Privacy Policy

Welcome to The Blog GPT. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our platform.

1. Information We Collect

When you sign in using Google Authentication (Google OAuth), we collect the following information from your Google account:

  • Your full name
  • Your email address (Gmail)
  • Your profile picture

This information is provided directly by Google after your consent during login. We do not collect your Google password.

We may also collect additional information such as:

  • Blog content you create or publish
  • Images you upload or generate with our AI tools (stored and served via our image provider, Cloudinary)
  • Your IP address and basic request metadata, collected automatically and used for security, rate limiting, and abuse/spam prevention (our legitimate interest, not for tracking)
  • Usage and analytics data (e.g., pages visited, device type), collected only with your explicit consent
  • Name and email submitted via our contact form
  • Your own AI provider (Gemini) API key, only if you choose to add one in your settings. It is stored encrypted at rest, is never shown back to you or sent to your browser, and we never use it for our own purposes — it belongs to you and is held solely to power your own AI generations.

Payment Information

When you subscribe to a paid plan, your payment is processed by our payment provider, Razorpay. We do not store or have access to your full card number, CVV, or bank credentials. These are handled directly by Razorpay. We do store subscription metadata such as your plan, billing cycle, amount, currency, and the Razorpay customer/subscription identifiers, along with payment event records used to verify and audit transactions.

2. Public Profile Information

Your name and profile picture may be publicly visible on the platform alongside your blog posts, comments, or profile page. By using The Blog GPT, you agree to this public display of basic profile information.

3. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Display your published blog content
  • Provide AI-powered content generation features
  • Improve platform performance and user experience
  • Respond to contact form enquiries
  • Ensure security and prevent misuse

4. Cookies and Analytics

We use cookies and analytics tools (such as Google Analytics and Vercel Analytics) only after you have given explicit consent via the cookie consent banner shown on your first visit. You can change your preferences at any time using the Cookie Settings link in the footer of our website, or read our full Cookies Policy.

5. Third-Party Services

We rely on trusted third-party services to operate our platform, including:

  • Google Authentication (OAuth): sign-in
  • Razorpay (privacy policy): payment and subscription processing
  • Cloudinary (privacy policy): image hosting and delivery
  • Google (Gemini API): AI text and image generation
  • Resend: transactional email (e.g., billing and account notices)
  • Google Analytics (analytics, with consent)
  • Vercel Analytics (analytics, with consent)
  • Hosting and database providers

These services may process limited user data only as necessary to provide their functionality.

AI generation: when you use our AI features, the text or image prompt you submit (including any title you provide) is transmitted to Google's Gemini API to produce the requested content. Please do not enter sensitive personal information into AI prompts.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

  • Account data (name, email, profile picture): retained until you request deletion
  • Blog content: retained until you delete it or your account is removed
  • Contact form messages: retained for up to 12 months for support purposes
  • Analytics data: processed by Google/Vercel per their own retention policies (typically 14 to 26 months)
  • Subscription and payment records: retained after account deletion only as required to meet financial, tax, accounting, and audit obligations (typically up to 7 or 8 years under applicable law). Where personal identifiers are not legally required, they are disassociated from your profile or minimized.

7. International Data Transfers

Your data may be processed by third-party service providers located outside your country, including in the United States and India (Razorpay). These transfers are made under appropriate safeguards, such as Standard Contractual Clauses (SCCs) and the data processing agreements of our providers (Google, Vercel, Cloudinary, Razorpay, and Resend), in compliance with applicable data protection laws.

8. Data Security

We implement reasonable technical and organizational security measures to protect your data from unauthorized access, misuse, or disclosure. However, no system can guarantee complete security.

9. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under GDPR:

  • Access your stored personal data
  • Request corrections or updates to your data
  • Request deletion of your account and associated data
  • Withdraw consent for analytics at any time (via Cookie Settings in the footer)
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at the email below.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the "sale" or "sharing" of your personal information

Do Not Sell or Share My Personal Information: We do not sell your personal information for monetary compensation. However, our use of Google Analytics and Vercel Analytics may constitute "sharing" under CCPA's broad definition. You can opt out at any time by clicking Cookie Settings in the footer and disabling analytics cookies.

To exercise your CCPA rights, contact us at the email below.

11. Children's Privacy

The Blog GPT is not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or request account deletion, please contact us at [email protected].

Last updated: June 26, 2026