Privacy Policy

This Privacy Policy explains how Bleviq, a product of MRLA Media LLC (“Bleviq,” “we,” “us,” or “our”), collects, uses, and protects information. Bleviq is a service that lets businesses train an AI chat assistant on their website and embed it as a chat widget.

Who this policy covers

This policy describes our practices for two groups of people:

• Customers — people who create a Bleviq account and run a chat widget on their own website.
• End users — visitors who interact with a chat widget that a customer has placed on their site. When you chat with a widget, your messages are processed by Bleviq on behalf of the customer who operates that site.

Information we collect

• Account information. When you sign up, we collect your email address. If you sign in with Google, we also receive your name and profile picture. Passwords for email sign-ups are handled and stored in hashed form by our authentication provider; we never see them in plain text.
• Content you provide to train the assistant. The website address you submit, the page content we read from that public website, and any FAQs or documents you add to the assistant’s knowledge.
• Conversations. Messages exchanged between a customer’s site visitors and the widget, which we store so the assistant can work and so customers can review how it’s performing.
• Widget analytics. When a visitor uses a customer’s chat widget, we record coarse, non-identifying details about the session: the visitor’s approximate location (country only, determined from the IP address at our edge and not stored), device type (such as mobile or desktop), and browser, along with message counts, conversation counts, and timestamps. We use these to give the site owner aggregate analytics about how their widget is used. We do not collect precise location, and we do not collect age, gender, or similar demographic information about visitors.
• Usage and technical data. Basic request information such as timestamps and a one-way hashed version of the visitor’s IP address, which we use for rate limiting and abuse prevention. We do not store raw IP addresses for this purpose.
• Billing information. Payments are processed by Stripe. We store your Stripe customer and subscription identifiers and your plan status. We do not collect or store your full card number.
• Cookies. We use essential cookies to keep you signed in. With your consent, we also use Google Analytics cookies to understand how our site is used. We do not use advertising cookies. You can opt out of analytics at any time on our Do Not Sell or Share My Personal Information page.

How we use information

• To provide, operate, and maintain the service.
• To authenticate you and secure your account.
• To read the content you submit and generate answers for your widget.
• To produce aggregate usage analytics for site owners about how their widget is used.
• To enforce usage limits and prevent abuse and fraud.
• To process payments and manage subscriptions.
• To provide support and respond to your requests.
• To comply with legal obligations.

Google user data

When you choose “Continue with Google,” we receive basic profile information from your Google Account — your name, email address, and profile picture. We use this information solely to create and authenticate your Bleviq account and to identify you within the service. We do not use it for advertising, and we do not request access to Gmail, Drive, or any other Google service.

Bleviq’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How information is shared

We do not sell personal information. We share information with service providers who process it on our behalf to run Bleviq:

• Supabase — database, authentication, and data storage.
• Vercel — application hosting and delivery.
• OpenAI — to turn your content into a searchable index and to generate the assistant’s replies. Relevant content and visitor questions are sent to OpenAI’s API to produce answers.
• Stripe — payment processing and subscription management.
• Google — sign-in, when you choose it.
• Google Analytics — to understand how our website is used. This loads only if you consent, and under California law it may be considered “sharing.” You can opt out on our Do Not Sell or Share My Personal Information page.

We may also disclose information if required by law, to enforce our agreements, to protect the rights and safety of Bleviq or others, or in connection with a merger, acquisition, or sale of assets.

Your content and AI-generated answers

The assistant generates answers based on the content a customer trains it on. Customers are responsible for the content they provide and for what their assistant tells visitors. Automated answers may be incomplete or incorrect and should not be relied on as professional advice.

Sensitive information

Bleviq is not intended for the collection of sensitive personal information, including protected health information (PHI). We discourage visitors from submitting health, financial, or other sensitive details through the chat, and we are not responsible for sensitive information that visitors choose to provide. Bleviq is not HIPAA compliant and should not be used to collect or process such data.

Data retention

We keep account information and trained content for as long as your account is active. Visitor conversations are retained to operate the service and are automatically deleted about 90 days after a conversation’s last activity.

You can delete content you have added at any time. You can also permanently delete your entire account from your account settings, which cancels any active subscription and removes your account, trained content, conversations, and associated data. You may also request deletion by contacting us.

After deletion, we may retain limited records as required for legal, accounting, tax, or security purposes. Payment and transaction records are held by our payment processor, Stripe, in line with its own retention obligations.

Security

We protect information with measures including encryption in transit, access controls, database row-level security, and hashed credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International users

Bleviq is operated from the United States, and information is processed and stored in the United States. By using the service, you understand your information may be processed there.

Children’s privacy

Bleviq is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, including the right to know what we collect and to request deletion, and the right not to be discriminated against for exercising those rights. California residents can also opt out of analytics sharing on our Do Not Sell or Share My Personal Information page. To make a request, email us at the address below.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be made clear through the service.

Contact us

Questions about this policy or your information? Email johnnyla@mrla-media.com. Bleviq is operated by MRLA Media LLC, Los Angeles, California, USA.