Privacy Policy

Blizz is operated by Shweta Bakshi, based in India (“Blizz”, “we”, “us”). For the personal data described in this policy we act as the Data Fiduciary under the DPDP Act, except for data our customers store in the CRM (see section 6).

• Information you give us: your name, work email, phone number, company name and team size when you request a demo, sign up, contact us on WhatsApp or email us.
• Account information: if you sign up for Blizz CRM, your login details (including your Google account name and email if you sign in with Google) and your plan and billing details. Card and UPI payments are handled by our payment provider; we do not store full card numbers.
• Usage information: pages you visit, links you click, device and browser type, approximate location (city level) and how you arrived at our site — only if you accept analytics cookies (see section 4).

We use your personal data only for these purposes:

• To respond to your demo request or question.
• To create and run your Blizz account and provide support.
• To send you product updates and helpful content by email or WhatsApp. You can opt out anytime using the unsubscribe link or by replying “STOP”.
• To understand how our website is used and improve it.
• To bill you and meet our legal and tax obligations.
• To keep our services secure and prevent misuse.

We process your data based on the consent you give us, or for legitimate uses permitted under the DPDP Act, such as providing a service you asked for or complying with the law. We never sell your personal data.

We use a small number of cookies and similar technologies on blizz.world:

• Essential: remembers your cookie choice. This is always on and contains no personal data.
• Analytics (only with your consent): Google Analytics 4 measures visits and which pages are useful, and Microsoft Clarity shows us anonymised heatmaps and session recordings so we can fix confusing parts of the site. Clarity masks text you type into forms.

Analytics only run if you click Accept on our cookie banner. You can change your choice at any time: Cookie Settings.

We share personal data only with service providers that help us run Blizz, under contracts that require them to protect it and use it only on our instructions:

• Hosting and infrastructure: Vercel, Railway, Cloudflare
• Analytics (with consent): Google, Microsoft
• Email delivery: SendGrid
• Messaging: Meta (WhatsApp Business Platform)
• Payments: our payment gateway provider

Some of these providers store data outside India. Where they do, we only transfer data to countries not restricted by the Government of India under the DPDP Act. We may also disclose data if required by law or a valid order from a government authority.

When a business uses Blizz CRM, it may store details of its own leads and customers (for example names, phone numbers and WhatsApp conversations). For that data, the business is the Data Fiduciary and Blizz is its Data Processor: we process it only to provide the service and on the business's instructions.

Each business's data is kept separate from every other business. If you are a lead or customer of a business that uses Blizz, please contact that business directly to exercise your rights; we will help them respond.

• Demo and contact requests: up to 24 months after our last interaction, unless you become a customer.
• Account data: for as long as your account is active. After you close your account, we delete or anonymise it within 90 days, except records we must keep by law (such as invoices, kept for 8 years under Indian tax law).
• Analytics data: up to 14 months.

We use reasonable security safeguards, including encryption in transit (HTTPS) and at rest, role-based access controls, and audit logs. No system is perfectly secure, but if a personal data breach occurs we will inform affected users and the Data Protection Board of India as required by the DPDP Act.

Under the DPDP Act, you have the right to:

• Get a summary of the personal data we hold about you.
• Correct, complete or update your personal data.
• Have your personal data erased.
• Withdraw your consent at any time — as easily as you gave it. This does not affect processing already done.
• Nominate another person to exercise your rights.
• Have your grievances addressed (see section 12).

To use any of these rights, email us at hello@blizz.world. We will respond within 30 days.

Blizz is a business tool and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.

We may update this policy as our product and the law change. We will change the “Last updated” date above and, for significant changes, notify customers by email or in the app.

For questions, requests or complaints about your personal data, contact our Grievance Officer:

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.