Privacy Policy - Block Convey

1. Who We Are

Block Convey, Inc. ("Block Convey", "we", "us", or "our") operates the website at blockconvey.com and the Prism AI observability platform at prismtrace.blockconvey.com (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Services or interact with us.

For questions about this policy, contact us at privacy@blockconvey.com.

2. Information We Collect

2.1 Information You Provide Directly

Contact and inquiry data: Name, email address, company name, phone number, and the message content you submit via our contact or demo-request form.
Account data: Email address and password when you register for a Prism account.
Newsletter subscriptions: Email address when you opt in to our mailing list.
Support communications: Any information you share when contacting our support team.

2.2 Information Collected Automatically

Usage data: Pages visited, time spent, click paths, and referring URLs, collected via Google Analytics 4 (GA4, ID: G-V6H8KX7QTX).
Device and browser data: IP address, browser type, operating system, and device identifiers.
Cookies and similar technologies: We use first-party cookies for session management and third-party cookies for analytics. See Section 6 for details.

2.3 Platform Trace Data (Prism Customers)

When you use Prism to monitor your AI agents, we process LLM trace data (prompts, outputs, metadata) on your behalf as a data processor. Your trace data belongs to you. We apply PII redaction guardrails before storage and do not use your trace data to train models or for any purpose other than providing the Prism service. Data processing agreements are available upon request.

3. How We Use Your Information

Respond to demo requests, inquiries, and support tickets.
Create and manage your Prism account.
Send transactional emails (account confirmation, billing receipts).
Send marketing emails if you have opted in — you may unsubscribe at any time.
Analyze how our website and platform are used so we can improve them.
Detect, investigate, and prevent fraud, abuse, or security incidents.
Comply with applicable legal obligations.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal bases for processing are:

Contract: Processing necessary to fulfil our agreement with you (account creation, service delivery).
Legitimate interests: Analytics, fraud prevention, and improving our Services.
Consent: Marketing emails and non-essential cookies — you may withdraw consent at any time.
Legal obligation: Where required by law.

5. Information Sharing and Disclosure

We do not sell your personal information. We share information only in the following circumstances:

Service providers: Google Analytics (analytics), Google Workspace (email), Vercel (hosting), Stripe (billing). Each provider is contractually bound to handle data only on our instructions.
Business transfers: If Block Convey is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of Block Convey, our users, or the public.

6. Cookies

We use the following types of cookies:

Strictly necessary: Required for the site and platform to function (session cookies). Cannot be disabled.
Analytics (Google Analytics 4): Help us understand how visitors use the site. You can opt out via your browser settings or the Google Analytics opt-out add-on.

Most browsers allow you to control cookies through their settings. Disabling analytics cookies will not affect your ability to use the site.

7. Data Retention

Contact form and inquiry data: Retained for up to 2 years or until you request deletion.
Account data: Retained for the duration of your account and for 90 days after account closure.
Analytics data: Google Analytics data is retained for 14 months per our GA4 configuration.
Prism trace data: Retention is governed by your plan (Starter: 7 days, Growth: 90 days, Scale: custom up to 7 years) unless you configure a shorter period.

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data, subject to legal obligations.
Portability: Receive your data in a structured, machine-readable format.
Objection / Restriction: Object to or restrict processing based on legitimate interests.
Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
CCPA rights (California residents): Right to know, delete, and opt out of sale (we do not sell personal data).

To exercise any of these rights, email privacy@blockconvey.com. We will respond within 30 days.

9. Data Security

We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security reviews. No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at security@blockconvey.com.

10. International Transfers

Block Convey is based in the United States. If you are located outside the US, your data may be transferred to and processed in the US. For EEA/UK users, such transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by email. Continued use of our Services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or to exercise your rights:

Email: privacy@blockconvey.com
Company: Block Convey, Inc.
Website: blockconvey.com