Privacy Policy
Last Updated: 16 October 2026
1. Introduction
1.1. Important information and who we are
1.1.1. Welcome to the Privacy Policy (“Privacy Policy”) of Oblivious Software Limited, the developer of Blatent and the Blatent models.
1.1.2. At Blatent (“we”, “us”, or “our”), we are committed to protecting and respecting your privacy and personal data in compliance with applicable laws.
1.1.3. This Privacy Policy explains how we collect, process, share, transfer, and keep your data safe when you use Blatent (the “Service”) and/or visit the Blatent website, or otherwise communicate with us in connection with the Service.
1.1.4. The individuals from which we may gather and use data can include:
- 1. Customers and the developers who use the API and applicants to our early access programme;
- 2. Developers and creators we contact about the programme;
- 3. Our business contacts, and any other people we have a relationship with or may need to contact for the purposes of providing the Service;
- 4. Website visitors.
1.2. Scope of this Privacy Policy
1.2.1. This Privacy Policy applies to personal data we process as controller, which is when you hold an account with us (including if you applied for early access to the Service), visit our website, or contact us in relation to the Service.
1.2.2. This Privacy Policy does not apply to content we process on behalf of customers using the Service, including our API. In these cases, the customer acts as the data controller and we act as the data processor. Our processing of that data is governed by the applicable customer agreements relating to your access to and use of those offerings.
2. What Information We Collect
2.1. Types of Data
2.1.1. We process the following personal information:
- 1. Account Data: information associated with your account, including customer name, organisation, e-mail address, login details and billing information.
- 2. Marketing Preferences: your preferences in receiving marketing information and other communications from us or our partners.
- 3. Identity and Contact Data: information that identifies you or allows us to contact you, such as your name, user name, title, e-mail address, postal address, and phone number.
- 4. Device and Technical Data: information that your browser or device automatically sends when you engage with the Service or our website, including your IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use.
- 5. Transaction Data: information about your payments, the services you have purchased from us, cancelled transactions, and bank account numbers.
- 6. Usage Data: information about how you use the Service and/or our website.
- 7. Metadata: operational information generated when you use the Service, including the model used, token counts, latency, timestamps, and error or performance signals.
2.1.2. We may also aggregate certain data (including, for example, the country of a visitor, how a search engine was used to access our website link, time and duration for which the page was visited, what users click on, and basic operational signals such as overall request volume) to enable research or analysis so that we can better understand and serve you and others, for operational reasons (such as capacity/scaling decisions) and/or for marketing our services to other customers. Although this aggregated data may be based in part on personal data, it does not identify you personally. We may share this type of aggregated data with others, including service providers, our affiliates, agents and current and prospective business partners.
3. How is your personal data collected
3.1. Information you provide to us
3.1.1. We collect personal data you provide when you use the Service. This includes your Account Data, Identity and Contact Data, Marketing Preferences, and Transaction Data as described in section 2.1.
3.1.2. You may also choose to provide your Identity and Contact Data by filling in forms or by corresponding with us by phone, email or otherwise. This includes Personal Data you provide when you:
- 1. Apply for access to the Service, set a password via the invitation emailed to you, and log in to the user portal to obtain your API key and access the documentation;
- 2. Enquire about the Service;
- 3. Speak to our support team, give us feedback or request product updates.
3.1.3. Early access. If you apply for our early access programme, we collect the information you provide in your application, such as your name, organisation, email address and intended use of the Service. If your application is accepted, we send you an email inviting you to set a password for our user portal, where you can obtain your API key and access our documentation.
3.2. Information generated or collected automatically
3.2.1. As you interact with our website, we use cookies and other similar technologies to automatically collect and process Device and Technical Data about your equipment, and Usage Data such as how long you spend on different pages on our website. Please refer to our Cookie Policy for further information.
3.2.2. As you use or otherwise interact with the Service, we process Device and Technical Data, Usage Data and Metadata.
4. How we use your personal data
4.1. Our Uses
4.1.1. We will only use your Personal Data when the law allows us to. Set out below is a table containing the different types of Personal Data we collect and the lawful basis for processing that data.
| Purpose | Categories of Data Processed | Legal Basis |
|---|---|---|
| To communicate with you and respond to your requests For example, we respond to questions you send to our support team, and we send you technical announcements about changes or outages. | Identity and Contact Data, Account Data, Usage Data, Marketing Preferences | Where necessary for our legitimate interests in communicating with users and responding to requests. |
| To support and maintain the Service and our website For example, we investigate and fix errors you report to us, and we deliver updates and changes to the Services. | Identity and Contact Data, Account Data, Usage Data, Device and Technical Data, Metadata | Where necessary for our legitimate interests in providing support and maintaining reliable Services. |
| To analyse and improve the Service and our website For example, we analyse how the website and our Service are used to make capacity and scaling decisions, we produce aggregated statistics about usage to understand which features are valuable, and we use aggregated data to market our services to other customers. | Usage Data, Device and Technical Data, Transaction Data, Metadata | Where necessary for our legitimate interests in understanding how the Service and our website are used and improving their performance and functionality. |
| To send you marketing communications For example, we send you product updates, new feature releases and information about relevant service improvements by email. | Account Data, Identity and Contact Data, Marketing Preferences | Where you have consented, or where necessary for our legitimate interests in communicating relevant information about our Service where permitted by law. |
| To protect the safety and security of the Service and our website For example, we detect and investigate unusual login activity, unauthorised access attempts and suspected account misuse, we investigate violations of our Terms of Service, and we detect and prevent harmful or unlawful use of the Service. | Identity and Contact Data, Account Data, Usage Data, Device and Technical Data, Metadata | Where necessary for our legitimate interests in protecting our Service and website, users and systems from misuse, fraud and security risks, or to comply with legal obligations. |
| To comply with legal obligations For example, we retain billing records to meet financial and tax requirements, and we provide information to law enforcement, regulators or tax authorities when required by a valid legal request or court order. | Identity and Contact Data, Account Data, Transaction Data, Usage Data, Device and Technical Data, Metadata | Where necessary to comply with our legal obligations, including financial, regulatory and lawful disclosure requirements. |
| To protect vital interests For example, we may preserve, review and share information with law enforcement or others where someone's life or safety is at risk. | Identity and Contact Data, Account Data, Transaction Data, Usage Data, Device and Technical Data | Where necessary to protect your vital interests or those of another person, including where life or safety may be at risk. |
4.1.2. Where we rely on your consent to process your data, you may withdraw your consent at any time without affecting the lawfulness of any processing prior to the withdrawal.
4.1.3. When we rely on legitimate interests to process your data, we offer you the choice to object unless there are overriding circumstances (for example, to protect the fundamental rights and freedoms of other individuals).
4.2. Marketing and Content Updates
4.2.1. We send marketing and content communications, such as product updates, new feature releases and information about relevant service improvements, where you have consented to receive them or where we are otherwise permitted to send them to you as a business contact.
5. Your privacy rights
5.1. Opting Out of Marketing Communications
5.1.1. You can ask us to stop sending you marketing messages at any time by writing to us at privacy@blatent.ai.
5.2. How to Request Your Data and the Process for Obtaining It
5.2.1. You may request that we provide you a copy of your personal information, and information in relation to data processed, held by us by writing to us at privacy@blatent.ai.
5.2.2. We may need to request specific information from you to help us confirm your identity and ensure you have the right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request.
5.3. Right to object
5.3.1. To the extent that we process your data on the basis of our legitimate interest, in the public interest, or for direct marketing, you may have the right to object to data processing unless we have compelling legitimate grounds to override your objection.
5.4. Other Rights
5.4.1. You have the following rights related to the processing of your personal data:
- 1. request correction of inaccurate or incomplete personal data;
- 2. request deletion of your personal data in certain circumstances;
- 3. request restriction of how we process your personal data in certain circumstances;
- 4. receive and transfer certain personal data to another provider;
- 5. withdraw your consent where we rely on consent, without affecting the lawfulness of any processing before its withdrawal; and
- 6. lodge a complaint with the Irish Data Protection Commission or your local data protection authority.
6. Your data and third parties
6.1. How and Why We Share Your Data With Third Parties
6.1.1. We may share personal data with affiliates, vendors, service providers and processors that support our operations, including providers of hosting, analytics, databases, payments and marketing services. These parties process personal data only as necessary to provide services to us. The processors we currently engage include:
- • AWS (EU, UK and US): cloud hosting, data storage and KMS (Key Management Service) encryption
- • ClickHouse (Ireland and US): Analytics and transactional database
- • Paddle (UK and US): payments and merchant of record
- • HubSpot (Germany and US): customer relationship management (CRM) and marketing
- • Google Analytics (Ireland and US): website analytics
6.1.2. We may also share personal data with professional advisers, including accountants, auditors, lawyers and insurers, where necessary.
6.1.3. We may share or transfer personal data in connection with a merger, acquisition, sale of our business or assets, change of control, or licensing of our technology. Upon such transfer, the privacy policy of the acquiring entity may govern the further use of your personal data. In all other situations your data will still remain protected in accordance with this Privacy Policy, as amended from time to time.
6.1.4. We may disclose personal data where required by law, to enforce our terms or this Privacy Policy, or to regulators, tax authorities, law enforcement or government bodies.
6.1.5. We may share aggregated data that does not identify you with third parties for the purposes described in this Privacy Policy.
7. How long will we retain your data for?
7.1. We will only retain your Personal Data for as long as reasonably necessary to fulfil the purposes we collected it for, including to meet any legal, accounting or reporting requirements.
7.2. We retain certain types of Personal Data for the following periods:
- 1. transaction records, such as invoices: 6 years, to meet our tax and accounting obligations;
- 2. account information and marketing preferences: for as long as your account is active; and
- 3. records of your acceptance of our Terms: 7 years after your account is closed or deleted, so that we can respond to any legal claims.
8. International transfer of data
8.1. Our primary customer account database is stored in the EU. However, your information may be stored and processed in the USA, the UK, or other countries or jurisdictions outside the EEA where we have facilities or where service providers are based or provide services from.
8.2. If you reside in the EEA, Switzerland, or the United Kingdom, we rely upon a variety of legal mechanisms to facilitate these transfers, including the European Commission's Standard Contractual Clauses and certain exemptions provided for under data protection law for our international transfers. For example, we also rely on adequacy decisions from the European Commission where available, such as the European Commission's adequacy decision for the United Kingdom (renewed 19 December 2025), and other derogations provided for under data protection law where appropriate.
8.3. To request a copy of our standard contractual clauses (or their approved equivalent for Switzerland), please contact us via the details provided in the “Contact Us” section below.
9. Notification of changes
9.1. We keep our Privacy Policy under review and may make changes to this Privacy Policy from time to time. If we make changes to how we present our Privacy Policy to you, or how we use or share your personal data from what we told you when we collected your data, we will inform you in advance.
10. Children’s Personal Data
10.1. Our Services are not directed to persons under the age of 18, and we do not knowingly request or collect any information about persons under the age of 18.
11. Contact Us
11.1. In case of any questions on this Privacy Policy or any complaint regarding it, you should contact us at privacy@blatent.ai or postal address: 6 JAMES’ TERRACE, Malahide, Co Dublin, K36Y972, Ireland.