Privacy Policy

Two roles, and which one applies to you

When your employer deploys Blank to you, your organization decides what Blank monitors and why. They are the "controller" of that information; we only process it on their documented instructions, as their "processor". If you are an employee, direct questions or requests about that data to your employer first, and we help them respond.

When you visit this website or hold a Blank administrator account, we are the controller of the limited information described below.

What the Blank extension collects

The managed extension runs only on AI-tool pages in our catalog, not across your general browsing. On those pages it reports events about AI-tool use:

• which catalogued AI tools are visited;
• detections: the detector that fired, its severity, and the position and length of the match, so an administrator can see that (for example) an API key was about to be sent;
• unknown AI tools ("candidates"), the domain of an AI tool not yet in the catalog, surfaced for review;
• an inventory of the browser extensions installed on the device;
• enforcement events, meaning a coaching prompt was shown or a request was blocked.

Each device carries an identifier and an organization enrollment token so events are attributed to the right fleet.

What it does not collect

The extension does not send the text you type or paste, the secret or personal data that trips a detector, the contents of the pages you visit, your keystrokes, or your passwords. Only the finding leaves the browser, never the matched content. It does not track your browsing outside catalogued AI tools.

Pseudonymization

An organization can enable a mode that replaces the device identifier with a pseudonym in dashboards and exports. Re-identifying a specific person is then a deliberate, logged action that requires a second administrator's approval and is limited to a short time window.

What we collect as controller

This website

useblank.dev sets no cookies and uses no analytics or third-party trackers. If you email us at hey@useblank.dev, we receive your message and address so we can reply.

Administrator accounts

To sign in to the Blank dashboard we process your email address and authentication data. Sign-in is handled by Supabase Auth, optionally through Google sign-in or your organization's single sign-on (SAML). If your organization uses SCIM, we receive the account roster (names, emails, roles) your identity provider sends.

Billing

If your organization subscribes to a paid plan, payments are processed by Stripe. We do not receive or store full card numbers.

How we use information

• to provide, secure, and support the service, on the customer organization's instructions;
• to operate administrator accounts, authenticate sign-ins, and process billing;
• to respond when you contact us;
• to meet legal and accounting obligations.

We do not sell personal information, and we do not use the content of what employees type into AI tools to train any model. That content never reaches us.

Service providers we share data with

We rely on a small set of providers to run Blank, and require each to protect data and use it only to provide their service to us:

• Supabase for database and authentication;
• Netlify for application hosting and serverless functions;
• Stripe for payment processing;
• Resend for transactional email;
• Google for optional administrator sign-in;
• your own identity provider (for example Okta or Microsoft Entra), if your organization configures single sign-on.

How long we keep it

Event data is retained for the window associated with the organization's plan, after which it is deleted automatically. An organization can request deletion of its data at any time; we honor it after a short, reversible grace period. Account and billing records are kept as long as needed to run the account and meet legal and accounting requirements.

How we protect it

Data is encrypted in transit. Each customer's data is isolated at the database row level. The on-device catalog is cryptographically signed so a device will not act on an unsigned or tampered one. Access to the dashboard is role-based, and identity can be pseudonymized as described above.

International transfers

Blank is operated from the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information may be processed in the United States under appropriate safeguards.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, or to object to it. Residents of the EEA/UK (under the GDPR) and of California (under the CCPA/CPRA) have these rights, among others.

If your employer deployed Blank, they control that data, so please contact them first, and we will assist them. For website or administrator-account data, contact us at hey@useblank.dev and we will respond.

Children

Blank is a workplace product for organizations. It is not directed to, or intended for, children.

Changes to this policy

We will post any changes on this page and update the date above. Material changes will be communicated to customer organizations.

Contact

Happy Kamper Co. LLC (dba Blank)
hey@useblank.dev