Privacy Policy

Registration Data

When you register, we collect your email address, username, and information necessary to create your Bleam account.

Sales Data

To ensure proper functioning of our automation services, we collect and process data related to your listings, sales, inventory, and interactions with connected second-hand marketplaces.

Technical Data

We automatically collect certain technical information such as your IP address, browser type, and usage data to improve our services.

Your buyers' data

When you use the features that interact with your buyers (automated replies, messages to people who favourited an item, CRM, inbox), we process their data on your behalf and on your instructions: you are the data controller, we are your processor. The framework for this processing (data categories, retention periods, sub-processors, and the notice to give your buyers) is set out in the "Personal data processing" annex to our terms of service.

Service Provision

• Automation of your listings and inventory management
• Messaging assistant and automatic negotiation
• Accounting calculations and performance analysis
• Multi-account management and synchronization

Continuous Improvement

We analyze the use of our services to identify possible improvements and develop new features that meet your needs.

Communication

We may use your email address to send you important information about your account, service updates, and occasionally tips to optimize your sales.

Legal bases

• Performance of the contract: creating and managing your account, providing the features, billing.
• Legal obligation: retaining accounting records and responding to requests from authorities.
• Legitimate interest: service security, fraud prevention, measuring and improving our features.
• Consent: non-essential cookies, advertising measurement and the newsletter (withdrawable at any time).

No Data Sharing

We never sell your personal data. It is shared with the selling platforms you connect (such as Vinted) so the service can work, and with technical providers acting on our behalf and on our instructions: hosting and database, file storage, artificial intelligence providers, payment, email delivery, analytics and notifications. No other sharing takes place, except where required by law.

Security

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, loss, destruction, or disclosure.

Secure Hosting

The service runs from the European Union: our backend and cloud sessions are hosted in Germany (Hetzner). Our database, file storage and some providers (artificial intelligence, payment, email delivery, analytics) are located in the United States. These transfers are covered by the Chapter V safeguards of the GDPR (an adequacy decision, including the Data Privacy Framework, or Standard Contractual Clauses). The list of our sub-processors is available on request at privacy@bleam.app.

Artificial intelligence

Some features rely on artificial intelligence models provided by OpenAI and Google: replies suggested to your buyers, support assistance, image processing. The content they need is sent under paid plans, whose terms exclude using it to train the models. A reply drafted by a model remains under your control: you can edit it, and turn these features off at any time.

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: You can request access to all your personal data
• Right of rectification: You can correct or update your information
• Right to erasure: You can request the deletion of your data
• Right to portability: You can retrieve your data in a structured format
• Right to object: You can object to the processing of certain data
• Right to restriction: You can request restriction of processing
• Right to withdraw consent: at any time, without affecting what was done before the withdrawal
• Right to lodge a complaint: with your supervisory authority (in France, the CNIL, cnil.fr) if you believe your rights are not being respected

Deleting your account and exporting your data are done directly from your settings, with no need to write to us. For any other request, we respond within one month.

To exercise these rights, contact us at: privacy@bleam.app

Essential Cookies

We use cookies strictly necessary for the operation of our service, particularly to maintain your logged-in session and ensure security.

Analytics Cookies

With your consent, we use analytics cookies to understand how you use our service and improve it accordingly.

Advertising cookies

With your consent only, we store the click identifiers from our campaigns (bleam_gclid and bleam_fbclid, 90 days) and send conversion events to Meta, Google Ads and TikTok. If you decline, these identifiers are not stored and no conversion is sent.

Managing cookies

You can change your mind at any time by clearing this site's data in your browser: the consent banner will be shown again on your next visit. Declining non-essential cookies has no effect on how the service works.

We retain your personal data only for the period necessary for the purposes for which it was collected:

• Account data: for as long as your subscription lasts, then anonymised
• Accounting records (invoices, subscriptions): 10 years, as required by law
• Your buyers' identity: anonymised after 12 months, and shipping labels deleted after 6 months
• Technical and diagnostic logs: 13 months at most, often far less (7 days for extension errors)
• Advertising identifiers: 90 days

At the end of these periods, your data is deleted or anonymised. You can also delete your account at any time from your settings, or write to us at privacy@bleam.app.

We reserve the right to modify this privacy policy at any time. In case of significant changes, we will inform you by email or via an in-app notification at least 30 days before the changes take effect.

The most recent version of this policy is always available on this page, with the last update date clearly indicated.

Bleam offers a connector (MCP) that lets you plug a third-party AI assistant of your choice (Claude, ChatGPT…) into your Bleam data. This connector is only enabled by you, through an explicit authorization (OAuth): without your consent, no data is exposed.

By default, access is read-only. Through a separate, explicit consent, you can allow configuration actions (changing your settings: bot, favorites, reposting, Knowledge). These actions never affect your subscription, and the authorization can be turned off at any time. The data accessed is transmitted only to the AI assistant you connected, which processes it under its own privacy policy. You can revoke this access at any time.