B8 BLAM8

Privacy Policy

Last updated: June 2026

Template — to be reviewed by a solicitor before launch. Not yet legal advice.

BLAM8 ("Business Logistics Automate", "we", "us") helps businesses draft replies to their email. This policy explains what we process and why.

What we process

When you connect a mailbox, we access incoming messages in order to draft replies, and we store those drafts and a record of handled emails. We also store the configuration you provide (your business brief, tone, rules and knowledge) and the OAuth tokens needed to access your mailbox.

How we use it

Solely to provide the service: reading incoming mail, drafting replies, and — only when a human approves — sending them. We do not sell your data, and we do not use it to train third-party models.

Isolation & security

Each company's data is isolated using row-level security. Mailbox access uses Microsoft OAuth — never your password — and can be revoked at any time from your side.

Sub-processors

We rely on Microsoft (mailbox access), Supabase (database), Render (hosting) and Anthropic (reply drafting). We share only what each needs to provide its part of the service.

Your rights

Under UK GDPR you can request access to, correction of, or deletion of your data, and you can disconnect your mailbox at any time. Contact us to exercise these rights.