Privacy Policy

Protecting your personal data matters to us. This policy explains which data we process in connection with the website blxade.dev and the product BLXAde, for which purposes, and on which legal basis — in line with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller responsible for data processing is:

2. Hosting and server log files

When you access this website, the hosting provider automatically stores information in so-called server log files. This may include:

• IP address (possibly truncated/anonymised depending on hosting setup)
• Date and time of the request
• Requested URL / path
• HTTP status code and amount of data transferred
• Referrer URL (if transmitted)
• User agent (browser and operating system)

Processing is carried out to provide and secure the service technically (Art. 6(1)(f) GDPR — legitimate interest in stable and secure operation). Log data is retained only as long as needed for operations, security, and troubleshooting, and is then deleted or anonymised.

3. Waitlist / early access

If you sign up for early access via the form on the website, we process:

• Email address (required)
• Timestamp of the signup
• Source of the signup (e.g. hero or pricing section)
• technical metadata for abuse prevention (e.g. IP-based rate limiting, honeypot fields)

Purpose: managing the waitlist, contacting you about early-access availability, and product-related communication related to your request.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and Art. 6(1)(f) GDPR (abuse prevention). Where we contact you based on consent, Art. 6(1)(a) GDPR applies.

Data is stored in our infrastructure (database) and may be accessed internally for waitlist administration. An optional internal notification (e.g. via a team webhook) may include your email address so new signups can be handled.

You may request deletion of your waitlist entry at any time by emailing [email protected], unless statutory retention obligations prevent immediate deletion.

4. Cookies and tracking

The marketing website currently does not use tracking cookies for advertising or analytics. Where strictly necessary session or security mechanisms are used, they rely on Art. 6(1)(f) GDPR and/or § 25(2) TTDSG (strictly necessary).

If we introduce analytics or marketing tools later, we will update this privacy policy and obtain consent where required.

5. BLXAde desktop software

BLXAde is designed as a local-first desktop workspace. Data you process locally in the application (projects, canvas, terminal sessions, agent configuration) remains on your device unless you yourself send it to third parties (e.g. AI/API providers such as OpenRouter or other services you configure).

Use of external AI and cloud services is governed by those providers’ privacy terms. We recommend reviewing their policies and data-processing terms before connecting them. Bitslix only processes data required for licensing, support, or online features you explicitly enable.

6. Contact

If you contact us by email, we process the data you provide (email address, message content, and related metadata) to handle your enquiry (Art. 6(1)(b) and/or (f) GDPR). Data is deleted when the conversation has ended and no statutory retention periods apply.

7. Recipients and processors

Personal data may be shared with technical service providers that support us with hosting, operations, and support (processors under Art. 28 GDPR). Where required, data-processing agreements are in place. We do not sell your data for advertising purposes.

8. Retention

We store personal data only as long as needed for the purposes described or as required by law (e.g. commercial and tax retention duties). Waitlist entries are deleted or anonymised when the purpose no longer applies and you no longer need early-access contact, or when you request deletion.

9. Your rights

You have the following rights vis-à-vis the controller:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, a simple email to [email protected] is sufficient.

You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. For Saxony (Sachsen), the Saxon Data Protection Commissioner is among the competent authorities.

10. Obligation to provide data

Providing personal data for the waitlist is voluntary, but required if you want us to process your early-access request. Without an email address we cannot contact you.

11. Automated decision-making

We do not use automated decision-making including profiling within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

12. Updates

We may update this privacy policy if the legal situation, our offering, or processing practices change. The current version is always available on this page; the “Effective” date is shown at the top.