Website visits
The site has no analytics or advertising scripts. Fonts, screenshots and videos are served from this website.
Our server and website delivery provider process request information to serve and protect the site. This includes your IP address, the requested path and the time of the request. Website access logs omit query strings and authentication link tokens. Server logs are retained in up to 14 daily archives.
Cloudflare provides website delivery and security. Its protection features may set security cookies. The Cloudflare cookie documentation explains their purpose.
Your customer account
When you create an account, we store your name, verified email address, organisation membership and saved instance configurations on our server. Passwords are stored as salted hashes. If you enable two-step verification, we also store encrypted authenticator and recovery-code data.
Essential, secure cookies keep you signed in and complete authentication. They are inaccessible to website JavaScript. Sessions last up to seven days; signing out revokes the session. You can view and sign out other sessions in your account’s security settings. We record each session’s browser information, IP address and sign-in time to help you recognise it.
We use this information to provide and protect your account, manage organisation access and save your configurations. Organisation administration records are retained for 90 days. Email delivery records on our server are retained for seven days; queued email content is encrypted and removed after sending or expiry.
Correct your profile in account settings or close your account in sign-in security. Transfer ownership first if you are the only owner of a shared organisation. Closing your account removes your personal account records; shared organisation data stays with its remaining members. Deleted data may remain in backups for up to four weeks. This website does not collect card details.
Email enquiries
We use your email address and the information in your message to respond to you. We keep relevant business correspondence for as long as needed to handle the enquiry or meet an applicable obligation.
We rely on our legitimate interests in operating the website and responding to enquiries. If you ask about a purchase, we may also process information to take steps at your request before entering a contract.
Service providers and downloads
Our hosting, website delivery and email providers process information needed to provide their services. Resend sends verification, recovery and organisation invitation emails. This includes your email address and the message content. Resend stores email metadata, logs and API records in the United States, regardless of sending region. Its privacy policy describes its processing and international transfers. Cloudflare operates internationally and may process request information outside the UK. Its privacy policy describes its data handling.
Releases are downloaded from downloads.blazingbanana.com. Download requests include the same kinds of website delivery information described above. The screenshots and videos show product walkthroughs rather than customer records.
Software House installations
Your organisation runs its installation and chooses its AI providers. Its administrator is responsible for account and project data there. This website does not receive your project conversations or source code. Accounts inside your installation are separate from your customer account on this website.
Your information rights
Email contact@blazingbanana.com with questions about your information. You can request access or correction. Where the relevant rights apply, you can also request deletion or object to processing.
You may also contact the Information Commissioner’s Office.