Privacy Policy
Effective 6 November 2026. Applies to bluefeather.ai, the Bluefeather plugin for ChatGPT and Codex, and the Bluefeather connector for Claude (together, the "Service").
Bluefeather is operated by Magnificent Labs ("Bluefeather", "we", "us"), established at Carolina MacGillavrylaan 1200, Amsterdam, the Netherlands. We are the controller of the personal data described in this policy. This policy explains what we collect, why, how long we keep it, who we share it with, and the rights you have. We wrote it to be read; if anything is unclear, email hello@bluefeather.ai.
1. Summary
- We keep three things about you: the email address you sign in with, the writing samples you choose to save, and when you created your account and last used it.
- Text you paste to analyze or compare is processed in memory and discarded when the response is sent. We do not store it and we do not log its content.
- We do not sell personal data, we do not use your text to train any model, and we do not run advertising or analytics trackers.
- You can delete your samples at any time from the app or from a chat, and your whole account by emailing us.
2. Information we collect
Information you give us
Account information. When you sign in with Google, we receive the email address and display name of the Google account you choose, and a Google account identifier. We store the email address. We do not receive your Google password, your contacts, your Gmail, or any other Google data, and we request no permission beyond identifying you. If you create an account with an email address and password instead, we store the email address and a salted hash of the password; we cannot see the password itself.
Writing samples. Text you explicitly save as a sample of your own writing, together with the title and kind (email, message, article, notes, other) you give it. Samples are stored until you delete them. They are used only to compute your voice profile, as described in section 6.
Correspondence. If you email us, we keep the correspondence for as long as needed to handle your request.
Information created by using the Service
Voice profile and writing type. A set of numbers derived from your samples (for example average sentence length and how often you use contractions) and the writing type they are closest to. These are computed from your samples when needed; only your current writing type is stored, so we can show how writers on Bluefeather are distributed.
Account activity. The date you created your account and the date you last signed in.
Authorization records. When you connect Bluefeather to ChatGPT, Codex, or Claude, we store the grant and tokens that let that assistant call the Service on your behalf, until you revoke them or they expire.
Information collected automatically
Operational logs. Our hosting provider records request metadata (time, URL path, response status, approximate region, IP address) to run and secure the Service. These logs do not contain the text you analyze or your samples and are kept for up to 30 days.
We do not use advertising or analytics cookies, pixels, or fingerprinting. See section 13 for the cookies we do use.
3. How we use information
- To provide the Service: sign you in, compute your voice profile, analyze and compare text, and show your results on the web and inside your assistant.
- To keep the Service secure: detect abuse, enforce rate limits, and investigate incidents.
- To communicate with you about your account, such as a change to these terms or a security notice. We do not send marketing email.
- To understand usage in aggregate, for example how many writers fall into each writing type. Aggregates cannot identify you.
- To comply with law.
We do not use your text, samples, or profile to train or fine-tune any machine learning model, ours or anyone else's, and we do not sell or rent personal data.
4. Legal bases
Where the General Data Protection Regulation (GDPR) applies, we rely on the following bases:
- Performance of a contract (Article 6(1)(b)) to provide the Service you signed up for, including processing your samples and the text you ask us to analyze.
- Legitimate interests (Article 6(1)(f)) to secure and improve the Service, keep operational logs, and compute aggregate statistics. We have assessed that these interests do not override your rights, given the minimal data involved.
- Legal obligation (Article 6(1)(c)) where we must keep or disclose information under applicable law.
- Consent (Article 6(1)(a)) where we ask for it, for example if we ever add optional features that need it. You can withdraw consent at any time.
5. Text you analyze
When you paste a draft on the website, or an assistant sends text to one of our analysis or comparison tools, that text is measured in memory on our servers and discarded once the response is returned. We do not store it, do not log its content, and do not use it for any other purpose. The same applies to text submitted through the public analyzer on our home page by people who are not signed in.
Because we do not keep it, we cannot retrieve or delete analyzed text after the fact; there is nothing to retrieve.
6. Writing samples and your voice profile
Samples are the only text we store, and only because you ask us to. You decide what to save, and you can view the list of saved samples and delete any of them, or all of them, at any time from the app or by asking your assistant. Deleting all samples also removes your voice profile and stored writing type.
Samples may contain personal data about you or about other people, for example names in an email you wrote. Please save only text you have the right to store, and prefer samples without third-party personal data where you can. We process samples solely to compute your profile and compare drafts against it, and we never display them to anyone but you.
7. Using Bluefeather inside ChatGPT, Codex, or Claude
When you use Bluefeather through an AI assistant, that assistant's provider (OpenAI for ChatGPT and Codex, Anthropic for Claude) is a separate controller of your conversation. Their own privacy policies govern what they store and how they use it. We receive only what the assistant sends to a specific Bluefeather tool: the text to analyze or compare, or the sample to save. We cannot see the rest of your conversation, and we do not send anything to the assistant provider other than the tool's response.
Connecting an assistant creates an authorization grant in our systems. You can revoke it at any time from the assistant's settings; revoking does not delete your Bluefeather account or samples.
8. Who we share information with
We share personal data only with service providers that process it on our behalf under contract, and only as needed to run the Service:
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, storage, email delivery, and network security | All data described in this policy, processed on Cloudflare's network |
| Google LLC | Sign-in | Your Google account email, name, and identifier at sign-in |
We may also disclose information if required by law or a valid legal request, to protect the rights, safety, or property of Bluefeather or others, or as part of a merger, acquisition, or sale of assets, in which case we will tell you before your data becomes subject to a different policy.
We do not share personal data with advertisers or data brokers.
9. Retention
| Data | Kept for |
|---|---|
| Email address, account dates, writing type | Until you delete your account, then removed within 14 days |
| Writing samples | Until you delete them or your account |
| Text sent for analysis or comparison | Not stored |
| Password reset links | 1 hour, or until used |
| Assistant authorization grants and tokens | Until revoked or expired |
| Operational logs | Up to 30 days |
| Support correspondence | Up to 2 years after the matter is closed |
10. Security
All traffic to the Service is encrypted in transit with TLS. Samples and account data are stored in Cloudflare's managed database with encryption at rest. Assistant access tokens are stored only as hashes; the data they protect is encrypted with keys derived from the token itself. Passwords are stored only as salted PBKDF2 hashes, and reset links are single-use and expire after an hour. Access to production systems is limited to the people who operate the Service.
No system is perfectly secure. If we learn of a breach affecting your personal data, we will notify you and the relevant authority as required by law.
11. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
You can exercise most of these rights yourself: view and delete samples in the app or from a chat, and revoke assistant access in the assistant's settings. For anything else, including deleting your account or receiving a copy of your data, email hello@bluefeather.ai from the address on your account. We respond within 30 days and will not discriminate against you for exercising your rights.
12. International transfers
We are established in the Netherlands. Our hosting provider operates a global network, so your data may be processed in data centres outside the European Economic Area, including in the United States. Where that happens, transfers are protected by the European Commission's Standard Contractual Clauses and, for providers certified under it, the EU-US Data Privacy Framework.
13. Cookies
We use only cookies that are strictly necessary for the Service to work:
| Cookie | Purpose | Lifetime |
|---|---|---|
| bf_session | Keeps you signed in on bluefeather.ai | 30 days |
| __Host-bf_gstate | Protects Google sign-in against forged requests | 10 minutes |
| __Host-oauth-* | Protects the assistant authorization page against forged or framed requests | 10 minutes |
Because none of these are optional or used for tracking, we do not show a cookie banner.
14. Children
The Service is not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has created an account, email us and we will delete it.
15. Changes to this policy
We may update this policy as the Service or the law changes. The date at the top shows when it was last revised. For material changes we will give you notice in advance, by email or inside the Service, before they take effect.
16. Contact
Magnificent Labs
Carolina MacGillavrylaan 1200, Amsterdam, the Netherlands
hello@bluefeather.ai