2. Information We Collect:

• Categories of personal information we collect and how we collect itIdentifiers. This may include a real name, alias, business email address, company name, job title, online identifier, IP address, account username and password, or other similar identifiers.
• Internet and Network Information. This may include cookies, information about your interaction with a website, application, service or advertisement, such as browsing history and how you use your account, feature usage patterns, demo generation activity, and session data.
• Device Information. This may include the operating system of your device, device identifier, browser type and version, screen resolution, and language preferences.
• Target Environment Credentials. This may include connection credentials for Snowflake, Databricks, or ThoughtSpot environments that you configure for data delivery.
• Discovery and Configuration Data. This may include free-text inputs such as discovery notes, sector positioning, business context, KPI preferences, narrative focus, and prospect URLs you provide to customize demo generation.
• Payment and Credit Information. This may include your credit or debit card information, banking information, billing address, and information about your payment transaction.
• Other Information You Submit to Us. This may include requests or communications you submit to us, including emails, support tickets, feedback, and customer service communications.
• Inferences We Draw About You. This may include information about your preferences, demo use patterns, generation success rates, feature adoption, and other trends that help us improve the Service.

We may also collect, use and share non-personal information. And, we may use or share information that we have collected that has been de-identified or anonymized so that it does not personally identify you.

3. Sources of Information.

We collect information from or about you through the following methods:

• When you provide information to us voluntarily, through the Online Services, including by filling out forms, registering for an account, purchasing our products or services, signing up for communications, requesting information, or any other data entry method in the Online Services;
• When you configure demo generation settings, including prospect URLs, discovery notes, target environment credentials, and KPI preferences;
• When you register for or attend a virtual or offline event;
• When you provide us information through a survey, feedback form, or other research initiatives;
• When you communicate with us, including through email, chat, support tickets, or other online or offline methods;
• In any other way we describe while providing the Blitz Services; and
• Automatically, when you interact with or visit the Blitz Services, through the use of cookies, web beacons, JavaScript, logging, and other automated data collection means.
  

We also collect information about you from the following sources:

• Our service providers;
• Publicly available information from prospect websites that you provide URLs for (we only access publicly visible content, never password-protected or private data);
• Other users of the Blitz Services (if you are part of an organization account); and
• Marketing partners and other third parties.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide you with the Blitz Services, including demo generation, company profiling, data model creation, and delivery to your configured target environments;
• To process demo generation requests and deliver synthetic data to your Snowflake, Databricks, or ThoughtSpot environment;
• To process payments and manage your subscription;
• To interact with you, including through email, customer support, and contact requests, or to resolve problems and disputes;
• To send you transactional emails (account verification, authentication codes, password resets, billing receipts);
• To send onboarding and trial lifecycle communications (welcome emails, feature spotlights, trial expiry notices);
• To send you communications about our products, events, and product updates (with your consent or where permitted by law);
• To comply with or enforce our legal obligations or rights, including to comply with court orders, subpoenas, or other legal process or lawful requests;
• To ensure the security and availability of Blitz Services, and to enforce our terms;
• To develop, improve, and measure the effectiveness of the Blitz Services, including analyzing generation success rates, Time-to-First-Demo (TTFD), trial activation rates, and platform reliability;
• To improve our user experience and develop new features and capabilities;
• To fulfill any purpose for which you provided it;
• In any other way that we provide notice of or where you have provided your consent.

5. Who We Share Your Information With

We may share information about you with the following categories of individuals and entities or in the following scenarios:

• With our service providers and subcontractors, who perform services on our behalf to operate our business and the Blitz Services, including cloud hosting providers, payment processors, email delivery services, analytics providers, and customer support tools;
• With target environments that you configure (Snowflake, Databricks, ThoughtSpot) – generated demo data is delivered directly to your own infrastructure using credentials you provide. Blitz acts as a data delivery mechanism and does not retain copies of data in your target environment;
• With a buyer, successor in interest, or any other party involved in a merger, acquisition or other sale or transfer of all or some of Blitz's assets, equity or business or any similar transaction, or as part of a bankruptcy, liquidation, dissolution or similar proceeding, as well as advisors, lawyers, accountants and other third parties that may assist in the negotiation, review, and consummation of any such transaction or proceeding;
• When we believe it is necessary to enforce or apply this Policy or any other agreement with you, and to protect the rights, property, or safety of Blitz or its employees, users, or others;
• When the information has been aggregated, anonymized, or de-identified. In these situations, we do not disclose any information that could be used to personally identify you;
• When you direct us to share your information with a third party, or otherwise provide your consent to share your information;
• For any other reason that we have properly notified you about at the time we collect the information; and
• Where we are required to do so by law, including as the result of a court order, legal process, subpoena, or other lawful request, or where we otherwise have a legal obligation to do so.

When we provide personal information to our service providers, we use reasonable efforts to ensure they comply with applicable privacy laws.

6. Automated Data Collection

Like most technology companies, we (and our service providers and certain third parties) collect information about you automatically, including when you interact with Blitz Services. We collect this information through a variety of technologies, which we explain below:

Cookies – A cookie is a small text file that is sent to your browser when you access a website. There are two types of cookies, session cookies and persistent cookies. A session cookie is available and exists only during the course of the browser session. Closing the browser or logging off will invalidate the session cookie. Persistent cookies, similar to their name, last for a longer period of time, from hours, days, or weeks, and remain on your hard drive (or other storage medium) and record or disclose information about you and your interactions with websites and services. You can often decide whether and what types of cookies you are willing to accept through your browser's settings.

Web Beacons (also known as pixels, internet tags, or clear gifs) – These are tiny graphics on a web page (or in an email) that are used to track pages viewed, messages opened, or other information. They can provide certain information, including IP address and browser type, or other information about interactions with a website or service.

Embedded Scripts – These are bits of code on a website or service that measure how a user interacts with a website, application, or service; the scripts are often in JavaScript, a common programming language.

Blitz also collects information automatically about you through logging that is standard on websites. Typically, website logs include your IP address, device type, browser type, access time, and the URL where you came from or where you are going.

7. Synthetic Data and Demo Generation

Blitz generates synthetic demo data and does not process, store, or access any customer production data. It is important to understand the following:

• No PII in Generated Data: All data generated by Blitz is entirely synthetic. No personally identifiable information (PII) is used as input or created as output. Generated names, entities, and values are fictitious and do not correspond to real individuals.
• Website Parsing: When you provide a prospect URL, Blitz reads only publicly available information from that website to infer industry, sub-industry, and business context. We do not access password-protected pages, private data, or any information not freely accessible on the public internet.
• Data Purpose: Generated demo data is intended solely for demonstration purposes and should not be used as a basis for business decisions. The data is designed to be realistic and industry-appropriate but is not derived from actual business records.
• Shock Waves: Blitz embeds hidden anomalies ("shock waves") in generated datasets to create discovery moments during demos. These are algorithmically generated patterns and do not reflect real events or data.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfil the purposes described in this Privacy Policy:

• Account Data: Retained for the duration of your active account. If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law.
• Generated Datasets and Artefacts: Retained for the duration of your active subscription. For trial users, generated outputs are retained for the trial period plus a grace period, after which they may be purged.
• Target Environment Data: Data pushed to your Snowflake, Databricks, or ThoughtSpot environment resides in your own infrastructure. Blitz does not delete data from your external environments.
• Usage and Log Data: Retained for up to 24 months for analytics and service improvement purposes, then anonymised or deleted.
• Payment Records: Retained as required by applicable tax and financial regulations.
• Support Communications: Retained for up to 36 months to maintain support continuity and quality.

9. Data Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure credential storage for target environment connections
• Access controls and authentication for internal systems
• Regular security reviews and vulnerability assessments
• Employee security awareness training

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Restriction: Request that we restrict processing of your personal data in certain circumstances.
• Objection: Object to processing of your personal data for direct marketing or based on legitimate interests.
• Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
• Complaint: Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@blitzdemos.ai. We will respond to your request within 30 days (or sooner if required by applicable law). We may ask you to verify your identity before processing your request.

11. GDPR Compliance (EEA, UK, and Swiss Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:

Legal Bases for Processing

• Contract: Processing necessary to provide the Service you have requested (account management, demo generation, payment processing).
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving the Service, ensuring security, and sending relevant communications, where these interests are not overridden by your rights.
• Consent: Processing based on your specific consent, such as marketing communications. You may withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with applicable laws.

International Data Transfers

Your information may be transferred to and processed in countries outside the EEA, UK, or Switzerland. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.

Data Processing Agreements

Enterprise customers may request a Data Processing Agreement (DPA) that details our obligations as a data processor. Contact privacy@blitzdemos.ai to request a DPA.

12. CCPA Compliance (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information (Blitz does not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, contact us at support@blitzdemos.ai or use the mechanisms provided in the Service.

13. Third-Party Links and Integrations

Certain service providers and third parties collect information about you when you are interacting with the Blitz Services, including through the automated methods described above. We also use other third parties or service providers to assist us in operating our business and they may receive or store your personal information. Because we value your privacy, we want to be transparent about this data collection.

The following list includes the service providers and third parties currently used by Blitz as of the date of this Policy. The list is subject to change at any time.

• Google Analytics. We use Google Analytics to gather statistics from our Websites and Online Services for usage analysis.
• Amazon Web Services (AWS). We use AWS for cloud infrastructure and hosting.

14. Changes to This Privacy Policy

‍We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you by email or through a prominent notice on the Service
• Where required by law, obtain your consent to the changes

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

15. Contact Us

Please contact us with any questions or concerns about your privacy, or to exercise any of the rights identified above, where applicable. If you have a disability and need to receive this privacy notice in a different format, please let us know.