Privacy Policy

Last updated: October 18, 2026

Summary

We collect what we need to run Bleed: your account details, what you send to B1o and C2o, and basic usage data.
We don't sell your personal information.
We don't use your prompts or outputs to train our models unless you opt in.
You can access, export or delete your data whenever you want.

01Who we are

This policy explains how Bleed Independent Technology ("Bleed", "we", "us") handles personal information when you visit bleed.one, join our waitlist, or use B1o, C2o and our other Services.

The controller under the GDPR is Alexander Kirchner, trading as Bleed Independent Technology, Bischofstr. 70/1, 75365 Calw, Germany. Email: support@bleed.one.

02What we collect

Information you give us

Account and contact details: your name, email address and login credentials, or the sign-in provider you use.
Waitlist sign-ups: the email address you give us.
Inputs and Outputs: the prompts, messages, files, code and images you submit, and what B1o and C2o generate in return.
Payment details: handled by our payment provider. We only receive limited information such as card type, the last four digits and your billing country.
Support messages: anything you send us when you get in touch.

Information collected automatically

Usage data: features used, timestamps, performance and error logs.
Device and log data: IP address, browser and operating system, and approximate location based on IP.
Cookies and similar technologies, described in section 9.

03How we use it

To provide, operate and maintain the Services, and to generate Outputs from your Inputs.
To process payments and manage your plan.
To keep the Services safe: preventing fraud, abuse and security incidents, and enforcing our Terms.
To understand how the Services are used and to fix bugs.
To contact you about your account and, if you've opted in, about product news. You can unsubscribe at any time.
To meet our legal obligations.

04AI training

We do not use your Inputs or Outputs to train or improve our models unless you choose to opt in. Our team may review limited content only when needed to investigate abuse, give you support you've asked for, or comply with the law.

05Legal bases

We process personal information under Art. 6 GDPR, relying on: contract (to provide the Services you signed up for), legitimate interests (security, fraud prevention and improving the Services, balanced against your rights), consent (for example marketing emails and optional cookies, which you can withdraw at any time) and legal obligation.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We share it only:

with service providers who help us run Bleed, such as hosting, cloud and AI infrastructure, payments, email and analytics, under contracts that limit how they can use it;
when required by law, or to protect the rights, safety and security of our users, the public or Bleed;
as part of a merger, acquisition or sale of assets, in which case we'll tell you before your information falls under a different policy;
with your consent.

07How long we keep it

We keep account information while your account is active. When you delete content or your account, we remove it from our active systems within 30 days and from backups on their normal cycle, unless the law requires us to keep it longer. Billing records are kept for as long as tax and accounting rules require.

08Your rights

Under the GDPR you can ask to access, correct, delete or export your personal information, object to or restrict certain processing, and withdraw consent at any time.

You can also complain to a data protection authority, for example the one where you live, or the one responsible for us: the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

California residents have the right to know, delete and correct personal information, to opt out of its sale or sharing (we don't do either), and not to be discriminated against for exercising these rights.

To make a request, email support@bleed.one. We'll respond within 30 days and may need to verify your identity first.

09Cookies

We use essential cookies to keep you signed in and to protect the Services. Where the law requires it, we'll only use optional analytics cookies with your consent. You can also block or delete cookies in your browser settings, though some features may stop working.

10Security

We protect your information with encryption in transit, access controls and monitoring. No system is completely secure, so we can't guarantee absolute security, but we'll notify you and the authorities of a breach where the law requires it.

11International transfers

We and our providers may process information in countries other than yours. When we transfer personal information out of the EEA or UK, we use safeguards such as the European Commission's Standard Contractual Clauses.

12Children

The Services aren't directed to children under 13, or the higher minimum age where you live. If we learn that we've collected information from a child without the required consent, we'll delete it.

13Changes to this policy

We'll update this policy as Bleed grows. If we make material changes, we'll let you know by email or in the product before they take effect.

14Contact

Bleed Independent Technology, owned by Alexander Kirchner, Bischofstr. 70/1, 75365 Calw, Germany. Email: support@bleed.one.