At Bleam, we are committed to protecting your privacy and personal data. This policy explains how we collect, use, and protect your information.
Last updated: October 7, 2026
Data controller: Cyad SAS, 129 rue de Lille, 59420 Mouvaux, France, registered at Lille Métropole Trade Registry under number 103 388 930.
When you register, we collect your email address, username, and information necessary to create your Bleam account.
To ensure proper functioning of our automation services, we collect and process data related to your listings, sales, inventory, and interactions with connected second-hand marketplaces.
We automatically collect certain technical information such as your IP address, browser type, and usage data to improve our services.
When you use the features that interact with your buyers (automated replies, messages to people who favourited an item, CRM, inbox), we process their data on your behalf and on your instructions: you are the data controller, we are your processor. The framework for this processing (data categories, retention periods, sub-processors, and the notice to give your buyers) is set out in the "Personal data processing" annex to our terms of service.
If you link your Discord account to Bleam, we keep that account's identifier and username. If you belong to a Bleam partner community (a Discord server we have a partnership with), we check every night, on that community's server, whether your account holds the role that gives access to Bleam. We only keep the fact that you are a member, and how you became one (the community's sign-up code or the role on its server). We do not read your Discord messages or your other servers.
We analyze the use of our services to identify possible improvements and develop new features that meet your needs.
We may use your email address to send you important information about your account, service updates, and occasionally tips to optimize your sales.
Cyad SAS, the data controller for Bleam and Kavis, uses the sales recorded in Bleam over the last 12 months to estimate market prices in Kavis. These sales are sent to Kavis without any name, username or account identifier: the seller appears only under a pseudonymous code obtained by hashing with a secret key kept by Bleam, and stock references are removed from titles. This data covers a rolling 12-month period, is replaced every night and is used only to calculate these price estimates.
If you also use Kavis with the same email address, confirmed on both Bleam and Kavis, Cyad SAS may, at your express request made from Kavis, send your Bleam templates to Kavis (name, category, brand, title, description and dates, without price, condition, size, colour or material) in order to convert them into Kavis listing formats. This read only happens after your request, every access is logged by Bleam, your templates stay in Bleam unchanged, and Kavis only keeps the formats you accept.
We never sell your personal data. It is shared with the platforms you connect (such as Vinted or Discord) so the service can work, and with technical providers acting on our behalf and on our instructions: hosting and database, file storage, artificial intelligence providers, payment, email delivery, analytics and notifications. If you signed up with a partner coach's code, or accepted their invitation, that coach sees your sales and purchase data in their coaching CRM while your subscription or trial is active; you can remove this access at any time in your settings. If you are a member of a partner community, its administrator sees overall statistics for the community, in which no member is named, and, only if you have agreed, your leaderboard line; the other members see that same line, on the website and in the community's Discord channel (see "Partner community leaderboard" below). No other sharing takes place, except where required by law.
We implement appropriate technical and organizational security measures to protect your data against unauthorized access, loss, destruction, or disclosure.
The service runs from the European Union: our backend and cloud sessions are hosted in Germany (Hetzner). Our database, file storage, Discord and some providers (artificial intelligence, payment, email delivery, analytics) are located in the United States. These transfers are covered by the Chapter V safeguards of the GDPR (an adequacy decision, including the Data Privacy Framework, or Standard Contractual Clauses). The list of our sub-processors is available on request at privacy@bleam.app.
Some features rely on artificial intelligence models provided by OpenAI, Google, Anthropic and Fireworks AI: replies suggested to your buyers, support assistance, image processing. The content they need is sent under paid plans, whose terms exclude using it to train the models. Messages received by the bot are also analyzed by TypeSafe to detect manipulation attempts before any reply. A reply drafted by a model remains under your control: you can edit it, and turn these features off at any time.
Members of a partner community can view its leaderboard from the community's Space in Bleam. On your first visit, you choose: appear under your Discord username, or just view. Until you have made this choice, you do not see the leaderboard and you are not on it. There is no anonymous mode: you are on the leaderboard under your Discord username or not at all. If you choose to just view, or if no Discord username is known for you, you see the podium and the place you would have (only you can see it), but you are not on the leaderboard and you do not take part in the contest. If you appear, the other members of the community see, on this page and in the community's Discord channel where the daily leaderboard is posted every evening and the weekly one on Sundays, your Discord username (the name you display on the community's Discord server, or failing that your Discord username; never your Vinted username), your tier, your Vinted revenue for the period (day, week or month) and your rank. Your name, your email address, the link to your Vinted profile and the details of your sales are never shown. Bleam administrators may view, for members who appear on the leaderboard, the Vinted accounts linked to them, in order to rule out sellers of counterfeit goods before a prize or reward is awarded; this information is never shown to other members. At any time, from “How you appear” on this page, you can hide your revenue, or stop appearing under your Discord username, which withdraws your consent to being on it: you then switch to view-only. Withdrawal applies to the following leaderboards: a poster already published in the Discord channel stays there, unless you ask us to remove it at privacy@bleam.app. Just viewing or withdrawing your consent changes nothing else in the service: the free access your community gives you and your quotas stay the same. Your sales still count in the community's overall statistics, in which no member is named.
Based on your Vinted revenue over a calendar month, you are given a tier (for example "Petit revendeur"). It is shown on your Leaderboard page and, if you appear on the leaderboard under your Discord username, as a role on the community's Discord server, where the other members can see it; if you stop appearing on it, this role is removed. A tier you have earned never goes down. The community also runs a contest every month: it is open to members who appear on the leaderboard under their Discord username, who are subscribed to Bleam when the month closes (an ongoing trial counts) and who reach the month's sales threshold. For the contest, we use your revenue for the month, your rank and your subscription type. Before a prize is awarded, Bleam administrators check the Vinted accounts linked to participants, in order to rule out sellers of counterfeit goods. Every prize draw is recorded (list of participants, fingerprint of that list, random value used and winner) so that its fairness can be proven.
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
Deleting your account and exporting your data are done directly from your settings, with no need to write to us. For any other request, we respond within one month.
To exercise these rights, contact us at: privacy@bleam.app
We use cookies strictly necessary for the operation of our service, particularly to maintain your logged-in session and ensure security.
With your consent, we use analytics cookies to understand how you use our service and improve it accordingly.
With your consent only, we store the click identifiers from our campaigns (bleam_gclid and bleam_fbclid, 90 days) and send conversion events to Meta, Google Ads and TikTok. If you decline, these identifiers are not stored and no conversion is sent.
Videos in the help center, the blog and the dashboard are hosted on YouTube. Until you start a video, only a preview served by Bleam is shown and nothing is sent to YouTube. When you click play, the YouTube player loads: Google then receives your IP address and information about your browser, and may set its own cookies, governed by its own privacy policy.
You can change your mind at any time by clearing this site's data in your browser: the consent banner will be shown again on your next visit. Declining non-essential cookies has no effect on how the service works.
We retain your personal data only for the period necessary for the purposes for which it was collected:
At the end of these periods, your data is deleted or anonymised. You can also delete your account at any time from your settings, or write to us at privacy@bleam.app.
We reserve the right to modify this privacy policy at any time. In case of significant changes, we will inform you by email or via an in-app notification at least 30 days before the changes take effect.
The most recent version of this policy is always available on this page, with the last update date clearly indicated.
Bleam offers a connector (MCP) that lets you plug a third-party AI assistant of your choice (Claude, ChatGPT…) into your Bleam data. This connector is only enabled by you, through an explicit authorization (OAuth): without your consent, no data is exposed.
By default, access is read-only. Through a separate, explicit consent, you can allow configuration actions (changing your settings: bot, favorites, reposting, Knowledge). These actions never affect your subscription, and the authorization can be turned off at any time. The data accessed is transmitted only to the AI assistant you connected, which processes it under its own privacy policy. You can revoke this access at any time.
If you have any questions regarding this privacy policy or the processing of your personal data, please do not hesitate to contact us.
Email: privacy@bleam.app