BLSFlow Privacy Policy

This Privacy Policy explains how BLSFlow collects, uses, stores, shares, and protects information related to your use of BLSFlow.

1. Information We Collect

1.1 Account Information

We may collect your email address, username, display name, password hash, language preference, registration time, login time, account status, login IP address, browser information, device information, and security logs.

If you use Google sign-in, we receive the necessary information authorized by you, such as email address, public profile, or unique identifier. We request only the minimum permissions required for account login.

1.2 Server and Device Data

To provide server management features, we may collect server ID, server name, hostname, internal IP, public IP, operating system, CPU, memory, disks, network cards, BMC information, hardware serial number, sensor data, power data, online status, runtime, health status, Agent version, connection status, incident events, cluster, tags, and notes.

1.3 Commands, Tasks, and Configuration Data

We may process command templates, instant commands, task parameters, command snapshots, execution status, stdout, stderr, error logs, project configurations, scheduling policies, wallet addresses, mining pool addresses, node addresses, webhook configurations, and notification settings.

Do not submit private keys, seed phrases, plaintext passwords, payment credentials, or other highly sensitive information that BLSFlow should not process.

1.4 Subscription, Payment, and Seat Data

We may collect subscription type, seat quantity, free seats, paid seats, reward seats, activated servers, seat release records, order number, billing cycle, payment status, failed payment records, cancellation records, and transaction references returned by Antom.

BLSFlow currently uses Antom as its sole payment service provider. BLSFlow usually does not directly store full card numbers, payment account passwords, or payment credentials. Such information is processed by Antom under its own rules.

1.5 Energy, Cost, and Analytics Data

We may collect or calculate server power, running time, electricity usage, cluster electricity price, electricity price snapshots, coverage rate, energy bills, cost analytics, and related history.

1.6 Referral and Reward Data

If you use referral features, we may collect referral links, inviter and invited-user relationship data, invited-user registration status, connected-server status, 72-hour online verification status, reward issuance status, reward issuance time, rejection or revocation reasons, and risk review records.

1.7 Cookies and Similar Technologies

We may use cookies, Local Storage, Session Storage, or similar technologies to maintain login sessions, language preferences, security status, cookie consent status, and analytics. Cookies or local storage necessary for sign-in, security, language selection, and core service functionality may be used where permitted by applicable law.

BLSFlow uses a self-hosted Matomo deployment located in Hong Kong in default cookie mode for website and product analytics. Matomo may use first-party cookies and JavaScript to measure visits, page usage, feature usage, performance, and product experience. IP anonymization is enabled in our Matomo configuration, and we do not use Matomo data for cross-site advertising tracking.

Where applicable law requires prior consent, we use non-essential analytics cookies only after obtaining consent. Selecting "Accept All" in the cookie notice means that you consent to necessary technologies and Matomo analytics cookies. You may withdraw consent at any time by blocking or clearing cookies in your browser settings. Clearing necessary cookies or local storage may sign you out or affect some core functionality.

2. How We Use Information

We use information to:

• Create, log in to, verify, and protect accounts
• Connect, identify, monitor, and manage servers
• Execute commands, tasks, project configurations, project switching, and scheduling policies
• Calculate seat quotas, activate servers, and release seats
• Process subscriptions, orders, renewals, cancellations, failed payments, and billing records
• Send verification codes, alerts, task notifications, security notices, billing notices, and service announcements
• Handle referral rewards and anti-abuse checks
• Troubleshoot issues, prevent abuse, maintain security, audit operations, and comply with legal obligations
• Use Matomo analytics to understand product access, feature usage, and page performance, and to improve product experience, interface, stability, and service quality

2.1 Legal Bases for Processing

Depending on the context, we process information on one or more of the following bases: performing our contract with you; complying with legal obligations; pursuing legitimate interests such as protecting accounts, servers, and the platform, preventing fraud, troubleshooting, and improving the service; or your consent. Where processing is based on consent, you may withdraw consent, without affecting the lawfulness of processing carried out before withdrawal.

3. How We Share Information

We do not sell your personal information.

We may share necessary information with:

• Cloud service, email, log monitoring, customer support, and security service providers
• Antom, for subscription payments, recurring billing, failed payments, transaction risk control, and payment records
• Google and other login providers, to complete OAuth login
• Cloud infrastructure providers hosting our self-managed Matomo deployment, which BLSFlow controls for website and product analytics
• Webhook, API, or notification endpoints configured by you
• Courts, regulators, law enforcement, or other parties where required by law or dispute resolution
• Relevant parties in a merger, acquisition, financing, asset transfer, or similar transaction, subject to lawful and reasonable confidentiality conditions

4. Cross-Border Processing

BLSFlow serves users globally. Your information may be processed in Hong Kong, your location, cloud infrastructure locations, Antom-related locations, and other countries or regions. Our self-hosted Matomo analytics deployment is located in Hong Kong. Data protection laws may differ between jurisdictions. We take reasonable measures to protect your information according to applicable law.

For jurisdictions that require safeguards for cross-border transfers, we use contractual protections, service-provider security measures, adequacy mechanisms, consent, or other transfer mechanisms recognized by applicable law where appropriate.

5. Retention

We retain information only for as long as necessary for the purposes described in this Policy, unless a longer period is required for legal, financial, tax, audit, security, dispute resolution, or backup reasons.

In general:

• Account information is retained while the account exists
• Subscription, order, and payment records are retained as needed for finance, tax, payment disputes, and audits
• Task logs and execution history are retained for 3 months by default
• Security logs, operation logs, and necessary audit records may be retained longer for security, troubleshooting, disputes, or legal requirements
• After a verified account deletion request is accepted, we will delete or anonymize your account and service data from active systems within 7 business days, except for limited records that must be retained for legal, payment, security, fraud prevention, dispute, or backup reasons
• Data written to backups before account deletion will be isolated from ordinary business use and deleted or overwritten during the normal backup cycle, no later than 6 months after the deletion request, unless applicable law requires longer retention

6. Security

We use reasonable technical and organizational measures to protect information, including encryption in transit, access control, permission management, log auditing, backups, monitoring, and security alerts.

No internet or remote server management system can be guaranteed to be absolutely secure. You should also protect your account password, access token, API key, webhook URL, and server permissions.

7. Your Rights

Subject to applicable law, you may request access, correction, deletion, restriction, export, object to processing, or withdraw consent. You may also cancel subscriptions, block or clear non-essential cookies through browser settings, delete servers, release seats, or stop using the service.

We may need to verify your identity before processing a request. Some requests may not be completed immediately due to legal obligations, security audits, dispute handling, financial records, payment records, or technical limitations.

8. Direct Marketing

If we send product updates, promotions, or marketing messages, we will provide an unsubscribe method where required by applicable law. You may opt out of marketing messages, but you may still receive verification codes, security notices, billing notices, service changes, and other necessary communications.

9. Children

BLSFlow is not intended for minors. We do not knowingly collect personal information from minors. If you believe a minor has provided information to us, contact us to request deletion.

10. Google User Data

If you use Google sign-in, BLSFlow uses Google user data only to provide account login, security verification, account identification, and service access. We do not sell Google user data and do not use Google user data for purposes unrelated to user-facing features.

11. Matomo Analytics

BLSFlow uses a self-hosted Matomo deployment located in Hong Kong in default cookie mode. Matomo may place first-party analytics cookies on the BLSFlow domain. IP anonymization is enabled. We use Matomo to understand website and product usage and to improve product quality, and not for cross-site advertising targeting.

Selecting "Accept All" in the cookie notice means that you consent to Matomo analytics cookies. You may withdraw consent by blocking or clearing cookies in your browser settings.

For more information about cookie categories, names, purposes, and retention periods, see the Cookie Policy.

12. Updates

We may update this Privacy Policy from time to time. Material changes may be notified through in-product notices, email, login page prompts, or other reasonable methods. If a change requires new consent under applicable law, we will obtain valid consent before carrying out the relevant processing.

13. Contact

Uplands Global Trading Limited
jiangshuihk@gmail.com