Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains how BackgroundBlog ("we", "us", or "our") collects and uses personal data when you visit backgroundblog.com, create an account, or use our related applications, content generation, publishing, and support services (collectively, the "Service").

BackgroundBlog operates from Poland and is the controller of the personal data described in this policy, except where another party, such as an integration you connect, acts under its own privacy policy. You can contact us at contact@backgroundblog.com.

1. Personal data we collect

We collect personal data directly from you, automatically when you use the Service, from Stripe and integrations you connect, and from public sources used to provide website research and content-generation features. Depending on how you use the Service, this may include:

• account and contact data, such as your name, email address, login and security records, and messages you send us;
• Customer Content and service settings, such as website and brand information, instructions, connected-integration details, and content generated, stored, or published through the Service;
• billing and subscription data, such as Stripe customer, payment, and subscription identifiers and subscription status, but not your full payment-card details;
• usage and technical data, such as IP address, browser and device information, pages and actions, timestamps, cookies, and diagnostic, security, and activity logs; and
• personal data contained in public websites, search results, Customer Content, or connected services when it is relevant to the features you request.

Account details and other information marked as required are needed to create and secure your account or provide the requested feature. If you do not provide them, we may be unable to provide that part of the Service.

2. How and why we use personal data

We use personal data to:

• create and manage accounts, generate and store content, operate integrations, publish at your instruction, provide support, and administer subscriptions as necessary to perform our contract with you;
• secure, monitor, troubleshoot, and improve the Service, understand how it is used, prevent fraud and abuse, and protect or enforce legal rights where necessary for our legitimate interests or those of others;
• comply with tax, accounting, consumer-protection, law-enforcement, and other legal obligations;
• send operational messages about your account, security, billing, publishing, support, and changes to the Service; and
• send optional marketing or use optional technologies where you have consented or where another lawful basis permits it. You may withdraw consent or opt out of marketing at any time.

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects on you.

3. How we share personal data

We share personal data with cloud and software providers that help us operate, support, secure, and analyze the Service; with Stripe for payment processing and billing; and with integrations you connect at your instruction. We may also disclose relevant data to professional advisers, public authorities where legally required, or a buyer or successor in connection with a merger, financing, reorganization, or sale of the business.

Stripe processes payment data under its own Privacy Policy. Connected services process information under their own terms and privacy policies.

4. International transfers

We and our service providers may process personal data outside Poland or the European Economic Area. Where data-protection law requires it, we use a recognized safeguard, such as an adequacy decision, standard contractual clauses, or another lawful transfer mechanism. Contact us if you would like more information about the safeguard relevant to your data.

5. How long we keep personal data

We keep account and service data while your account is active and for as long afterward as reasonably necessary to provide the Service, complete deletion and backup cycles, resolve disputes, enforce agreements, and meet legal obligations. When you remove a website, its Customer Content and hosted media are permanently deleted within seven days. Billing, tax, fraud, and transaction records are kept for the periods required by applicable law. Other logs and support records are deleted or anonymized when they are no longer reasonably needed for the purposes described in this policy.

6. Cookies and similar technologies

We use cookies and similar technologies for sign-in, security, and core functionality and may use them to understand use of the Service and measure campaigns. These technologies may collect device identifiers, IP address, browser information, and page or campaign activity. You can limit cookies through your browser, although blocking necessary cookies may prevent parts of the Service from working. We ask for consent where applicable law requires it.

With your consent, Google Ads receives advertising identifiers and conversion data, including account activity, timestamps and payment amounts. Reddit receives page-visit and browser/device information. We remember your browser choice for 90 days and keep ad-click identifiers for up to 90 days. Use Privacy preferences in the footer or account settings to change your choice; withdrawal stops future advertising uploads, but does not recall data already sent. Our self-hosted Umami analytics records service activity using a random identifier, without sending your name, email or article content, including when advertising is declined.

7. Your data-protection rights

Depending on the law that applies, you may have the right to access, correct, delete, or receive a copy of your personal data; restrict or object to its processing; and withdraw consent at any time where we rely on consent. Withdrawing consent does not affect processing that was lawful before withdrawal.

To exercise a right, email contact@backgroundblog.com. We may need to verify your identity and may retain information where the law permits or requires it. You may also complain to the President of the Personal Data Protection Office in Poland or another competent data-protection authority.

8. Security

We use reasonable technical and organizational measures designed to protect personal data. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for using appropriate access controls on connected services.

9. Customer Content about other people

If you provide personal data about another person in Customer Content, you are responsible for having a lawful basis and giving any required notices. Do not submit sensitive, confidential, regulated, or non-public personal information about another person. Content intended for public publication may still contain personal data and must be used lawfully.

10. Children

The Service is for users aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us so we can take appropriate action.

11. Third-party websites and services

The Service may link to or connect with services we do not control. This policy does not govern those services, and their own privacy policies apply to their processing.

12. Changes to this policy

We may update this policy when our practices, the Service, or legal requirements change. We will post the updated policy and date here and provide additional notice where required by law.

13. Contact us

Questions and privacy requests can be sent to: contact@backgroundblog.com.