Data Deletion

1. Introduction

BladeOS respects your right to control your personal data. This page explains how you can request that we delete your personal information from our systems, in compliance with the Canadian federal Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), and the EU General Data Protection Regulation (GDPR) for users in the European Union.

This page also serves as the Facebook Data Deletion Callback URLrequired by Meta's platform policies for applications that use Facebook Login. If you signed up or log in to BladeOS using "Continue with Facebook," you can use the instructions below to request that your data be removed from our servers.

For a full description of the personal data we collect and how we use it, please review our Privacy Policy.

2. How to Request Data Deletion

You can request deletion of your BladeOS data through any of the following options:

Option 1 - Through Your BladeOS Account

Log in to your BladeOS account and navigate to your dashboard or profile settings to submit an account deletion request directly. If self-serve account deletion is not yet available in your dashboard, please contact our support team at [email protected] and we will process your request manually.

Option 2 - Via Email

Send a data deletion request by email to:

Option 3 - For Facebook Login Users

If you signed up for BladeOS using "Continue with Facebook," you can remove BladeOS from your Facebook account settings at any time:

1. Open Facebook and go to Settings & Privacy → Settings.
2. Navigate to Apps and Websites.
3. Find BladeOS in the list and click Remove.

Removing BladeOS from your Facebook settings will revoke our access to your Facebook account. However, it does not automatically delete the data already stored on BladeOS servers. To ensure complete deletion from our systems, please also send a deletion request to [email protected] using Option 2 above.

3. What Data Will Be Deleted

Upon receipt and verification of a valid data deletion request, BladeOS will permanently delete the following personal data associated with your account:

• Account information: Email address, name, password hash (bcrypt), and profile/bio details.
• Social login links: AuthProvider records linking your Google or Facebook account to your BladeOS account. Provider access tokens are never stored by BladeOS.
• Tenant / workspace data: Forge name, profile URL slug, custom domain settings, and associated configuration.
• Product listings: All knife and product listings you have created, including associated images.
• Commission records: Commission requests, statuses, and associated communication.
• Work requests, quotes, and messages: Work Pool requests you have submitted or received, quotes, and platform messages.
• Reviews and ratings: Reviews and ratings you have written on the platform.
• Verification records: Identity verification documents, domain verification records, and social profile verification data.
• Title and credential claims: Professional titles and credentials associated with your account.
• Customer preferences and history: Customer account preferences, saved searches, and interaction history.
• Contact form submissions: Any contact form submissions you have sent through the platform.
• Uploaded files: Product images, work request attachments, and drop images stored on our servers or S3-compatible storage (Cloudflare R2, MinIO, or similar).

4. What Data May Be Retained

In some circumstances, certain data may be retained after your deletion request, as described below. We are committed to transparency about these exceptions.

• Subscription billing records: BladeOS uses Stripe for payment processing. We will delete the Stripe customer ID association from your account, but Stripe may independently retain transaction records in accordance with their own data retention policies and applicable financial regulations.
• Audit logs: Certain anonymized audit log entries (e.g., records of administrative actions) may be retained for security, fraud prevention, and regulatory compliance purposes, as permitted by applicable law. These entries will be stripped of personally identifiable information where possible.
• Aggregated and anonymized data: Data that has been anonymized and aggregated for platform analytics or performance measurement may be retained, as it can no longer be linked back to any individual.
• Legal obligations: BladeOS may retain data if required by law, court order, government regulation, or ongoing legal proceedings. We will inform you of any such legal hold where permitted.
• Encrypted database backups: Your data may persist in encrypted, off-site backups (e.g., Backblaze B2) for a limited retention period - typically 30 to 90 days - after which it will be permanently purged through the normal backup rotation cycle.

5. Processing Timeline

Data deletion requests will be processed within 30 daysof receipt, in accordance with PIPEDA, Quebec's Law 25, and GDPR requirements. We may contact you to verify your identity before processing your request.

Once your data has been deleted, you will receive a confirmation email at the address associated with your account (or the email address from which you submitted the request).

6. Third-Party Data

BladeOS integrates with several third-party services that may independently hold some of your data subject to their own privacy policies. BladeOS will make reasonable efforts to request deletion from these services where possible, but cannot guarantee or control the data retention practices of third parties.

• Stripe - Payment processing and subscription billing. May retain transaction records per their own retention policies.
• Brevo (formerly Sendinblue) - Email and SMS notifications. May retain contact and message logs.
• Cloudflare - CDN, DDoS protection, and DNS. May retain access logs per their own policies.
• Sentry - Error tracking. May retain anonymized error reports and stack traces.
• Backblaze B2 - Encrypted database backup storage. Data is purged on the normal backup rotation schedule.
• Google - Social login (OAuth 2.0). BladeOS does not store Google access tokens. Refer to Google's Privacy Policy for their own data handling.
• Facebook / Meta - Social login (OAuth 2.0). BladeOS does not store Facebook access tokens. Refer to Meta's Privacy Policy for their own data handling.

We encourage you to review the privacy policies of each of these services and submit your own deletion requests to them where applicable.

7. Contact

If you have any questions about this page or your data deletion rights, please contact us: