BlurAway Privacy Policy

Effective Date: July 1, 2026

This Privacy Policy explains what information BlurAway, operated by Telion Labs LLC ("BlurAway," "we," "us," or "our"), collects, how we use it, and the choices you have. It should be read together with our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.

1. Information We Collect

Video you upload. When you use BlurAway, your video is uploaded directly to our object storage and processed to detect and redact faces. We hold the original upload and the generated output only transiently, for processing, preview, and download (see the Data Retention section below).

Account information. If you create an account, we collect your email address and a securely hashed version of your password. We do not store your password in plain text.

Credit and transaction records. If you purchase credits, we keep records of your purchases, credit balance, and the credit charges associated with your exports.

Operational and non-content data. To operate and improve the Service, we process non-content technical data such as file format, duration, processing time, error codes, and aggregated usage statistics. This mirrors Section 5 of our Terms of Service.

We do not require an account to use the free tier.

2. Face Detection and Biometric Data

BlurAway is a face-redaction tool. To redact faces, the Service automatically detects the location of faces within each frame and tracks those locations across the video. This produces a redaction manifest — a record of where detected faces appear over time — which drives the blur, pixelate, box, or emoji effect you choose.

How we handle this:

• Face detection is performed transiently, as part of processing, to produce the redaction manifest.
• We use face-location data only to redact faces in your video. We do not use it to identify, recognize, or verify the identity of any individual, and we do not sell it.
• We do not use your video, extracted frames, audio, or outputs to train face-recognition or other machine-learning models. This mirrors Section 5 of our Terms of Service.

Depending on the content and your location, face-related data may be regulated as biometric or sensitive personal information under laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), Washington's My Health My Data Act, and consumer-privacy laws including the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) and the EU and UK General Data Protection Regulation (GDPR/UK GDPR). These laws may impose consent, notice, or recordkeeping obligations on the person who records or uploads a video. As described in our Terms of Service, you are responsible for obtaining any consent legally required for the content you upload and process.

3. How We Use Information

We use the information we collect to:

• Provide the Service — upload, process, detect, redact, preview, and deliver your video;
• Operate accounts, process credit purchases, and apply credit charges to exports;
• Maintain security, prevent fraud and abuse, and enforce our Terms;
• Diagnose failures and provide support you request; and
• Operate, monitor, and improve the Service using non-content operational data.

We do not sell your video or face-location data, and we do not use your uploaded content to train general-purpose or customer-facing machine-learning models.

4. Retention and Deletion

• Original uploads and generated outputs are scheduled for deletion from active processing systems within 24 hours after processing.
• Where the feature is available, you may request earlier deletion ("delete now").
• Redaction manifests, account records, and credit/transaction records are retained as described in our Terms of Service (Section 6).
• Deletion from backups, caches, logs, failed-job storage, and disaster-recovery systems may take additional time, and we may retain certain records longer where required for security, fraud prevention, dispute resolution, or legal compliance.

BlurAway is not a permanent storage or backup service. You are responsible for downloading and retaining any output you wish to keep.

5. Service Providers (Sub-processors)

We rely on third-party infrastructure and service providers to operate BlurAway. They process information only as needed to provide their service to us. The categories we use are:

• Application hosting (API) — runs the API that manages accounts, jobs, and requests — Google LLC (Google Cloud Run);
• GPU / CPU compute — face detection and video rendering — Modal Labs, Inc.;
• Object storage — holding uploads and outputs transiently — Cloudflare, Inc. (Cloudflare R2);
• Content delivery & edge — serving the website and routing API traffic — Cloudflare, Inc.;
• Database — account, job, and transaction records (PostgreSQL) — Neon, Inc.;
• Queue / cache — coordinating processing jobs (Redis) — Upstash, Inc.; and
• Payment / merchant of record — processing purchases, billing, tax, and refunds — Paddle.com Market Limited.

Paddle acts as the merchant of record for purchases and processes your payment and billing information under its own privacy notice; we do not receive or store your full payment card details.

We may update this list as our service providers change; material changes will be reflected in this policy.

6. Cookies and Local Storage

BlurAway stores an authentication/session token in your browser's localStorage so that your guest session or account stays signed in and can access the jobs you create. This token remains until you sign out or clear your browser storage. We use this for core functionality, not for advertising.

If we add analytics or other cookies in the future, we will update this section and obtain any required consent.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing, under laws such as CCPA/CPRA and GDPR/UK GDPR.

• You can request access to, deletion of, or a copy of your account information.
• Where the feature is available, you can delete an upload and its output immediately ("delete now").
• You can sign out at any time, which removes the session token stored in your browser.

To make a request, contact us at [email protected]. We may need to verify your identity before acting on a request, and some records may be retained where permitted or required by law. The specific rights available to you depend on where you live and the applicable law.

8. Children

BlurAway is not directed to children, and you must be at least 18 years old to use it, as described in our Terms of Service.

9. International Users

BlurAway is operated from the United States. If you access it from outside the United States, your information may be processed in the United States and other countries, which may have different data-protection laws than those in your country.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will apply prospectively and will be communicated as required by law. The version and effective date displayed when you use the Service will govern.

11. Contact

Questions or privacy requests: [email protected]

Other contact addresses (support, copyright, abuse) are listed in our Terms of Service.