Privacy & GDPR

Privacy policy

How Blengi collects, uses, stores, and deletes visitor and workspace data when the AI bar is installed on a site.

Effective 29 October 2026

What we collect

We collect only the data needed to run the assistant, route leads, and keep the service secure.

  • Conversation history between visitors and the assistant.
  • Anonymous visitor identifiers, hashed IP data, browser metadata, and page context for abuse prevention and analytics.
  • Lead details such as name, email, phone, and custom fields only when a visitor submits them deliberately.

How we use it

The data is used to answer visitors, notify your team about qualified leads, improve routing quality, and protect the service from misuse.

  • Generate AI responses and maintain conversation context.
  • Route captured leads to inboxes, Slack, email, and outbound webhooks configured by the workspace.
  • Measure product performance, detect abuse, and troubleshoot delivery issues.

How long we keep it

Workspace data remains available until the workspace deletes it, exports it, or asks for removal through an authenticated privacy request.

  • Visitors can remove their own widget conversation history using the in-widget deletion flow.
  • Lead routing logs and operational metadata may be retained for fraud prevention, billing, and auditability.
  • Backups age out on the platform retention schedule and are deleted automatically after their recovery window closes.

Demo requests

If you request a free demo via blengi.com/linkedin, we store your website URL, your email address and (if you fill it in) your name, plus the time of the request and any campaign data (UTM and the page you came from). We use this data only to build the demo for you, send you the link and contact you about that demo. We do not share it with third parties and do not use it for newsletters. We keep your request for at most 12 months; after that we delete it, or sooner if you ask us to at info@blengi.com. The demo itself is deleted after 30 days, unless you decide to continue with Blengi.

Cookies

On blengi.com we use Google Analytics 4 to see how visitors use the site, but only if you agree to it in the cookie banner. Google Analytics then sets the cookies _ga and _ga_0DQ0YPKLJ9 (for at most 2 years). We do not use advertising cookies. If you choose Decline, we do not load Google Analytics. You can change your choice at any time via 'Cookie settings' at the bottom of every page. We remember your choice itself for 12 months.

WhatsApp

Businesses that use Blengi can also offer their AI employee on WhatsApp. Blengi processes those conversations on behalf of the business you are chatting with (the business is the data controller, Blengi is the processor). You are chatting with an AI employee; we say so at the start of the conversation and you can always ask for a human at the business.

If you chat on WhatsApp with a business that uses Blengi, we process your phone number, your WhatsApp profile name, the messages (text, images, voice notes) and technical data such as timestamps and delivery status.

Messages are delivered through the WhatsApp Business Platform of Meta Platforms Ireland Ltd. Meta delivers the messages and may retain them for up to 30 days; WhatsApp's privacy policy applies to that processing. Data may be processed outside the EU on the basis of the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.

Blengi stores the conversations in the European Union and does not use WhatsApp messages to train AI models. Messages a business sends on its own initiative (such as an order update or reminder) are only sent with your consent; you can withdraw it by replying "STOP" or by unsubscribing with the business.

We keep WhatsApp conversations for as long as the business keeps its Blengi account, unless the business deletes them earlier or you ask us to delete them (see "Delete your data" below).

Sub-processors

To run the AI employee we use these providers, which process data on our behalf: β€’ Cloudflare, Inc. β€” the AI model, the search in the business's knowledge and the reading of its web pages (Cloudflare Workers AI, Vectorize and Browser Rendering). β€’ OpenAI β€” a backup AI service, used only when our main AI service is unavailable. OpenAI does not use data sent through its API to train its models and keeps it for up to 30 days to detect abuse. β€’ Meta Platforms Ireland Ltd. β€” delivers WhatsApp messages (see "WhatsApp" above).

These providers may process data outside the EU; that happens on the basis of the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.

Delete your data

Data deletion or access: email info@blengi.com with the name of the business or workspace, your phone number (for WhatsApp), visitor ID or email address, and whether you want access, export or deletion. After verification we fulfil the request within 30 days and confirm by email.

Your rights

Depending on your region, you may be entitled to request access, correction, export, restriction, or deletion of personal data.

  • Request a copy of personal data associated with a visitor or workspace record.
  • Ask for correction or deletion of inaccurate or outdated information.
  • Withdraw consent for optional follow-up communication at any time.

GDPR requests

Blengi supports GDPR-aligned deletion workflows for widget conversations and manual review for broader export or erasure requests.

Include the workspace name, the visitor identifier or email if known, and the request type so we can verify and fulfill it safely.

info@blengi.com

Contact

Blengi Privacy Team

info@blengi.com

We respond to verified privacy requests within 30 days.