Privacy Policy

Bloggerly Limited · Last updated: 28 July 2026

This Privacy Policy explains how Bloggerly Limited ("we", "us", "our"), the data controller, collects, uses, discloses and safeguards your personal data when you visit our website or use our application (together, the "Service"). We are a company registered in England and Wales (company number 17364155) with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For the purposes of the UK GDPR and the Data Protection Act 2018, we are the controller of your personal data. This Policy applies to both bloggerly.ai (our marketing site, hosted on Framer) and the Bloggerly product application at app.bloggerly.ai.

1. Information We Collect

We collect information you provide directly, information generated through your use of the Service, and information collected automatically. This may include:

  • Personal Data: name and email address.
  • Payment Data: subscription and billing details. Card payments are collected and processed by our payment provider, Stripe. We do not store your full card details on our systems.
  • Content Data: blog posts, topics, keywords, prompts and other content you generate or provide for processing.
  • Usage Data: information about how you access and use the Service, including IP address, browser type, and device information, collected in part through cookies (see our Cookie Policy).

2. How We Use Your Information and Our Legal Bases

Under UK GDPR we must have a lawful basis for processing your personal data. We use your information as follows:

  • To provide, maintain and operate the Service, process transactions and manage your account - legal basis: performance of our contract with you.
  • To send technical notices, security alerts and support messages - legal basis: performance of our contract and our legitimate interests in operating a secure service.
  • To monitor, analyse and improve the Service, and to keep it secure - legal basis: our legitimate interests.
  • To send marketing communications about products, services and offers - legal basis: your consent (which you may withdraw at any time), or our legitimate interests where permitted by law.
  • To comply with legal, tax and accounting obligations - legal basis: compliance with a legal obligation.

Your Content is processed to provide the Service to you, including by passing it to the third-party providers described below.

3. Data Sharing and Disclosure

We do not sell your personal data. We share it only with third-party service providers (sub-processors) who perform services on our behalf, under contracts that require them to keep it confidential and use it only for the purposes we specify. Our current sub-processors include:

  • Stripe - payment processing.
  • Supabase - authentication, database hosting, and storage.
  • Resend - email delivery.
  • Framer - marketing website hosting.
  • Vercel - application hosting, infrastructure, and analytics.
  • Sentry - error and performance monitoring (application).
  • Google - website analytics (when enabled on the marketing website).
  • PostHog - product usage analytics (application and marketing website).
  • Perplexity - research and information retrieval used to generate Output.
  • DataForSEO - keyword and SEO research data.
  • Supadata - media transcripts and related metadata used in research workflows.
  • Fal - image generation and related AI media processing.
  • Trigger.dev - background job processing.
  • Upstash - Redis infrastructure used for rate limiting and related operational services.
  • Upload-Post - social publishing integrations.
  • AI providers - we pass your Content to trusted AI providers to generate your Output. These currently include OpenAI, Anthropic, Google (Gemini and Gemma), DeepSeek, Fal, OpenRouter, IBM, and Meta. Some models are accessed through OpenRouter as a routing layer rather than via a direct API integration.

We may also disclose personal data where required by law, to enforce our agreements, or to protect the rights, safety or property of Bloggerly, our users or others.

4. International Data Transfers

Some of our service providers, including certain AI providers, are located outside the United Kingdom, including in the United States and other countries. Where we transfer your personal data outside the UK, we put an appropriate safeguard in place - such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to a country with UK adequacy status - so that your data receives an equivalent level of protection. Where a provider is located in a country without such safeguards, we rely on appropriate contractual protections and, where required, your consent.

5. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy:

  • Account and Personal Data: for as long as your account is active.
  • Content Data: retained for 30 days after termination or cancellation so you can request an export by emailing support@bloggerly.ai, then deleted (see the Terms of Service).
  • Billing and tax records: retained for 6 years to comply with UK legal and HMRC obligations.

We may retain limited information for longer where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Security

We use administrative, technical and physical measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, and subject to conditions under UK GDPR, you have the right to:

  • access and receive a copy of your personal data;
  • rectify or update your personal data;
  • erase your personal data ("right to be forgotten");
  • restrict or object to processing, including for direct marketing;
  • data portability - receive your data in a portable format;
  • withdraw consent at any time, where processing is based on consent; and
  • lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

To exercise any of these rights, contact us at support@bloggerly.ai. We will respond within one month.

8. Marketing and Opt-Out

Every marketing email we send includes an unsubscribe link, and you can opt out of marketing at any time by using that link or contacting us. Opting out of marketing does not stop essential service and transactional messages.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy. Cookie practices differ between the marketing website and the application; see that Policy for current details and how to contact us with cookie questions.

10. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy on this page and update the "Last updated" date, and where changes are significant we will provide more prominent notice.

11. Contact Us

Questions about this Policy or your personal data can be sent to:

Bloggerly Limited

71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

support@bloggerly.ai