We are in beta. Questions? Open a support request.

EN · USD
Choose my template Log in
NOT IN EFFECT YET. Orders billed in USD are not open yet, so this English document does not apply to any order. Text in brackets marks information that is still missing. Orders placed in Brazil follow the current documents in Portuguese.

1. Who is responsible for your information

Blendfy is operated from Brazil by Luan Henrique Ferreira Tondella Ardrizzo, an individual (sole provider) based in Brazil, CPF [CPF or CNPJ number — to be completed], address [business address in Brazil — to be completed]. For any privacy matter, including as the person in charge of data protection, contact us at tondella.ardrizzo@gmail.com.

2. Information we collect

  • Account: name, email, phone number and business name. Your password is stored with irreversible encryption; we cannot read it.
  • Orders: contact person, state and ZIP code of the billing address, notes, desired domain, service orders, billing history, cancellations and refunds.
  • Website content: the text, images, logos and other information you add when customizing a template.
  • Payment: you enter your card directly on Stripe’s page. We do not receive or store your card number; we keep only Stripe identifiers and the status and amounts of invoices.
  • Support: the messages you send in Support requests and the order they relate to.
  • Access and security: IP address, date and time, page accessed and technical browser data, recorded by the server.
  • Usage measurement: Blendfy pages visited, where you came from (referring site and campaign parameters), approximate country, device and browser type, time on the page, how far you scrolled and ordering steps. See “Usage measurement”.

Usage measurement

To understand which pages and templates interest visitors and where ordering becomes difficult, Blendfy measures the use of its own site with its own tool, without analytics or advertising companies. You can opt out at any time, and opting out does not change how the site works.

  • Not recorded: what you type in the editor or in forms, passwords, payment data, name, email, phone number and IP address.
  • Country: at the start of each visit, the IP address is looked up in a database installed on our own server to find only the country. We keep the country; the IP is not sent to anyone or kept by the measurement.
  • How a visit is recognized: by the same bf_anon cookie that keeps your drafts. If you have an account, measurement from that browser may be linked to your orders.
  • How to opt out: click the opt-out option in the first-visit notice or, at any time, “Privacy preferences” in the footer. Opting out deletes the measurement already made in that browser and stops new records.
  • Browser signal: if your browser sends the Global Privacy Control signal, we treat it as an opt-out.

3. Cookies and browser storage

  • BLENDFYSESSID: keeps you logged in and protects forms. Expires when the browser closes.
  • bf_anon: keeps the sites you started customizing before logging in. Up to 180 days.
  • bf_consent: remembers your answer to the measurement notice. 12 months.
  • bf_locale and bf_market: remember the language and billing country you chose. 12 months.
  • Local browser storage: remembers the light or dark theme and a draft of the editor fields, only on your device.
  • Tab storage (bf-entry): keeps where you came from while the tab is open, for measurement. Not sent if you opted out.

We do not use advertising cookies or third-party analytics or advertising tools. Stripe’s payment page uses its own cookies, governed by Stripe’s policy.

4. How we use information

  • To create your account, build, publish and maintain your site and provide support.
  • To charge, issue receipts, process cancellations and refunds and meet legal obligations.
  • To keep access records, protect security and prevent fraud.
  • To defend our rights in legal proceedings.
  • To measure the use of our site, unless you opt out.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Who we share information with

  • Stripe: processes card payments. Stripe processes data in the United States and other countries under its own privacy policy.
  • Hosting provider: the platform and the websites are hosted on servers of a third-party infrastructure provider contracted by Blendfy, which stores the information on our behalf.
  • Domain registrar and registry: to register the domain in your name, registrant information is sent to the domain registrar and to the registry of the extension, which may make it available according to its rules.
  • Authorities: when required by law or court order.

6. International processing

Blendfy is operated from Brazil. Your information is processed in Brazil and in the countries where our providers operate, including the United States. We use providers that offer safeguards for this processing, and Brazilian data protection law (Law 13,709/2018) applies to our processing.

7. Information about visitors of our customers’ sites

Some templates have features such as appointments or forms that receive information from visitors of the customer’s site. In those cases, the customer who owns the site decides how that information is used, and Blendfy processes it only to make the site work. The customer should inform its visitors about this use.

8. How long we keep information

  • Account and orders: while the account exists and, after the service ends, for as long as needed to meet legal obligations and defend rights, generally up to 5 years.
  • Access records: at least 6 months, as required by Brazilian law.
  • Uploaded images not used in any saved site: deleted automatically after 14 days.
  • Usage measurement: deleted after 13 months, or earlier if you opt out.

9. Security

We use secure connections (HTTPS), encrypted passwords, restricted access to systems and backups. Card data stays only with Stripe. No system is fully immune to incidents; if an incident creates a relevant risk, we notify those affected and the authorities as required by law.

10. Your rights

You can ask us at any time to confirm whether we process your information, to access it, correct it, delete it or receive a copy in a portable format, and to tell you who we share it with. You can also object to processing based on our legitimate interests; for usage measurement, use “Privacy preferences” in the footer.

Write to tondella.ardrizzo@gmail.com. We may ask you to confirm your identity. We respond within 15 days. Some information may need to be kept after a request when the law requires it. We will not treat you differently for exercising these rights.

11. Children

The service is intended for adults and businesses. We do not knowingly collect information from children under 13.

12. Changes to this policy

We may update this policy. The current version is always on this page, with its version date. Relevant changes are communicated to account holders.