Data retention policy
In accordance with GDPR and CCPA, we retain personal data only as long as necessary to provide our Services, fulfill the purposes for which it was collected, and comply with legal, regulatory, or contractual obligations. Retention periods vary depending on the type of data:
• Slack account and authentication data is retained while the user’s account is active and deleted upon account closure or verified deletion request.
• Usage and interaction data (e.g., submitted prompts, badge activity, feature use) is retained to personalize the user experience and improve service quality.
• Compliance-related data (e.g., logs, audit trails) may be retained for longer periods where required by law.
When data is no longer needed, we securely delete or anonymize it in accordance with applicable laws and industry best practices.
Data archiving and removal policy
Personal data that must be retained for legal, regulatory, or business continuity purposes is securely archived with restricted access. All archived data is subject to periodic reviews to ensure it is not retained longer than necessary.
In accordance with GDPR (right to be forgotten) and CCPA (right to deletion), users may request that their personal data be deleted at any time. Upon receiving a verified request, we will delete all personal data from our systems and instruct any third-party processors to do the same — unless retention is required for legal compliance, fraud prevention, or dispute resolution.
Deletion requests can be submitted via email to blueberryai-privacy@blueberryteam.com. We may request additional information to verify the identity of the requestor before processing the request.
Data storage policy
User data is stored securely on AWS servers located in the EU [Dublin], in accordance with GDPR and CCPA requirements. We retain data only as long as necessary for product functionality, legal compliance, or user support. All data is encrypted in transit and at rest. Users may request data deletion at any time.
We store minimal Slack metadata, anonymized user inputs, and usage logs — all encrypted and stored securely in the EU. Data is retained only as needed and deleted upon request, in line with GDPR and CCPA.
Data center location(s)
Ireland
Data hosting details
Cloud, hosted on AWS
App/service has sub-processors
no
App/service uses large language models (LLM)
yes
LLM model(s) used
gpt 4.1 or gpt 4.1-mini
LLM retention settings
OpenAI retention policy: OpenAI may securely retain API inputs and outputs for up to 30 days to provide the services and to identify abuse. After 30 days, API inputs and outputs are removed from our systems, unless we are legally required to retain them.
LLM data tenancy policy
We are using OpenAI's public LLM models via the exposed APIs. We are not hosting LLMs on our own.
LLM data residency policy
We are using OpenAI's public LLM models via the exposed APIs. We are not hosting LLMs on our own.