Privacy policy.
Last updated — June 4, 2026
This policy explains what Blogizon (“we”, “us”) collects, why, and how it’s handled. The short version: we collect the minimum needed to run your press room, we encrypt your credentials, and we don’t run third-party trackers.
What we collect
- Account data. Your name, email address and a password hash. If you enable two-factor authentication, an encrypted authenticator secret.
- Site connection data. To publish on your behalf we store the credentials you provide for each site (hosting/SFTP details, publishing API tokens, and any model, image or Pinterest keys you connect). These are encrypted at rest with libsodium authenticated encryption.
- Operational data. Job history, publishing logs, and per-article cost metering (tokens and image credits), so your ledger and dashboard work.
- Aggregate analytics. Your connected sites report daily, bot-filtered page-view counts back to your dashboard. No reader-level profiles, no cross-site tracking, no advertising identifiers.
Cookies
One session cookie, used solely to keep you signed in. It is HttpOnly, Secure, and SameSite. There are no analytics or advertising cookies on blogizon.com.
How your data is used
Only to operate the service: authenticating you, generating and publishing the content you request, posting pins you’ve configured, metering costs, and showing your analytics. We do not sell or rent any of it.
Third-party processors
When you connect them, content generation requests are sent to your chosen model provider (e.g. OpenAI), image generation to your image provider, and pins to Pinterest — using your keys, under their respective terms. We don’t share more than the request requires.
Retention & deletion
Account and operational data is kept while your account is active. Ask us to delete your account and we remove your account data and stored credentials within 30 days; aggregate, non-identifying statistics may be retained. Encrypted off-site backups rotate on a short cycle.
Security
TLS everywhere, encrypted credentials at rest, two-factor authentication on every login, session rotation, and tenant isolation between accounts. No system is perfect — if we ever learn of a breach affecting you, we will tell you promptly.
Your rights
You can request a copy, correction, or deletion of your personal data at any time. Email redaorochi@gmail.com and we’ll handle it.
Changes
If this policy changes materially, we’ll note it here with a new date and flag it in your dashboard.