Privacy Policy

1. Who we are

goblume.ai (“GoBlume”, “we”, “us”) is operated by Pedro Guitián, Juan Otero, and Hernando Ardila, doing business as GoBlume. We are the party responsible for the personal information described here — the “controller”, in the language of European data protection law.

For any privacy question or request, email hello@goblume.ai. This policy covers our website and waitlist. It does not cover other companies’ websites we link to.

2. What we collect

Information you give us

Your email address, when you join the waitlist. That is the only field the form has, and the only thing we ask you for.

Information we collect automatically

• Your IP address, when you submit the waitlist form. We use it only to count submissions per minute and block abuse; it is stored briefly by our rate-limiting provider and is not linked to your email address.
• Basic traffic data — pages viewed, referring site, approximate region, browser and device type — through our analytics, which is aggregated and does not use cookies or build a profile of you across other websites.
• Server logs kept by our hosting provider for security and debugging.

We do not collect payment details, and we do not ask for or want any sensitive information (health, biometric, precise location, government identifiers, or similar).

3. Why we use it

• To email you about the launch. Joining the waitlist signs you up for a confirmation email and a notice when access opens, plus occasional progress updates. Nothing else.
• To keep the site working and secure — rate limiting, abuse prevention, debugging.
• To understand demand in aggregate, so we know which pages people find useful.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not use it to train machine-learning models.

4. Our legal bases (EEA and UK visitors)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases under the GDPR and UK GDPR:

• Consent (Art. 6(1)(a)) — for sending you waitlist and launch email. You may withdraw it at any time by using the unsubscribe link in any email or emailing us; withdrawing does not affect processing that already happened.
• Legitimate interests (Art. 6(1)(f)) — for site security, abuse prevention, and aggregate analytics. Our interest is running a functioning, non-abused website; we have weighed this against your rights and use the minimum data that achieves it.

5. Cookies and similar technologies

We do not use advertising or tracking cookies. We run no advertising pixels and no cross-site trackers. Our analytics is cookieless and measures traffic in aggregate.

The only cookies our site may set are strictly necessary ones — for example, the session cookie our authentication provider sets if and when you sign in to an account. Strictly necessary cookies do not require consent, which is why you are not seeing a cookie banner. If we ever add cookies that do require consent, we will ask you first.

6. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with the service providers below, who process it on our instructions and for no purpose of their own:

We may also disclose information if we are legally required to, or to protect our rights and the safety of others. If GoBlume is ever acquired or merged, your information may transfer to the new owner; we will tell you before it becomes subject to a materially different policy.

7. International transfers

We are based in the United States and our service providers store data there. If you are in the EEA or the UK, this means your information is transferred outside your home country. Where required, those transfers rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum), which our providers incorporate into their terms. You can ask us for details.

8. How long we keep it

• Waitlist email addresses — until you unsubscribe or ask us to delete them, or until 24 months after launch if you never became a user, whichever comes first.
• Rate-limiting records — minutes, then automatically discarded.
• Server and analytics logs — retained by our providers on their standard schedules, generally no more than 12 months.

9. Your rights

Whatever your location, you can email hello@goblume.ai and ask us to show you what we hold, correct it, or delete it. We will respond within 30 days. We will not treat you differently for exercising any of these rights.

If you are in the EEA or the UK

You have the right to access, rectify, erase, restrict, or object to our processing of your information, and the right to receive it in a portable format. You also have the right to lodge a complaint with your local data protection authority — though we would appreciate the chance to resolve it first.

If you are in California

Under the CCPA/CPRA you have the right to know what personal information we collect and why, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we have not done so in the preceding twelve months, so there is nothing to opt out of. We honor Global Privacy Control signals. We collect one category of personal information under the statute: identifiers (email address, IP address).

Other US states

Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Texas, Oregon, and Utah — have comparable rights to access, correct, delete, and port their information, and may appeal a refused request by replying to our response.

10. Security

The site is served over HTTPS, our providers are established vendors with their own security programs, and access to the waitlist is limited to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but the only thing we hold about you is an email address, which limits what an incident could expose. If a breach affects you and the law requires notice, we will notify you.

11. Children

GoBlume is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email us and we will delete it.

12. Changes to this policy

If we change this policy we will update the date at the top of the page. If the change is material — a new category of data, a new purpose, or a new kind of sharing — we will email waitlist subscribers before it takes effect.

13. Contact

Pedro Guitián, Juan Otero, and Hernando Ardila, doing business as GoBlume
3399 North Road, Poughkeepsie, NY 12601, United States
hello@goblume.ai

See also our Terms of Service.