Privacy Policy

Last updated: March 2026

Forge Digital ("we", "us", or "our") operates the Blast Everything application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

• Device information: Device type, operating system, unique device identifiers
• Usage data: Features used, actions taken, timestamps, and interaction patterns
• Log data: IP address, browser type, access times, and referring URLs
• Analytics data: Aggregated usage statistics to improve the Service

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: Generate AI-powered content suggestions, schedule posts, and publish content to your connected social media accounts
• Personalisation: Tailor content suggestions and recommendations based on your usage patterns and preferences
• Account management: Create and manage your account, process subscriptions, and communicate with you about the Service
• Service improvement: Analyse usage patterns to improve features, fix bugs, and develop new functionality
• Security: Detect, prevent, and address fraud, abuse, and technical issues
• Legal compliance: Comply with applicable laws, regulations, and legal processes

3. Third-Party Services

We use the following third-party services to operate Blast Everything:

3.1 OpenAI API

We use the OpenAI API to power our AI content generation features. When you use AI content generation, your prompts and relevant context may be sent to OpenAI for processing. OpenAI processes this data in accordance with their Privacy Policy and API data usage policies. OpenAI does not use API data to train their models.

3.2 Social Media Platform APIs

When you connect your social media accounts, we interact with the APIs of those platforms (such as Instagram, Facebook, X/Twitter, LinkedIn, TikTok, and others) to publish and manage content on your behalf. Each platform has its own privacy policy governing how they handle your data.

3.3 Apple App Store and Google Play Store

Subscription payments are processed through Apple and Google. We do not directly collect, store, or process your payment card details. All payment information is managed by Apple or Google in accordance with their respective privacy policies.

3.4 Analytics

We may use analytics services (such as Google Analytics) to understand how the Service is used. These services may collect information about your use of the Service and report aggregated trends without identifying individual visitors.

4. Data Storage and Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it:

• All data is transmitted using TLS/SSL encryption
• Passwords are hashed using industry-standard algorithms and are never stored in plain text
• Social media access tokens are encrypted at rest
• We conduct regular security reviews of our systems
• Access to personal data is restricted to authorised personnel only
• Our servers are hosted on secure infrastructure with appropriate physical and network security controls

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your personal information.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account
• Content data: Retained until you delete it or close your account
• Social media tokens: Retained until you disconnect the account or close your Blast Everything account
• Usage logs: Retained for up to 12 months for analytics and security purposes

After account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Your Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of any inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Export: Request a portable copy of your data in a commonly used format
• Restriction: Request that we restrict the processing of your data in certain circumstances
• Objection: Object to the processing of your data for certain purposes
• Withdraw consent: Withdraw your consent at any time where processing is based on consent

We will respond to all legitimate requests within 30 days. We may need to verify your identity before processing your request.

7. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, the following additional provisions apply:

7.1 Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the Service you have subscribed to
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving the Service and ensuring security
• Consent: Where you have provided explicit consent for specific processing activities
• Legal obligation: Processing necessary to comply with applicable law

7.2 International Data Transfers

Your data may be transferred to and processed in countries outside the EEA/UK, including the United States (for AI processing via OpenAI). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7.3 Data Protection Officer

For GDPR-related enquiries, contact us at johnhitchenswork@gmail.com.

7.4 Supervisory Authority

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Children's Privacy

Blast Everything is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at johnhitchenswork@gmail.com.

9. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your experience. These include:

• Essential cookies: Required for the Service to function properly
• Analytics cookies: Help us understand how the Service is used
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, providing additional notice through the Service or via email. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: johnhitchenswork@gmail.com
• Company: Forge Digital
• Website: blasteverything.com