Back to Home

Privacy Policy

Last updated: 29 September 2026

1. Introduction

Blue Squircle ("we", "our", "us") is committed to protecting your privacy and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use Blue Squircle AI ("the Service").

2. Data Controller

Blue Squircle is the data controller for the personal data we process. For questions about personal data, contact us at:

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Account Information

  • Name and email address
  • Password (securely hashed)
  • Organisation name and role
  • Profile preferences

3.2 Usage Data

  • Projects, tasks, and content you create
  • Time tracking entries
  • Comments and collaboration activity
  • Audit logs of actions taken

3.3 Technical Data

  • IP address and browser information
  • Device type and operating system
  • Session data and authentication tokens

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract: To provide the Service you have subscribed to
  • Legitimate Interests: To improve our Service, ensure security, and prevent fraud
  • Legal Obligation: To comply with applicable laws and regulations
  • Consent: For optional features like marketing communications

5. How We Use Your Data

We use your personal data to:

  • Provide and maintain the Service
  • Authenticate you and manage your account
  • Process payments and manage subscriptions
  • Send essential service notifications
  • Provide AI-powered insights and recommendations
  • Improve our Service through analytics
  • Respond to your enquiries and support requests
  • Ensure security and prevent misuse

6. Data Sharing

We share your data only with:

  • Service Providers: Essential third parties who help us operate the Service (e.g., payment processors, cloud hosting)
  • Organisation Members: Other members of your organisation who have appropriate access permissions
  • Legal Requirements: When required by law or to protect our legal rights

We do not sell your personal data to third parties. AI features may send relevant content to service providers to generate outputs. If your organisation enables an optional external connection, selected content may also be shared with the connected service when authorised users use it.

7. International Transfers

Your data may be processed outside the UK, including by service providers used for AI features. Contact us for details of applicable locations and transfer arrangements.

8. Data Retention

We retain your personal data for as long as:

  • Your account remains active
  • Needed to provide you with our services
  • Required by law (e.g., financial records for 7 years)

When you delete your account, we will delete or anonymise your personal data within 30 days, unless we are required to retain it for legal purposes.

9. Your Rights

Under UK GDPR, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing based on legitimate interests
  • Rights Related to Automated Decision-Making: Request human review of automated decisions

To exercise these rights, please visit your account Settings page or contact us.

10. Cookies

We use essential storage to operate the Service (e.g., session authentication). The cookie banner lets you save preferences for optional analytics and marketing technologies, where used.

11. Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Secure password hashing
  • Access controls and records of certain actions

12. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

  • Contact: Contact Form
  • Address: Blue Squircle, London Road, Nantwich, Cheshire CW5 7JL, United Kingdom