Privacy Policy

Last updated: February 27, 2026

EdgeBlog (“we,” “us,” or “our”) operates the website at edgeblog.ai. This policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

Information you provide

  • Account information. When you create an account, we collect your email address and organization name or domain via our authentication provider (WorkOS). We do not store passwords—authentication is handled entirely by WorkOS.
  • Website URLs. When you use the Blog Demo or add a site, you submit a URL. We store that URL and any publicly accessible content retrieved from it to generate your demo or blog.
  • Content strategy. If you configure a content strategy for your site, we store your audience, tone, keywords, and publishing cadence settings.
  • Author profiles. You may create author profiles that include names, job titles, bios, avatars, and topic expertise areas.

Information collected automatically

  • IP addresses. Stored alongside article generation jobs for abuse prevention and rate limiting. May also be logged transiently in server request logs.
  • User agents and referrers. Collected by Vercel Analytics in anonymous, aggregated form. No individual visitors are identified.
  • Blog analytics. When visitors view published blog pages, we track impressions, visits, and clicks. Visitor identity is pseudonymized using an HMAC-SHA256 hash—we do not store raw visitor IP addresses in analytics data. We do store referrer URLs, user agents, and destination URLs for click events.

Cookies

We use one cookie: sc_blog_demo. It is strictly necessary, httpOnly, used solely for rate limiting the Blog Demo, and expires after 7 days. We do not use marketing, advertising, or tracking cookies.

2. How We Use Your Information

  • To operate the platform, including the dashboard, article generation, and site management
  • To authenticate your identity and manage organization membership
  • To generate and publish articles according to your content strategy
  • To provide analytics on your published blog content
  • To submit published article URLs to search engines via IndexNow
  • To operate and provide the Blog Demo feature
  • To prevent abuse and enforce rate limits
  • To understand aggregate site usage (anonymous analytics)

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Third-Party Services

To provide our services, we transmit data to:

  • WorkOS — authentication, session management, and organization provisioning
  • Urlbox — records and renders your submitted website URL
  • Google Gemini — processes website recordings to generate demo outputs and article images
  • Anthropic Claude — generates article content and performs research
  • Firecrawl — scrapes publicly accessible web content for article generation
  • Inngest — orchestrates background jobs for article and demo pipelines
  • Vercel Blob — stores generated content (articles, templates, images) at publicly accessible URLs
  • IndexNow — submits published article URLs to search engines (Bing, Yandex, and others)
  • Vercel Analytics — anonymous, cookieless website analytics

Each service processes data according to its own privacy policy. We only transmit the minimum data necessary to provide our services.

4. Data Retention

  • Account data. Retained while your account is active. You may request deletion at any time by contacting us.
  • Generated content. Articles, templates, and images are stored in Vercel Blob while your site is active. Soft-deleted items are recoverable for 30 days before permanent removal.
  • Blog analytics. Retained indefinitely for historical reporting. Visitor hashes are pseudonymized and not reversible to individual identities.
  • Demo data. Demo outputs (generated HTML, images, and videos) are retained as long as necessary to provide the service. You may request deletion by contacting us.

5. Your Rights

CCPA (California residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used
  • Delete personal information we have collected from you
  • Opt out of sale. We do not sell personal information
  • Non-discrimination for exercising your privacy rights

GDPR (EU/EEA residents)

If you are located in the EU or EEA, you have the right to:

  • Access the personal data we hold about you
  • Rectification of inaccurate or incomplete personal data
  • Erasure of your personal data (“right to be forgotten”)
  • Data portability — receive your data in a structured, machine-readable format
  • Restrict or object to certain processing of your personal data

To exercise any of these rights, contact us at the email below.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including HTTPS for all communications, encrypted database connections, and access controls limiting who can view or modify your information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page with a revised “Last updated” date.

9. Contact Us

Questions or requests: jack@edgeblog.ai