Privacy Policy

Last updated April 15, 2026

This Privacy Notice for Blot Studios LLC (doing business as Blot Studios) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

Visit our website at https://blot.dev or any website of ours that links to this Privacy Notice
Use Blot. Blot is an AI-powered growth platform that helps small businesses manage and optimize their marketing. Blot connects to your advertising accounts (such as Google Ads and Meta Ads), analyzes your campaign performance, and provides recommendations to improve your results. We also help with marketing automation including email campaigns and lead generation.
Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at team@blot.dev.

Summary of Key Points

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We may collect advertising performance data from third-party platforms (such as Meta and Google) when you connect your advertising accounts to our Services.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties, including advertising platforms when executing campaigns on your behalf.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by emailing team@blot.dev. We will consider and act upon any request in accordance with applicable data protection laws.

What Information Do We Collect?
How Do We Process Your Information?
When and With Whom Do We Share Your Personal Information?
Do We Use Cookies and Other Tracking Technologies?
Do We Offer Artificial Intelligence-Based Products?
How Do We Handle Your Social Logins?
Advertising Platform Integrations
How Long Do We Keep Your Information?
How Do We Keep Your Information Safe?
Do We Collect Information from Minors?
What Are Your Privacy Rights?
Controls for Do-Not-Track Features
Do United States Residents Have Specific Privacy Rights?
Our Commitment to You
Do We Make Updates to This Notice?
How Can You Contact Us About This Notice?
How Can You Review, Update, or Delete the Data We Collect from You?

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

Names
Email addresses

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called "How Do We Handle Your Social Logins?" below.

Advertising Platform Data. When you connect your Meta (Facebook) ad account or other advertising platform accounts, we collect and store: your ad account ID, encrypted access tokens, campaign data (names, budgets, targeting parameters, performance metrics), pixel data, and Facebook Page information. This data is accessed through the Meta Marketing API and is used solely to create, manage, and optimize ad campaigns on your behalf.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Google API

Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
To manage advertising campaigns. When you connect your Meta ad account, we process your advertising data to create campaigns, manage budgets, analyze performance, and provide optimization recommendations. All campaign actions require your explicit approval before execution.
To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see "What Are Your Privacy Rights?" below.
To evaluate and improve our Services, products, marketing, and your experience. We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.

3. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Advertising Platform Providers. When you use our Services to manage ad campaigns, we transmit campaign data (creative content, targeting parameters, budgets) to Meta Platforms, Inc. via their Marketing API to execute campaigns on your behalf. We do not share your personal information with Meta beyond what is necessary to operate the advertising features you have authorized.
AI Service Providers. We share your input and campaign data with AI service providers (including Anthropic) to power our AI-driven campaign recommendations and creative generation. See section 5 for details.

4. Do We Use Cookies and Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences).

To the extent these online tracking technologies are deemed to be a "sale"/"sharing" (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section "Do United States Residents Have Specific Privacy Rights?"

5. Do We Offer Artificial Intelligence-Based Products?

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this Privacy Notice govern your use of the AI Products within our Services.

Use of AI Technologies

We provide the AI Products through third-party service providers ("AI Service Providers"), including Anthropic. As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products

Our AI Products are designed for the following functions:

AI-powered campaign strategy and recommendations
Ad creative generation and optimization
Performance analysis and insights

How We Process Your Data Using AI

All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties. This ensures high security and safeguards your personal information throughout the process.

6. How Do We Handle Your Social Logins?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or X logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, and profile picture, as well as other information you choose to make public on such a social media platform.

We will use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.

7. Advertising Platform Integrations

In Short: When you connect advertising platforms like Meta, we access your ad account data to manage campaigns on your behalf. You control what we do and can disconnect at any time.

What we collect

When you connect your Meta (Facebook) ad account to Blot, we collect and store the following through the Meta Marketing API:

Account credentials: OAuth access tokens (encrypted at rest), ad account ID, connected Facebook Page ID
Campaign data: Campaign names, objectives, budgets, statuses, ad set configurations, targeting parameters, and ad creative content
Performance data: Impressions, clicks, conversions, spend, cost-per-result, and other campaign metrics
Pixel data: Pixel ID, pixel health status, and conversion event data

How we use it

To create, manage, and optimize ad campaigns on your behalf
To analyze campaign performance and provide recommendations
To sync campaign statuses between Meta and Blot
All campaign creation and modification requires your explicit approval before execution

How we store it

Access tokens are stored encrypted in our database and are never exposed in client-side code or API responses
Campaign performance data may be cached to reduce API calls and improve response times
We do not store your Meta password or any payment information from your ad account

Disconnecting your account

You may disconnect your Meta ad account at any time from Settings. When you disconnect, we immediately:

Revoke the access token with Meta's API
Delete all stored integration data including your ad account ID, tokens, and cached data from our systems

Campaigns already created on Meta will continue to exist in your Meta Ads Manager independently of Blot.

8. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. Do We Collect Information from Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at team@blot.dev.

11. What Are Your Privacy Rights?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "How Can You Contact Us About This Notice?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section "How Can You Contact Us About This Notice?" below.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Disconnecting advertising accounts

You may disconnect your Meta ad account at any time from Settings. When you disconnect, we immediately revoke the access token with Meta and delete all stored integration data including your ad account ID, tokens, and cached campaign data from our systems.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

If you have questions or comments about your privacy rights, you may email us at team@blot.dev.

12. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

Global Privacy Control: We recognize and honor Global Privacy Control (GPC) signals. If you use a browser or extension that supports GPC, we will treat this as a valid request to opt out of the sale or sharing of your personal information for targeted advertising purposes under applicable state privacy laws, including the California Consumer Privacy Act (CCPA). When we detect a GPC signal from your browser, we will automatically apply your opt-out preference without requiring you to take any additional action.

13. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.

Your Rights

You have rights under certain US state data protection laws. These rights include:

Right to know whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request the deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to non-discrimination for exercising your rights
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling

How to Exercise Your Rights

To exercise these rights, you can contact us by emailing team@blot.dev or by referring to the contact details at the bottom of this document.

We will honor your opt-out preferences if you enact the Global Privacy Control (GPC) opt-out signal on your browser.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at team@blot.dev. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

14. Our Commitment to You

We believe in being transparent and straightforward about your data. Here's our promise:

We will never sell your data. Your information is used solely to provide and improve Blot's services for you.
You can leave anytime. You're free to disconnect your accounts and delete your data whenever you want.
We're building tools to make this easier. We're actively developing features to let you view, export, and delete your data yourself. In the meantime, just reach out and we'll handle it personally.

Questions about your data? Want to see what we have? Need something deleted? Email us at team@blot.dev -- we're happy to help and will always be straight with you.

15. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

16. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at team@blot.dev or contact us by post at:

Blot Studios LLC
1259 Carrison St
Apt C
Berkeley, CA 94702
United States

17. How Can You Review, Update, or Delete the Data We Collect from You?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email team@blot.dev.