acts as data controller for the personal data processed via the Service.

What data we collect

We collect different categories of data depending on how you use the Service:

2.1 — Data you provide

• Account data: email address, password (hashed), display name and country (when you create a paid account).
• Billing data: billing address, VAT number for businesses, and a payment-method token provided by Stripe or PayPal.
• Support requests: the content of the messages you send us by email, in-app form or Discord.

2.2 — Data collected automatically

• Technical data: operating system, Premiere Pro version, blinkl.io version, language, anonymized device identifier.
• Usage telemetry: aggregated, pseudonymized counters about which extensions are opened and which commands are triggered — never the content of the timeline.
• Log data: error reports, crash dumps, IP address (truncated after 7 days).

2.3 — Content you process

When you use a server-side premium feature (Voice Over, Diarization), the relevant audio chunks are uploaded to our processing servers strictly for the duration of the requested task and deleted immediately after. They are never used for AI training.

How we use your data

We process personal data for the following purposes:

• To provide the Service: account creation, license validation, paid feature delivery.
• To process payments and prevent fraud, through certified providers.
• To support you: respond to your questions, debug issues, communicate operational changes.
• To improve the product: aggregate usage statistics, crash analytics, A/B tests on feature rollouts.
• To secure the Service: detect abuse, prevent unauthorized access, comply with legal obligations.

Legal basis

Each processing operation is based on one of the following legal grounds:

• Performance of contract (Art. 6.1.b GDPR) — for account, license and paid features.
• Legal obligation (Art. 6.1.c) — for accounting, tax records and required disclosures.
• Legitimate interest (Art. 6.1.f) — for product improvement, security, fraud prevention.
• Consent (Art. 6.1.a) — for non-essential cookies, marketing emails, beta-testing programs.

Who we share data with

We never sell your data. We share it only with carefully-vetted subprocessors, under contractual safeguards, for the strict needs of operating the Service:

• Stripe, Inc. & PayPal Europe — payment processing.
• OVHcloud (France) & Scaleway (France) — hosting & processing servers.
• Postmark (United States) — transactional emails (account, receipts).
• Crisp (France) — customer support chat.
• Sentry (United States) — crash reporting (data anonymized at source).
• Plausible Analytics (Germany) — privacy-friendly website analytics, cookie-less.

The full, up-to-date list of subprocessors can be obtained on request at privacy@blinkl.io.

International transfers

Your personal data is primarily processed within the European Union. Some of our subprocessors are located in the United States or in other countries outside the EEA.

When such transfers occur, they are framed by the EU Standard Contractual Clauses approved by the European Commission, complemented where required by additional safeguards (encryption in transit and at rest, pseudonymization).

How long we keep your data

• Account data: for the lifetime of your account, plus 3 years after closure for security & legal evidence purposes.
• Billing data: 10 years, as required by French accounting law.
• Server-side processing content (Voice Over / Diarization): deleted immediately after task completion — within 24h at the latest.
• Telemetry & logs: 13 months in pseudonymized form, then aggregated.
• Support tickets: 3 years from last interaction.

How we keep it safe

blinkl.io applies industry-standard security measures: TLS 1.3 in transit, AES-256 encryption at rest, principle of least privilege on internal access, isolated processing environments, regular penetration tests, and continuous monitoring.

In the unlikely event of a personal-data breach, we will notify the French data-protection authority (CNIL) within 72 hours, and individually notify affected users when the breach is likely to result in a high risk to their rights and freedoms.

Your rights

Under the GDPR and the French Data Protection Act, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten"), in the cases provided by law;
• restrict the processing of your data;
• port your data to another service provider;
• object to processing based on our legitimate interest;
• withdraw consent at any time, where processing is based on consent;
• define directives regarding the fate of your data after your death.

To exercise these rights, write to privacy@blinkl.io. We will respond within one month. We may ask for proof of identity to prevent unauthorized requests.

Cookies & analytics

The blinkl.io website uses a minimal set of cookies. Strictly necessary cookies (session, language, security) are loaded by default. Optional cookies (functional & analytics) are loaded only if you explicitly accept them via our cookie banner.

Our analytics provider, Plausible, does not use cookies and does not collect any personal data. The desktop application itself does not load cookies.

You can review and change your preferences at any time from the cookie-settings link in the website footer.

Children

blinkl.io is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, in technology or in the law. The "Last updated" date at the top of this document indicates when the current version took effect.

When changes are material, we will notify you by email or via an in-app banner at least 30 days before they take effect.

Contact & complaints

For any question or request relating to your personal data, the first stop is our Privacy Office:

You also have the right to lodge a complaint with the French data-protection authority (CNIL) — www.cnil.fr — or with the data-protection authority of your country of residence within the European Union.