Privacy Policy
Blindspot Theory (“Blindspot”, “we”). Last updated: 4 November 2026.
What we collect
Account details you give us (name, email, phone), the workspace data you and your team enter (forms, responses, CRM records, reports), billing records, and basic technical logs needed to run and secure the service.
How we use it
Only to provide the Blindspot service to your workspace: storing and showing your data, syncing it with tools you connect, billing, support and security. We do not sell personal data or use it for advertising.
Google user data
Blindspot connects to Google only when a workspace admin chooses to.
- Google Ads (scope
https://www.googleapis.com/auth/adwords): We read the Google Ads accounts you can access, your campaigns, and your lead form assets and their submitted leads (lead form submission data). We use this only to show your lead forms in Blindspot, deliver each new lead into your own workspace for your sales team, and label it with its campaign. With your confirmation, we set the webhook delivery address on the lead forms you choose so that new leads reach Blindspot instantly. We don’t create or edit campaigns, ads, budgets or billing. - Google Sheets (scope
drive.file): We access only the spreadsheets you pick in the Google file picker or that Blindspot creates, to read and write the data you configure. - Your Google account email (
openid,email): This identifies which Google account is connected.
Limited Use
Blindspot’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the user-facing features described above. We do not transfer it to others except as needed to provide those features, for security, to comply with law, or as part of a merger or acquisition with notice to you. We do not use or transfer it for serving ads, including retargeting or personalised advertising. We do not sell it to data brokers or information resellers, and we do not use it to determine creditworthiness or for lending. We do not allow humans to read it, unless you give us affirmative consent for specific data, it is needed for security purposes such as investigating abuse, it is needed to comply with law, or the data is aggregated and anonymised for internal operations. We do not use Google user data to develop, improve or train generalised or non-personalised AI or ML models.
Storage, sharing and deletion
Google OAuth tokens are encrypted at rest and stored only on our servers (Supabase, Vercel). Leads are visible only to members of your workspace. We never sell them, and share them only with the service providers that help us run Blindspot (listed in the Sharing section) or where required by law. You can disconnect Google at any time in Marketing → Integrations, which deletes the stored tokens immediately, or revoke access at myaccount.google.com/permissions. To delete leads and account data, see /data-deletion or email yashasgadling23@outlook.com. We delete it within 30 days.
Meta (Facebook/Instagram) Lead Ads
Blindspot connects to Meta only when a workspace admin chooses to. We access only the Facebook Pages and lead forms you connect, to fetch your leads, plus the names and status of your campaigns and ad sets (used to filter leads), into your own workspace. We never sell them, and share them only with the service providers that help us run Blindspot (listed in the Sharing section) or where required by law. You can disconnect at any time in Marketing → Integrations and request deletion at /data-deletion.
Meta access tokens are encrypted at rest and stored only on our servers (Supabase, Vercel). Disconnecting deletes the stored tokens immediately. You can also email yashasgadling23@outlook.com. We delete data within 30 days of a request.
Sharing
We use trusted providers to run the service (hosting, database, payments, email, AI features). They process data only on our instructions. We may disclose data if required by law.
Retention and deletion
Your data is kept while your workspace is active. Workspace admins can delete records, and you can ask us to delete your account and workspace data at /data-deletion or by emailing yashasgadling23@outlook.com. We delete it within 30 days of a request.
Contact
Email yashasgadling23@outlook.com.