Privacy Policy

Who we are

BlockSight is operated by Smart Software Services B.V., a company incorporated in the Netherlands.

For the purposes of the EU General Data Protection Regulation (GDPR) and the Dutch General Data Protection Regulation Implementation Act (UAVG), Smart Software Services B.V. is the data controller for personal data processed through BlockSight.

This Privacy Policy applies to blocksightlabs.com, portal.blocksight.dev, and related BlockSight products and services.

Information we collect

We collect personal data necessary to provide and secure the BlockSight platform.

Account information

When you create an account or sign in, we collect information such as:

• Name
• Email address
• Profile image (where provided)
• Authentication provider
• Account identifier
• Account creation and sign-in timestamps

If you choose to sign in using Google or Microsoft, this information is provided by your chosen identity provider. We never receive or store your Google or Microsoft password.

Early Access and contact requests

When you submit our Early Access or contact forms on blocksightlabs.com, we collect the email address, name, company or project, role, areas of interest, and any free-text comments you provide. We also record submission timestamps and basic referral information (page visited, UTM parameters, approximate user-agent).

Service data

While you use BlockSight we store information required to provide the service, including:

• Workspace information
• User preferences
• Project configuration
• Risk analysis settings
• Generated reports and platform outputs
• Audit and activity history

The exact information stored depends on how you use the platform.

Technical information

To operate and secure the service we automatically collect technical information including:

• IP address
• Browser and device information
• Operating system
• Request timestamps
• Session identifiers
• Security and authentication logs

This information is used to detect abuse, troubleshoot issues and maintain platform security.

Consent records

When you accept or reject cookies on blocksightlabs.com, we record the choice, the policy version, an anonymised IP hash, and approximate country, so we can demonstrate compliance with the GDPR.

How we use your information

We process personal data for the following purposes:

• Providing and operating the BlockSight platform
• Authenticating users and managing accounts
• Responding to Early Access and contact requests, and communicating about your interest in BlockSight
• Securing user accounts and detecting fraud or abuse
• Providing customer support
• Sending transactional and service-related emails
• Sending product updates or marketing communications where you have opted in or as permitted by law
• Understanding how visitors use blocksightlabs.com so we can improve it (analytics, where you consent)
• Improving the reliability, performance and security of the platform
• Complying with legal obligations

Where required by applicable law, we rely on one or more of the following legal bases:

• Performance of a contract
• Legitimate interests
• Compliance with legal obligations
• Consent (where required)

Authentication

BlockSight uses third-party identity providers for authentication.

If you choose to sign in with Google or Microsoft, we receive basic profile information necessary to identify your account, such as your name, email address and profile picture (where available).

Your authentication credentials remain with your chosen identity provider.

Who we share data with

We use carefully selected service providers (“processors”) to operate BlockSight. These currently include:

These providers process personal data only on our behalf and under appropriate contractual safeguards.

We do not sell personal data.

International transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where this occurs, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms.

Data retention

We retain personal data only for as long as necessary to:

• provide the service;
• comply with legal obligations;
• resolve disputes;
• enforce our agreements.

Account information is generally retained until your account is deleted, unless a longer retention period is required by law. Early Access and contact submissions are retained for as long as your interest remains active or until you ask us to delete them. Analytics data is retained per the processor’s defaults (Google Analytics 4: 14 months), and consent records are retained for as long as we rely on them as proof of consent. Security and audit logs may be retained for longer where necessary to protect the platform or investigate abuse.

Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or disclosure.

No system can be guaranteed to be completely secure, but we continuously review and improve our security practices.

Your rights

Depending on your jurisdiction, you may have rights including:

• access to your personal data;
• correction of inaccurate information;
• deletion of your personal data;
• restriction of processing;
• objection to certain processing activities;
• data portability;
• withdrawal of consent where processing is based on consent.

To exercise these rights, email privacy@blocksightlabs.com.

If you are located in the European Union, you also have the right to lodge a complaint with your local supervisory authority, including the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

BlockSight uses cookies and similar technologies for two purposes:

• Essential cookies — required for user authentication, maintaining signed-in sessions, platform security and preventing fraudulent use in the authenticated portal. These are necessary for the operation of the service and cannot be disabled while using authenticated areas of the platform.
• Analytics cookies — on blocksightlabs.com, and only with your consent, Google Analytics 4 records aggregated usage data (pages viewed, approximate location, device category, referrer). Without consent, only cookieless aggregate metrics are recorded. We also store a first-party preference cookie that remembers your consent choice.

You can change or withdraw your analytics consent at any time using the button below.

Children’s privacy

BlockSight is intended for business and professional users and is not directed at children under the age of 16.

We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time.

Where changes are material, we will provide appropriate notice through the platform or by email where appropriate.

The “Last updated” date at the top of this policy indicates the latest revision.

Contact

For privacy-related questions or requests, please contact:

Smart Software Services B.V.
Email: privacy@blocksightlabs.com.