PRIVACY POLICY

Privacy Policy for ABlaze

This Privacy Policy describes how ABlaze collects, uses, discloses, retains, and protects personal information when you visit tryablaze.com, create an account, run studies, contact support, or otherwise use the ABlaze service.

Effective and last updated: 16 September 2026

1. Introduction and scope

ABlaze (“ABlaze,” “we,” “us,” or “our”) provides pre-traffic experimentation software that helps customers compare live web experiences using grounded AI personas and stored browser evidence. This Privacy Policy applies to personal information processed through https://tryablaze.com, related worker hostnames used to deliver the service, customer workspaces, APIs used by the product, and support communications.

Public marketing and policy pages can be read without creating an account. Access to a private customer workspace, study evidence, billing actions, and admin tools requires authentication.

2. Data controller / operator

The service is operated as ABlaze, an independently operated AI experimentation software service. Privacy, support, and legal notices should be sent to support@tryablaze.com. Additional business-identity details are published at https://tryablaze.com/contact.

For eligible paid checkouts, Dodo Payments may act as Merchant of Record and process payment data under its own terms and privacy notice. ABlaze receives payment status and transaction references needed to unlock and reconcile purchased studies.

3. Categories of personal information we collect

Depending on how you use ABlaze, we may process the following categories of information:

  • Account and identity data: verified email address, name, display name, and Google profile identifiers needed to authenticate you and keep workspaces attached to the correct owner.
  • Authentication and session data: OAuth tokens exchanged transiently during sign-in, signed session values, and sign-in/sign-out events.
  • Customer content: study names, briefs, audiences, hypotheses, live URLs, primary-action instructions, persona settings, exports, share-link settings, and related workspace configuration.
  • Study evidence: browser-run events, screenshots, completion signals, latency, errors, agent traces, generated reports, and operational metadata linked to a study.
  • Payment and billing data: checkout status, product identifiers, currency, amount, invoice or transaction references, and refund or credit outcomes. Full payment card numbers are processed by Dodo Payments, not stored by ABlaze as card vault data.
  • Support data: messages, contact details, study IDs, and attachments or context you send when requesting help.
  • Technical and security data: IP address, user agent, device/browser characteristics, timestamps, referrer, approximate network location, abuse-prevention signals, and diagnostic logs.

4. Google Sign-In and Google user data

ABlaze uses Google OAuth / Google Sign-In solely to authenticate users and associate studies with the correct account owner. From Google we receive your verified email address, name, and basic profile information required for account creation and sign-in. We do not receive your Google password.

Google user data obtained through Google APIs is used only to:

  • sign you in to ABlaze;
  • create and maintain your user record and workspace ownership;
  • display your account identity in the product;
  • secure accounts, prevent abuse, and provide customer support tied to your account.

ABlaze does not:

  • sell Google user data;
  • use Google user data for advertising;
  • use Google user data for determining creditworthiness or lending;
  • transfer Google user data to third parties except to subprocessors that help operate ABlaze, or when required by law;
  • use Google user data to train general-purpose foundation models.

ABlaze's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You may revoke ABlaze access from your Google Account permissions at any time. Revoking access prevents future Google-based sign-in until you reconnect; it does not automatically delete historical ABlaze study records unless you also request deletion.

5. How we use personal information

  • Provide, operate, maintain, and improve the ABlaze service.
  • Authenticate users and enforce workspace ownership boundaries.
  • Research audiences, execute browser studies, recover interrupted work, and generate reports.
  • Process payments, credits, refunds, and purchase reconciliation.
  • Respond to support, privacy, security, and legal requests.
  • Monitor reliability, investigate incidents, prevent fraud/abuse, and secure the platform.
  • Comply with applicable law and enforce our terms where necessary.

Where applicable law requires a legal basis, we rely on one or more of: performance of a contract with you; legitimate interests in operating a secure SaaS product; compliance with legal obligations; and consent where required for a specific optional processing activity.

6. Cookies, local storage, and similar technologies

After successful Google Sign-In, ABlaze sets an HTTP-only cookie named ablaze_session. This cookie authenticates subsequent requests to protected product routes. It is required for signed-in product use and is not used to serve third-party advertising.

The browser may also store short-lived product state in local or session storage, such as a draft study payload while you complete checkout or return from authentication. Clearing site data signs you out and removes that local draft state.

The public support form may use Cloudflare Turnstile to reduce automated abuse. Turnstile is used for bot protection on that form, not to build advertising profiles for ABlaze.

7. When we share information

We share personal information only as needed to operate the product or as required by law:

  • Service providers / subprocessors: Google (authentication), Cloudflare (hosting, security, browser execution, and related infrastructure), model providers used to generate study analysis, Dodo Payments (checkout and Merchant of Record services), Resend (transactional email), and Linkup (research retrieval used in study planning).
  • Share links you create: if you generate a report share link, recipients can view the shared report according to the link settings you chose.
  • Legal and safety disclosures: when we believe disclosure is reasonably necessary to comply with law, enforce agreements, or protect rights, safety, and security.
  • Business transfers: information may transfer as part of a merger, acquisition, financing, or sale of assets, subject to continuing confidentiality and privacy commitments.

We do not sell personal information and do not share it for cross-context behavioral advertising.

8. Authorised operator access

Authorised ABlaze operators may access account, study, run, report, payment-status, and telemetry records only when reasonably necessary for support, security, fraud prevention, billing reconciliation, incident response, or service reliability. Confidential study content is not used for unrelated purposes.

9. International transfers

ABlaze and its providers may process information in the United States and other countries. Those countries may have privacy laws different from the laws in your jurisdiction. We use provider contracts and security controls appropriate to the service relationship, and you acknowledge that using ABlaze involves cross-border processing needed to deliver a hosted internet product.

10. Retention

We retain account and study records while your account remains active so you can reopen and audit previous work. Operational telemetry is retained for a limited period needed for reliability, security, and abuse investigations. Payment, invoice, refund, and related business records may be retained for tax, accounting, chargeback, fraud-prevention, and legal periods required of ABlaze or its payment partners.

More detail on deletion timing and residual copies is available in our Data retention & deletion policy. Verified deletion requests are targeted for completion within 30 days, subject to legal retention exceptions.

11. Your rights and choices

Depending on your location, you may have rights to request access, correction, export, deletion, restriction, or objection, and to lodge a complaint with a supervisory authority. To exercise a privacy right, email support@tryablaze.com from your account email and include relevant study or workspace identifiers. We may need to verify your identity before fulfilling the request.

You may sign out of ABlaze at any time. You may also remove ABlaze's OAuth access from your Google Account settings. Sign-out ends the current ABlaze session cookie. Removing Google access stops future Google sign-in until reconnected.

12. Children

ABlaze is a business software service intended for adults acting in a professional capacity. It is not directed to children, and we do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, contact support@tryablaze.com and we will take appropriate deletion steps.

13. Security

We implement technical and organizational measures appropriate to the service, including transport encryption, signed session cookies, account ownership checks, scoped operator access, signed payment confirmation, bot-protection on public support intake, and operational monitoring. No method of transmission or storage is completely secure. Please use unique credentials on your Google account and report suspected security issues to support@tryablaze.com without accessing data that is not yours.

14. Do Not Track and analytics

ABlaze does not currently alter service behavior in response to browser Do Not Track signals. We focus telemetry on product reliability, security, and study execution rather than advertising analytics.

15. Public product information

Anyone can review public product information without signing in at https://tryablaze.com/app-info, https://tryablaze.com/about, and this Privacy Policy. An authenticated workspace is required only for private study configuration, execution, evidence, and billing actions.

16. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will change when we do. Material changes will be posted on this page. Continued use of ABlaze after an update means the revised policy applies to subsequent use of the service.

17. Contact

Privacy questions and requests: support@tryablaze.com
Website: https://tryablaze.com
Public product information: https://tryablaze.com/app-info