Privacy Policy
Last updated: 26 August 2026. Data Fiduciary: Blunion, a sole proprietorship in India. Contact: hello@blunion.com.
1. The short version
Your spreadsheet files are analysed entirely inside your browser. We never receive, upload, or store the contents of your files. We do collect and store limited account information to run your subscription and keep the service fair. This policy explains what, why, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025.
2. What we collect
- Account details you provide: name, email, phone number, company, and designation.
- Approximate location: city and state, derived from your connection (IP address). We do not use device GPS.
- Usage signals: counts and timestamps of analyses run (a number, never the data), device and session identifiers to enforce one active session, and standard security logs.
- Payment status: whether a subscription is active. Card details are handled solely by our payment gateway and are never stored by us.
What we never collect: the contents of your spreadsheets. They do not leave your device.
3. Why we collect it (purpose)
To create and secure your account, provide and bill the service, verify eligibility for free access (work and college email), prevent abuse and account sharing, provide support, and comply with law. We do not sell your personal data or use it for advertising.
4. Consent and legal basis
We process your personal data on the basis of the consent you give at sign up, and for certain legitimate uses permitted by the DPDP Act. You may withdraw consent at any time (see Your Rights); withdrawal does not affect processing already carried out and may end your ability to use the paid service.
5. Your rights
You have the right to access a summary of your personal data, to correction and completion, to erasure, to grievance redressal, and to nominate another person to exercise your rights. To exercise any right, contact our Grievance Officer below. We respond within the timelines required by law.
6. Retention
We keep account data for as long as your account is active and for a reasonable period afterwards as required for legal, tax, and security purposes, after which it is deleted or anonymised.
7. Sharing and processors
We share personal data only with processors that help us run the service (hosting, database, payment gateway, email/OTP, analytics), under contract and only as needed. We may disclose data where required by law.
8. Security
Account data is transmitted over TLS and stored encrypted, with least privilege access and logging. No method is perfectly secure, but your file contents carry the lowest possible risk because they are never transmitted.
9. Children
Blunion is not intended for anyone under 18. We do not knowingly process the personal data of children without verifiable parental consent as required by the DPDP Act.
10. Changes
We may update this policy and will post the new date here and notify you of material changes.
11. Grievance Officer & contact
Write to hello@blunion.com for any privacy question, to exercise a right, or to raise a grievance. That address reaches the person responsible for privacy at Blunion, and we respond within the timelines set by the DPDP Act.