Skip to main content

Privacy Policy

At Bleam, we are committed to protecting your privacy and personal data. This policy explains how we collect, use, and protect your information.

Last updated: July 18, 2026

Data controller: Cyad SAS, 129 rue de Lille, 59420 Mouvaux, France, registered at Lille Métropole Trade Registry under number 103 388 930.

1. Information We Collect

Registration Data

When you register, we collect your email address, username, and information necessary to create your Bleam account.

Sales Data

To ensure proper functioning of our automation services, we collect and process data related to your listings, sales, inventory, and interactions with connected second-hand marketplaces.

Technical Data

We automatically collect certain technical information such as your IP address, browser type, and usage data to improve our services.

2. How We Use Your Data

Service Provision

  • Automation of your listings and inventory management
  • Messaging assistant and automatic negotiation
  • Accounting calculations and performance analysis
  • Multi-account management and synchronization

Continuous Improvement

We analyze the use of our services to identify possible improvements and develop new features that meet your needs.

Communication

We may use your email address to send you important information about your account, service updates, and occasionally tips to optimize your sales.

3. Data Sharing and Protection

No Data Sharing

We never sell your personal data to third parties. Your information is only shared with connected sales platforms (like Vinted) as part of the normal operation of our automation services.

Security

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, loss, destruction, or disclosure.

Secure Hosting

Our servers are hosted in secure data centers. Some of our processors (image storage, artificial-intelligence providers, payment, e-mail delivery, audience measurement) process data in the United States: these transfers are covered by the safeguards of Chapter V of the GDPR (an adequacy decision, including the Data Privacy Framework, or standard contractual clauses). The list of our processors is available on request at privacy@bleam.app.

4. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: You can request access to all your personal data
  • Right of rectification: You can correct or update your information
  • Right to erasure: You can request the deletion of your data
  • Right to portability: You can retrieve your data in a structured format
  • Right to object: You can object to the processing of certain data
  • Right to restriction: You can request restriction of processing

To exercise these rights, contact us at: privacy@bleam.app

5. Cookies and Similar Technologies

Essential Cookies

We use cookies strictly necessary for the operation of our service, particularly to maintain your logged-in session and ensure security.

Analytics Cookies

With your consent, we use analytics cookies to understand how you use our service and improve it accordingly.

Cookie Management

You can manage your cookie preferences at any time via your browser settings or our cookie management interface.

6. Data Retention

We retain your personal data only for the period necessary for the purposes for which it was collected:

  • Account data: for the duration of your subscription + 3 years
  • Sales data: for the duration of service use
  • Technical data: maximum 13 months

At the end of these periods, your data is deleted or anonymized. You can also request the deletion of your data at any time by writing to privacy@bleam.app.

7. Changes to This Policy

We reserve the right to modify this privacy policy at any time. In case of significant changes, we will inform you by email or via an in-app notification at least 30 days before the changes take effect.

The most recent version of this policy is always available on this page, with the last update date clearly indicated.

8. API & AI connectors (MCP)

Bleam offers a connector (MCP) that lets you plug a third-party AI assistant of your choice (Claude, ChatGPT…) into your Bleam data. This connector is only enabled by you, through an explicit authorization (OAuth): without your consent, no data is exposed.

By default, access is read-only. Through a separate, explicit consent, you can allow configuration actions (changing your settings: bot, favorites, reposting, Knowledge). These actions never affect your subscription, and the authorization can be turned off at any time. The data accessed is transmitted only to the AI assistant you connected, which processes it under its own privacy policy. You can revoke this access at any time.

Questions or concerns?

If you have any questions regarding this privacy policy or the processing of your personal data, please do not hesitate to contact us.

Email: privacy@bleam.app